Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2C7A5EA713D11F184C9DBC0CE1D38B0.roa
File:                     E2C7A5EA713D11F184C9DBC0CE1D38B0.roa (raw, json)
Hash identifier:          dWUNn4NhjsVc7uV6CYO+judefWtCIvSV7zMQxDkCvIU=
Subject key identifier:   08:F9:89:EF:54:58:7D:79:81:69:82:91:49:0F:EF:DC:16:56:3A:40
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C08B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2C7A5EA713D11F184C9DBC0CE1D38B0.roa
Signing time:             Fri 26 Jun 2026 09:03:24 +0000
ROA not before:           Fri 26 Jun 2026 09:03:19 +0000
ROA not after:            Thu 30 Jul 2026 09:03:19 +0000
asID:                     401783
IP address blocks:        156.231.63.0/24 maxlen: 24
                          156.231.106.0/24 maxlen: 24
                          156.231.128.0/24 maxlen: 24
                          156.231.129.0/24 maxlen: 24
                          156.231.133.0/24 maxlen: 24
                          156.233.66.0/24 maxlen: 24
                          156.249.183.0/24 maxlen: 24
                          156.249.185.0/24 maxlen: 24
                          156.253.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114827 (0x1c08b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 26 09:03:19 2026 GMT
            Not After : Jul 30 09:03:19 2026 GMT
        Subject: CN=6a3e405c-83bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:1d:80:b2:7e:a9:16:84:c4:88:f8:c2:95:
                    e4:79:66:eb:d8:b5:18:76:81:84:5d:88:6c:cc:df:
                    00:4a:b0:38:88:9c:00:a0:ae:91:c8:84:f3:84:df:
                    d3:11:fb:fa:0c:4c:47:2d:81:d1:b4:b7:4d:9a:ee:
                    6e:44:9b:4d:55:3f:ed:5e:81:a9:56:09:03:2e:cd:
                    ef:c2:70:b5:d4:f4:a9:af:4d:9c:25:13:d5:a1:e6:
                    42:aa:51:55:61:0f:a9:e4:a6:cc:c8:f8:ae:a4:e4:
                    a5:ca:1d:22:5b:ef:8a:1f:51:06:cc:de:50:b3:16:
                    21:b9:59:94:3f:eb:f2:b2:b5:8c:c4:e0:8e:ba:f9:
                    76:24:33:72:07:33:f2:1f:95:fd:d0:c7:d6:fb:8c:
                    41:12:14:93:58:9b:11:c3:7b:39:29:34:8d:15:5a:
                    2d:78:f0:a1:02:e0:13:fe:7f:94:64:a1:d7:9a:e0:
                    d3:2e:37:47:24:6b:70:86:2c:22:87:dd:e9:2c:3c:
                    ee:c6:5c:6a:24:be:4c:fe:27:a9:a9:16:61:08:0d:
                    04:cb:40:fd:16:60:9b:76:8a:1c:2d:68:44:a8:40:
                    7b:3a:67:8e:17:34:33:27:5d:5a:68:15:7c:7d:0e:
                    43:6f:54:bd:b1:51:9d:e1:62:9e:f3:31:b9:a2:9f:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F9:89:EF:54:58:7D:79:81:69:82:91:49:0F:EF:DC:16:56:3A:40
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2C7A5EA713D11F184C9DBC0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.63.0/24
                  156.231.106.0/24
                  156.231.128.0/23
                  156.231.133.0/24
                  156.233.66.0/24
                  156.249.183.0/24
                  156.249.185.0/24
                  156.253.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:48:f5:36:17:1f:99:5c:f7:33:c0:82:07:3c:65:e7:d3:6a:
         01:7f:cd:48:82:c5:47:7a:15:62:56:f1:5a:95:22:97:4c:0d:
         9d:de:42:07:29:3d:07:54:6b:7d:66:bd:21:3f:2f:94:f7:1f:
         c1:1b:04:c2:11:ab:a5:a6:84:6f:1c:67:32:56:be:7d:61:bd:
         fd:bd:f0:2c:80:ec:83:b8:f9:2f:43:98:3b:d2:16:2f:eb:a5:
         6e:04:53:35:80:a1:ab:e4:80:64:ef:99:10:8b:a7:d2:e1:5b:
         8d:49:32:f5:f0:f4:73:db:19:61:9a:84:33:e9:d2:0a:9d:95:
         04:7b:cd:5c:2f:ad:a7:84:d6:1b:4e:f0:df:7c:46:5f:76:d5:
         2c:4d:39:d4:ce:07:34:23:7e:d4:f9:e2:00:f8:f0:61:2f:0b:
         ac:51:1c:9c:bf:b1:ab:df:a1:ff:84:2c:79:be:93:f6:c8:d1:
         10:8a:cf:17:85:60:2b:b6:df:bb:c7:28:cb:41:90:bf:a8:04:
         f0:0c:f9:67:d6:3e:bb:54:13:1e:51:e8:99:5b:3a:8f:7c:eb:
         ae:9e:9c:b2:ca:46:35:5e:a2:9f:83:87:fa:3f:99:f0:35:2e:
         cc:75:71:d8:26:b9:a9:e8:ad:92:c8:4b:e6:f5:1e:e9:16:83:
         86:d2:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:18 2026 by rpki-client