Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC430846948511F18EC34BF0CE1D38B0.roa
File:                     FC430846948511F18EC34BF0CE1D38B0.roa (raw, json)
Hash identifier:          8HdkK8cblwKwRLn6ycBGD7/VcQnurlC3LiAvNkywxuY=
Subject key identifier:   D5:B3:C3:C3:5B:75:70:33:2B:04:9A:A0:D9:27:53:89:CC:F6:3E:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CAC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC430846948511F18EC34BF0CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 06:37:41 +0000
ROA not before:           Mon 10 Aug 2026 06:37:36 +0000
ROA not after:            Mon 17 Aug 2026 06:37:36 +0000
asID:                     54801
IP address blocks:        156.225.76.0/22 maxlen: 24
                          156.238.120.0/21 maxlen: 24
                          156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.245.144.0/22 maxlen: 24
                          156.245.204.0/22 maxlen: 24
                          156.245.232.0/21 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117443 (0x1cac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 06:37:36 2026 GMT
            Not After : Aug 17 06:37:36 2026 GMT
        Subject: CN=6a7971b5-dbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:e6:89:3d:f3:76:1f:a3:28:7e:db:b6:89:
                    d2:1c:3b:54:aa:96:d5:42:0f:62:86:51:a4:e2:a4:
                    54:08:00:e9:9e:20:7b:d5:a8:ac:70:57:d1:8b:6f:
                    0a:1a:be:30:6b:a1:90:d0:4c:d1:78:09:1c:ab:c3:
                    86:df:2e:92:09:1c:77:30:79:85:af:49:b6:bf:f3:
                    37:8c:ac:47:88:f7:ed:62:54:9a:ea:81:81:21:e3:
                    92:bc:e3:d4:cf:24:0d:98:7e:55:0e:d0:66:95:68:
                    27:2d:30:bd:10:54:ae:ea:58:c0:01:94:9d:e6:24:
                    d5:2c:8f:52:7f:0b:30:92:3d:a6:9e:cc:6a:04:a4:
                    ba:8a:19:6d:15:d1:21:ee:44:82:5e:6d:76:69:49:
                    7d:08:4c:b8:b6:ee:f7:8a:9a:53:96:85:e6:44:ea:
                    cb:1f:95:5c:7f:a6:a9:88:58:61:57:39:5b:6b:72:
                    2a:65:42:cc:c7:de:70:a4:84:e0:00:c7:6a:42:88:
                    17:a1:05:67:f0:3b:b7:e8:0e:10:ab:6b:fc:9a:74:
                    08:52:05:4a:a6:dc:a4:df:17:7b:cc:8d:ca:2e:dc:
                    d4:56:cd:9f:52:7d:82:88:0d:42:15:50:ed:9e:1c:
                    d8:0f:f1:c6:3c:89:88:8c:74:96:49:b6:81:30:e5:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B3:C3:C3:5B:75:70:33:2B:04:9A:A0:D9:27:53:89:CC:F6:3E:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC430846948511F18EC34BF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.76.0/22
                  156.238.120.0/21
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.245.144.0/22
                  156.245.204.0/22
                  156.245.232.0/21
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:c3:3e:43:57:35:2b:10:e7:24:a4:cc:b8:84:97:6c:93:b7:
         1d:7d:65:80:87:01:3a:c4:60:17:be:4a:e2:7d:f4:15:1d:af:
         bc:35:32:74:21:6f:56:0c:54:bf:60:0f:27:7f:fc:35:7b:bc:
         87:18:33:c4:85:66:5f:66:1d:46:4e:98:36:2a:f8:0e:c0:46:
         5f:dd:52:bc:39:6c:f8:bc:fd:a9:29:ab:02:7d:62:b4:e9:a0:
         ab:79:04:57:90:d9:24:f1:04:65:98:72:17:a1:ae:1e:a0:dd:
         96:55:b7:ca:40:26:48:6e:a0:86:8b:f2:dc:a8:3d:6f:f7:23:
         f2:80:8c:f3:e3:fd:81:51:26:1a:99:65:e4:6c:b0:d2:b0:6b:
         b5:bf:e4:02:28:a4:c5:14:be:e6:c6:24:68:0b:23:35:ab:fd:
         ec:93:d9:0a:d5:9b:1e:e7:6d:59:0f:a6:f3:52:ef:40:3f:06:
         67:21:2f:83:8b:6c:a9:02:60:26:72:9d:6c:55:f9:33:70:2f:
         f7:f0:8c:41:cc:16:3a:dd:d4:ed:b5:ab:ff:4b:f3:fe:8b:ff:
         8b:e8:80:a0:3b:49:f3:9a:01:ca:1d:d8:5d:f9:fc:66:6f:88:
         8d:f2:39:94:2d:aa:9d:7c:5d:30:77:40:a5:38:54:4c:06:d0:
         b9:cc:97:af
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIDAcrDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEwMDYzNzM2WhcNMjYwODE3MDYzNzM2WjAYMRYw
FAYDVQQDEw02YTc5NzFiNS1kYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA06DmiT3zdh+jKH7btonSHDtUqpbVQg9ihlGk4qRUCADpniB71aiscFfR
i28KGr4wa6GQ0EzReAkcq8OG3y6SCRx3MHmFr0m2v/M3jKxHiPftYlSa6oGBIeOS
vOPUzyQNmH5VDtBmlWgnLTC9EFSu6ljAAZSd5iTVLI9Sfwswkj2mnsxqBKS6ihlt
FdEh7kSCXm12aUl9CEy4tu73ippTloXmROrLH5Vcf6apiFhhVzlba3IqZULMx95w
pITgAMdqQogXoQVn8Du36A4Qq2v8mnQIUgVKptyk3xd7zI3KLtzUVs2fUn2CiA1C
FVDtnhzYD/HGPImIjHSWSbaBMOVAYwIDAQABo4IC7jCCAuowHQYDVR0OBBYEFNWz
w8NbdXAzKwSaoNknU4nM9j5oMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzQzMDg0Njk0ODUxMUYxOEVDMzRCRjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQCnOFMAwQDnO54MAsDAwSc8AME
A5zwMDAMAwQBnPIKAwQEnPIAAwQCnPWQAwQCnPXMAwQDnPXoMAsDAwGc9gMEAZz2
EAMEApz5HAMEAJz/ADANBgkqhkiG9w0BAQsFAAOCAQEAbcM+Q1c1KxDnJKTMuISX
bJO3HX1lgIcBOsRgF75K4n30FR2vvDUydCFvVgxUv2APJ3/8NXu8hxgzxIVmX2Yd
Rk6YNir4DsBGX91SvDls+Lz9qSmrAn1itOmgq3kEV5DZJPEEZZhyF6GuHqDdllW3
ykAmSG6ghovy3Kg9b/cj8oCM8+P9gVEmGpll5Gyw0rBrtb/kAiikxRS+5sYkaAsj
Nav97JPZCtWbHudtWQ+m81LvQD8GZyEvg4tsqQJgJnKdbFX5M3Av9/CMQcwWOt3U
7bWr/0vz/ov/i+iAoDtJ85oByh3YXfn8Zm+IjfI5lC2qnXxdMHdApThUTAbQucyX
rw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:32 2026 by rpki-client