Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC4A8384949C11F18F6BEBF8CE1D38B0.roa
File:                     FC4A8384949C11F18F6BEBF8CE1D38B0.roa (raw, json)
Hash identifier:          YpGTeZffRaLbVQ+HXcDbT++SDDrukqo4Kr4EjN3f7dk=
Subject key identifier:   EE:18:21:F4:E5:71:AC:62:FB:03:8D:9C:DF:0C:6B:81:21:ED:16:92
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CAF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC4A8384949C11F18F6BEBF8CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 09:22:20 +0000
ROA not before:           Mon 10 Aug 2026 09:22:15 +0000
ROA not after:            Thu 17 Sep 2026 09:22:15 +0000
asID:                     22773
IP address blocks:        156.233.213.0/24 maxlen: 24
                          156.233.214.0/24 maxlen: 24
                          156.233.215.0/24 maxlen: 24
                          156.233.220.0/24 maxlen: 24
                          156.233.221.0/24 maxlen: 24
                          156.233.222.0/24 maxlen: 24
                          156.233.223.0/24 maxlen: 24
                          156.233.240.0/24 maxlen: 24
                          156.233.241.0/24 maxlen: 24
                          156.233.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117497 (0x1caf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 09:22:15 2026 GMT
            Not After : Sep 17 09:22:15 2026 GMT
        Subject: CN=6a79984c-1685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:f9:46:9b:8f:fa:d1:d4:10:e3:76:c9:ff:
                    26:d2:1d:ac:0d:9a:2f:5c:1d:65:b6:42:70:10:b7:
                    8e:b0:1c:d9:49:a4:2f:ea:0e:e6:6c:c8:11:17:ca:
                    54:5b:01:ef:5f:a2:1d:d4:23:0c:5d:a7:f0:87:be:
                    02:43:97:6a:ec:99:1c:39:44:75:45:5c:d0:c5:47:
                    b5:b4:b5:bf:75:36:dc:d0:23:fc:d7:42:01:f0:c5:
                    72:a8:db:e5:90:64:2c:07:ff:36:b4:c6:92:ec:f7:
                    aa:f4:49:b3:22:7b:3b:ad:3d:56:7d:bd:09:26:fb:
                    50:7a:ef:34:3f:82:eb:38:b7:45:35:48:8d:d9:9b:
                    80:24:4c:8e:35:11:b9:3b:d2:67:a8:5b:c3:a4:1b:
                    b0:6c:0a:08:f9:d3:20:8b:21:48:7c:e8:2b:8d:7d:
                    8f:dc:e6:14:0c:42:3f:fc:1f:bb:60:fe:ba:4e:4f:
                    56:24:3f:94:a2:71:23:82:1d:a1:96:d8:61:e1:68:
                    4c:7e:00:be:fa:d1:7d:b3:21:ea:a9:0b:5e:ef:51:
                    9f:ab:41:04:1c:ff:a9:36:6b:a5:b8:38:2c:b4:62:
                    80:06:d3:37:4e:75:10:c1:b8:46:ec:94:cf:e4:a0:
                    8c:8c:1c:f4:f8:c5:21:ce:19:3a:37:4f:73:14:75:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:18:21:F4:E5:71:AC:62:FB:03:8D:9C:DF:0C:6B:81:21:ED:16:92
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC4A8384949C11F18F6BEBF8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.213.0-156.233.215.255
                  156.233.220.0/22
                  156.233.240.0-156.233.242.255

    Signature Algorithm: sha256WithRSAEncryption
         b6:da:cd:50:9c:c2:7b:c4:00:5f:22:1d:2f:99:89:d2:b3:f7:
         1c:b2:d8:c6:fe:bc:61:b6:f4:25:41:3e:5b:eb:d7:51:ae:b3:
         f0:96:e1:d0:54:cc:bf:da:88:e1:79:97:47:fb:77:c5:51:a1:
         93:fd:3b:56:ab:5a:98:72:94:0a:54:92:ff:d8:5e:31:3c:79:
         23:59:72:35:16:cb:ef:33:7d:a8:b7:62:2f:87:e3:e3:d4:57:
         00:30:6d:3e:23:50:93:47:e6:33:c3:be:6f:87:db:fa:48:c5:
         a1:c5:bc:52:67:9e:09:f4:ca:df:5c:23:68:42:e7:94:96:28:
         ec:43:6e:40:6c:76:72:6e:0c:01:98:cf:30:ba:46:d1:29:b5:
         c4:d0:fe:3a:a8:c7:42:ae:92:bf:72:87:b4:a7:5c:0d:07:d6:
         6d:6e:83:d8:fb:8a:f3:c5:ba:f6:2e:92:62:2a:95:c5:b2:33:
         a7:14:3f:76:eb:a1:f3:7c:7c:60:87:ff:47:c6:e6:bf:a8:3d:
         fa:13:ed:d2:20:22:a4:6c:c7:dc:10:c1:b5:08:53:b4:37:81:
         8a:01:75:e9:ef:c9:c5:bc:32:cd:90:da:9e:25:65:a6:19:c8:
         05:7b:b2:e0:a8:a8:7a:1c:06:79:98:1b:56:af:bd:98:c1:5d:
         cb:30:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:59 2026 by rpki-client