Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB79070472DE11F1B369CBA6CE1D38B0.roa
File:                     EB79070472DE11F1B369CBA6CE1D38B0.roa (raw, json)
Hash identifier:          ubns1UOItwb7FDRxpqqZoaHjTrnb2K7GI4GMjceNxLw=
Subject key identifier:   57:72:6E:0C:C0:79:9D:5A:CE:2F:ED:B4:F9:27:12:90:48:6A:AE:10
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C113
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB79070472DE11F1B369CBA6CE1D38B0.roa
Signing time:             Sun 28 Jun 2026 10:48:39 +0000
ROA not before:           Sun 28 Jun 2026 10:48:33 +0000
ROA not after:            Mon 31 Aug 2026 10:48:33 +0000
asID:                     399077
IP address blocks:        156.251.27.0/24 maxlen: 24
                          156.251.28.0/24 maxlen: 24
                          156.251.29.0/24 maxlen: 24
                          156.251.30.0/24 maxlen: 24
                          156.251.31.0/24 maxlen: 24
                          156.251.32.0/24 maxlen: 24
                          156.251.33.0/24 maxlen: 24
                          156.251.34.0/24 maxlen: 24
                          156.251.35.0/24 maxlen: 24
                          156.251.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114963 (0x1c113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 28 10:48:33 2026 GMT
            Not After : Aug 31 10:48:33 2026 GMT
        Subject: CN=6a40fc07-943d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:82:74:e0:f3:29:2f:6a:5a:79:dc:37:ca:
                    cd:2b:56:48:2b:ff:30:b2:1e:59:1a:dc:7f:db:3f:
                    0c:a1:b1:0e:0a:14:82:ac:c8:ce:74:e4:98:23:0f:
                    cd:17:6b:1a:92:5d:de:71:ea:3c:28:66:85:13:e3:
                    ee:7f:83:6d:c1:fb:72:ee:67:4d:45:bd:9b:ff:7f:
                    1b:fb:d8:ae:58:c4:ee:00:52:55:29:a7:99:ef:23:
                    08:f3:0f:9c:36:a1:56:cd:e5:72:5a:2b:f8:46:51:
                    58:30:a3:02:52:7b:20:59:15:9b:2c:3f:d8:33:a5:
                    9f:fa:fe:54:eb:7a:61:5b:f1:23:f5:13:1a:0f:dd:
                    74:f3:f7:b7:eb:69:40:ec:90:e0:fb:11:b4:9d:ab:
                    a4:3c:4d:94:cf:68:af:5d:02:14:de:11:63:2b:87:
                    a5:cc:73:2f:72:8d:55:78:0f:86:5b:14:30:cc:af:
                    f8:e7:74:0e:ef:07:cd:c3:7b:d7:17:3b:ed:7b:04:
                    26:25:a3:cb:ba:15:dc:46:83:f3:49:b8:64:a4:a1:
                    bc:ee:31:40:11:fb:0a:2e:5a:75:a6:70:0c:df:e5:
                    24:7a:9e:1e:98:b3:9e:7a:4d:a6:91:1c:8f:46:00:
                    f1:58:c3:93:d8:d4:56:d4:e4:7b:55:b0:6e:ff:3d:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:72:6E:0C:C0:79:9D:5A:CE:2F:ED:B4:F9:27:12:90:48:6A:AE:10
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB79070472DE11F1B369CBA6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.27.0-156.251.36.255

    Signature Algorithm: sha256WithRSAEncryption
         57:be:2a:c2:e6:a9:5a:b9:eb:f1:87:00:fa:ea:c7:6e:22:03:
         47:a3:79:5c:ae:9b:38:66:00:e1:47:56:20:b7:c3:10:8b:08:
         7c:66:ca:2a:59:e8:31:34:86:2d:c2:8d:0e:7e:33:01:18:09:
         93:f9:03:51:b9:3a:e7:33:c0:d3:c8:07:80:a6:ca:59:27:a1:
         95:c1:c1:ef:50:c2:4c:8d:35:21:65:aa:c5:43:5b:0d:a8:67:
         1e:7d:2a:a3:23:7c:3d:bd:33:a4:80:30:7f:71:bf:61:43:5a:
         60:50:b0:47:14:50:95:db:6a:d5:45:da:94:61:3d:22:00:d1:
         77:13:fe:29:4b:c7:c5:67:9e:4c:fd:78:f0:61:9a:84:0b:b6:
         0c:2b:7f:9f:f8:d5:09:ef:8b:c0:b0:54:98:b9:a6:bd:f5:d1:
         75:90:27:03:cc:91:7b:91:42:87:53:55:f9:b5:3c:fb:d9:4f:
         55:70:6e:a4:43:4b:fd:0c:95:a2:c2:a9:9d:81:35:0e:6b:e9:
         e7:af:dc:b5:48:fd:47:13:fb:64:f3:49:8a:40:aa:ba:6c:fd:
         6a:97:ef:9d:64:4d:14:fa:44:20:a2:d3:0a:c8:86:c3:40:87:
         7b:c5:92:67:9e:d9:81:11:64:08:ac:51:7a:58:1d:b6:13:57:
         ed:58:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:01 2026 by rpki-client