Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F72F9FD26E5F11F18E23EFC6CE1D38B0.roa
File:                     F72F9FD26E5F11F18E23EFC6CE1D38B0.roa (raw, json)
Hash identifier:          +DtJEv2Y4zu+8OgAXPuIVJYPOZS5QbPcya+bDJ4rJzs=
Subject key identifier:   A4:B8:34:3E:EA:70:0E:9E:C7:3F:E0:92:7C:3C:D4:18:7F:72:FE:42
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BFAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F72F9FD26E5F11F18E23EFC6CE1D38B0.roa
Signing time:             Mon 22 Jun 2026 17:29:48 +0000
ROA not before:           Mon 22 Jun 2026 17:29:43 +0000
ROA not after:            Tue 28 Jul 2026 17:29:43 +0000
asID:                     202656
IP address blocks:        156.246.182.0/24 maxlen: 24
                          156.246.183.0/24 maxlen: 24
                          156.246.184.0/24 maxlen: 24
                          156.246.185.0/24 maxlen: 24
                          156.246.186.0/24 maxlen: 24
                          156.246.187.0/24 maxlen: 24
                          156.246.188.0/24 maxlen: 24
                          156.246.189.0/24 maxlen: 24
                          156.246.250.0/24 maxlen: 24
                          156.246.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114602 (0x1bfaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 22 17:29:43 2026 GMT
            Not After : Jul 28 17:29:43 2026 GMT
        Subject: CN=6a39710b-649b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:c6:d8:8f:12:6e:09:26:af:24:d3:00:bb:
                    3f:22:fe:03:82:3a:c7:41:a2:e8:9f:47:75:af:8a:
                    3e:b9:0a:fd:5b:33:14:b4:30:87:93:05:e6:b9:da:
                    5c:eb:56:1b:c2:41:ff:45:3d:8d:6e:91:87:94:61:
                    c4:c8:af:a3:95:fe:7f:5e:72:55:cc:7c:c8:6d:07:
                    9a:71:cd:5a:5c:55:33:a8:d2:3f:c1:ea:3b:c4:36:
                    32:94:5f:3d:1c:38:01:22:5c:2d:06:40:74:5a:f1:
                    4c:5a:f2:4b:f5:e2:0f:2c:4c:6e:3b:80:97:c0:47:
                    c0:e2:68:19:17:8f:ec:69:6c:e1:b0:c4:03:90:d1:
                    30:9c:08:ba:86:de:97:dc:43:ca:28:55:f2:10:a0:
                    09:ad:a6:af:2f:66:26:47:a2:5a:cd:28:f0:84:ff:
                    f4:fb:7b:c6:9f:25:f0:7c:a8:f6:96:57:22:83:6f:
                    14:3e:c9:76:43:db:06:a3:2b:7c:d3:69:d6:08:60:
                    12:68:3f:e2:cd:9e:a6:b2:61:d8:d0:c3:66:63:14:
                    54:99:c7:b5:b3:f0:7f:9f:17:18:bf:59:7d:bb:71:
                    b3:9d:fc:83:23:ca:6b:f2:ca:23:09:3f:0f:a8:9d:
                    41:63:85:98:b0:42:a7:d3:17:b5:95:86:54:6c:46:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B8:34:3E:EA:70:0E:9E:C7:3F:E0:92:7C:3C:D4:18:7F:72:FE:42
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F72F9FD26E5F11F18E23EFC6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.182.0-156.246.189.255
                  156.246.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:b3:79:e2:ce:a3:72:ba:a7:c1:70:e7:53:70:28:07:c8:48:
         76:45:b9:5e:ae:f8:70:bb:19:3e:3d:32:aa:15:11:13:c5:2d:
         c4:d0:ef:ed:7b:64:45:8c:47:28:c4:9f:47:8e:14:e6:20:3d:
         35:fa:6a:32:b5:fe:7d:e7:0b:e0:b2:8a:3b:1e:a0:8f:d4:fd:
         ac:4c:7f:39:b7:49:64:3d:fb:e7:23:a5:eb:ea:dc:2c:41:f0:
         4b:31:78:1f:06:3a:0f:64:3d:6c:e0:ec:53:1b:e2:94:71:9e:
         07:ba:e6:35:cd:2a:28:f3:2a:1e:f2:64:a6:95:8c:6b:e4:c1:
         0b:c6:79:98:8a:ef:2f:9e:b3:7a:c7:58:93:41:e2:3f:96:d8:
         61:c1:72:3a:91:b8:06:5c:2b:bc:29:fb:40:1c:0e:9f:00:9d:
         8f:05:9e:0f:6a:84:60:28:14:a5:34:da:ba:8f:38:76:25:42:
         e8:bf:5d:56:e5:2e:6f:4d:1d:e2:7f:52:d6:f3:7a:ac:b0:3a:
         65:13:7c:67:a2:49:b7:9b:6b:f9:a3:70:c9:a8:c0:64:7f:99:
         a5:66:8b:1d:f3:c9:40:58:25:92:cd:38:ef:9b:5d:0b:9e:06:
         88:70:08:2b:c7:ab:71:89:c0:56:f6:b5:8a:80:97:cc:8a:87:
         dd:18:f1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:29 2026 by rpki-client