Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F65A1B0E73E711F1AED5A9E9CE1D38B0.roa
File:                     F65A1B0E73E711F1AED5A9E9CE1D38B0.roa (raw, json)
Hash identifier:          Tm1BffAsCfw7Orz1HzZPMpLTIJo447KClzixrbfFJQw=
Subject key identifier:   E6:26:7D:88:79:58:BE:34:F2:48:5B:26:E4:C3:B6:92:F9:90:11:B4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C19A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F65A1B0E73E711F1AED5A9E9CE1D38B0.roa
Signing time:             Mon 29 Jun 2026 18:25:53 +0000
ROA not before:           Mon 29 Jun 2026 18:25:49 +0000
ROA not after:            Mon 31 Aug 2026 18:25:49 +0000
asID:                     399077
IP address blocks:        156.251.17.0/24 maxlen: 24
                          156.251.18.0/24 maxlen: 24
                          156.251.19.0/24 maxlen: 24
                          156.251.20.0/24 maxlen: 24
                          156.251.21.0/24 maxlen: 24
                          156.251.22.0/24 maxlen: 24
                          156.251.23.0/24 maxlen: 24
                          156.251.24.0/24 maxlen: 24
                          156.251.25.0/24 maxlen: 24
                          156.251.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115098 (0x1c19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 29 18:25:49 2026 GMT
            Not After : Aug 31 18:25:49 2026 GMT
        Subject: CN=6a42b8b1-a378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:9d:40:82:40:d4:8e:2c:de:9a:2d:86:96:
                    07:1c:44:dd:50:ec:3f:87:1c:a1:60:a7:14:70:08:
                    cb:23:29:b1:88:6a:4f:ba:54:94:f5:e4:2d:54:c2:
                    24:6b:5f:10:0c:3b:7e:82:09:8e:bb:6a:82:ea:8c:
                    b4:7b:82:77:47:07:bc:cb:27:75:70:2b:ad:c0:ce:
                    1d:63:a9:ec:8e:2b:f0:01:6c:c1:b2:0e:b6:cc:a1:
                    a5:1d:cf:36:f2:7c:19:fd:80:b8:13:69:a8:7d:d7:
                    20:e9:54:70:b1:b1:aa:33:bd:7b:04:15:b2:37:72:
                    80:a6:1f:06:23:94:09:24:3f:48:3a:12:53:9c:9a:
                    fa:4a:01:03:dc:56:b8:d2:07:47:9a:5b:b5:4d:1c:
                    33:2e:ba:9c:c2:93:8e:88:74:07:88:c5:ab:38:72:
                    da:ce:8e:42:26:2a:69:b3:6f:07:2e:f0:b6:cf:7d:
                    83:48:17:fc:d8:9a:64:b2:61:66:69:a9:a1:f3:43:
                    0d:d4:86:77:cb:1e:76:ee:59:62:8e:24:68:3e:e3:
                    d2:35:25:41:68:16:e8:3f:83:d6:32:26:a0:56:bd:
                    0e:38:e9:be:28:43:01:b1:35:0f:68:b6:03:a2:e6:
                    fd:12:4b:65:79:08:cb:2a:35:a7:9d:16:24:49:c8:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:26:7D:88:79:58:BE:34:F2:48:5B:26:E4:C3:B6:92:F9:90:11:B4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F65A1B0E73E711F1AED5A9E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.17.0-156.251.26.255

    Signature Algorithm: sha256WithRSAEncryption
         8f:43:c1:e3:0b:87:a4:44:36:a3:e3:9f:18:a2:db:86:92:b3:
         fc:51:80:1e:bd:74:38:f4:89:62:3f:a6:96:98:be:b9:1c:42:
         cc:0f:ab:e0:42:8a:af:0e:58:c6:62:f0:5b:a1:b0:a5:fb:1f:
         56:04:99:98:1e:aa:69:e7:a9:57:f4:56:a3:2b:cb:ca:cb:86:
         96:d7:36:81:c9:f3:46:76:d5:fb:25:cc:ec:25:3e:84:88:6b:
         10:0a:b8:f3:76:70:57:d6:52:63:42:d6:39:2a:84:9d:d9:9e:
         fd:98:df:14:e2:a0:70:06:3a:fb:f6:64:70:42:ee:d5:ea:e8:
         38:27:73:cd:15:41:83:27:06:0f:30:26:ea:c5:70:e4:4b:bd:
         49:7e:f0:50:42:47:7d:21:fb:69:8a:72:19:d8:5e:01:bc:4a:
         0c:72:7d:9e:64:64:d0:d5:b2:52:f0:e3:e2:f3:42:01:5a:ea:
         91:ef:6e:d4:e4:57:af:be:33:53:54:9e:2a:7a:2a:fb:bc:c6:
         9e:e7:7d:2b:ad:1e:64:d8:a3:7c:fe:d8:25:66:62:c6:2d:fd:
         d6:86:6b:fe:c7:d5:12:f9:2f:27:d1:a7:a2:f6:14:1e:f2:93:
         81:0b:6f:1a:5d:77:7e:3a:8b:b1:e6:9d:36:1a:a0:26:b3:05:
         c0:f2:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:03 2026 by rpki-client