Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06D6E74049AA11F197E93ABDCE1D38B0.roa
File:                     06D6E74049AA11F197E93ABDCE1D38B0.roa (raw, json)
Hash identifier:          QyvDvfBM4fOJ3tCkwjXdtmYV5iREcMSNyWveDhzDEWI=
Subject key identifier:   7E:50:AE:0D:4E:76:E1:4B:A4:7F:B8:89:CA:41:10:77:E7:A9:4F:9A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B1FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06D6E74049AA11F197E93ABDCE1D38B0.roa
Signing time:             Thu 07 May 2026 00:16:44 +0000
ROA not before:           Thu 07 May 2026 00:00:38 +0000
ROA not after:            Thu 13 Aug 2026 00:00:38 +0000
asID:                     133748
IP address blocks:        156.225.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111102 (0x1b1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  7 00:00:38 2026 GMT
            Not After : Aug 13 00:00:38 2026 GMT
        Subject: CN=69fbd9eb-c8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:47:b1:ca:30:c6:ed:3d:fa:ca:90:a4:59:
                    bf:14:ff:2d:8f:61:90:dd:27:15:54:16:56:57:41:
                    17:91:5b:91:6e:be:0a:c2:70:a2:e5:a2:de:0c:4b:
                    a2:69:43:01:32:9e:2a:18:3c:8b:cd:91:f6:99:29:
                    fd:07:8e:ec:e1:ca:3b:00:55:b6:55:9d:dd:2d:40:
                    d6:10:54:7e:a5:8f:29:d0:ff:ad:55:d9:6c:75:1a:
                    2d:b1:76:7a:25:5e:31:72:19:7b:29:31:b2:08:ee:
                    05:d4:45:c7:5c:b6:75:51:0c:9c:c4:1c:89:87:90:
                    8d:01:68:d5:37:71:0b:9a:2b:c1:39:65:3b:39:63:
                    a7:bb:46:ca:75:d3:8f:6a:62:03:40:29:a4:82:cc:
                    2c:5a:ca:44:9f:81:c8:40:a9:dc:3e:83:e3:2b:df:
                    7f:32:7f:bd:fb:0e:ef:64:8c:e8:8f:50:2e:7c:18:
                    cf:45:18:a5:dd:cf:a7:56:b4:0f:99:eb:47:08:01:
                    e4:42:52:5b:bb:ae:c9:96:91:69:ed:54:b8:eb:75:
                    19:56:37:09:70:2a:b9:e0:5e:ba:2a:dc:71:5d:a7:
                    7c:77:d3:d2:6f:cf:b3:8f:75:cf:61:13:c8:8e:f0:
                    fd:cc:2b:ff:32:f2:43:e0:ef:5b:11:19:7b:cb:26:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:AE:0D:4E:76:E1:4B:A4:7F:B8:89:CA:41:10:77:E7:A9:4F:9A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06D6E74049AA11F197E93ABDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c2:0a:e3:2a:0a:56:09:11:e4:12:7f:c2:cc:78:9e:9b:88:
         44:f7:ba:fc:dd:a7:c1:41:ea:93:13:4c:19:a5:1c:12:af:9c:
         8b:16:66:3f:30:d3:bf:bc:e8:8e:77:d5:9a:81:4f:e9:dd:fd:
         4e:14:b5:d8:82:bd:a3:8d:fe:bd:18:d2:dd:f8:38:41:1c:5c:
         21:4c:5d:44:e1:d8:f1:2c:06:a0:fb:9f:aa:41:8c:82:a1:84:
         80:e0:ef:ec:1e:32:7a:ab:24:9e:27:8b:2e:5e:07:00:69:f0:
         90:48:b4:b2:04:7c:3a:52:d4:b6:13:58:de:c9:9a:92:c8:93:
         5b:5e:48:03:09:f5:f1:8e:ce:a6:1f:52:c1:cc:62:08:54:85:
         0f:e8:24:08:ca:b2:d2:cf:28:9b:bf:93:a8:f3:f2:18:62:02:
         f6:6b:90:52:4f:dc:cd:c7:bf:e6:3c:f6:1f:4b:1d:88:4c:ee:
         94:94:37:73:0c:81:1b:57:c1:fc:76:8f:68:2c:18:cc:93:a4:
         3a:c4:dc:f9:9d:7a:99:5e:ba:47:6d:73:24:0e:f3:53:6d:f4:
         e2:37:39:8f:c1:7e:63:b2:01:5f:73:10:a2:01:4a:4e:db:68:
         5b:1d:71:bd:d0:48:20:d1:a9:a5:5e:7a:5f:34:ff:59:a4:6f:
         23:0a:05:bf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbH+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA3MDAwMDM4WhcNMjYwODEzMDAwMDM4WjAYMRYw
FAYDVQQDEw02OWZiZDllYi1jOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApB9Hscowxu09+sqQpFm/FP8tj2GQ3ScVVBZWV0EXkVuRbr4KwnCi5aLe
DEuiaUMBMp4qGDyLzZH2mSn9B47s4co7AFW2VZ3dLUDWEFR+pY8p0P+tVdlsdRot
sXZ6JV4xchl7KTGyCO4F1EXHXLZ1UQycxByJh5CNAWjVN3ELmivBOWU7OWOnu0bK
ddOPamIDQCmkgswsWspEn4HIQKncPoPjK99/Mn+9+w7vZIzoj1AufBjPRRil3c+n
VrQPmetHCAHkQlJbu67JlpFp7VS463UZVjcJcCq54F66KtxxXad8d9PSb8+zj3XP
YRPIjvD9zCv/MvJD4O9bERl7yyb7twIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH5Q
rg1OduFLpH+4icpBEHfnqU+aMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNkQ2RTc0MDQ5QUExMUYxOTdFOTNBQkRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOEwMA0GCSqGSIb3DQEBCwUA
A4IBAQCbwgrjKgpWCRHkEn/CzHiem4hE97r83afBQeqTE0wZpRwSr5yLFmY/MNO/
vOiOd9WagU/p3f1OFLXYgr2jjf69GNLd+DhBHFwhTF1E4djxLAag+5+qQYyCoYSA
4O/sHjJ6qySeJ4suXgcAafCQSLSyBHw6UtS2E1jeyZqSyJNbXkgDCfXxjs6mH1LB
zGIIVIUP6CQIyrLSzyibv5Oo8/IYYgL2a5BST9zNx7/mPPYfSx2ITO6UlDdzDIEb
V8H8do9oLBjMk6Q6xNz5nXqZXrpHbXMkDvNTbfTiNzmPwX5jsgFfcxCiAUpO22hb
HXG90Egg0amlXnpfNP9ZpG8jCgW/
-----END CERTIFICATE-----
Generated at Wed May 13 13:34:43 2026 by rpki-client