Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AFBC19084DA11F184A5680ACF1D38B0.roa
File:                     0AFBC19084DA11F184A5680ACF1D38B0.roa (raw, json)
Hash identifier:          ruQJ5gnWyg7ad0iCoPouGCgOEtu5ZXoSyBAanDmO5K8=
Subject key identifier:   74:36:30:CC:0F:B5:52:BA:E0:AD:70:9A:01:C6:85:C0:69:86:7A:7C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C69A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AFBC19084DA11F184A5680ACF1D38B0.roa
Signing time:             Tue 21 Jul 2026 07:59:05 +0000
ROA not before:           Tue 21 Jul 2026 07:59:01 +0000
ROA not after:            Wed 29 Jul 2026 07:59:01 +0000
asID:                     132471
IP address blocks:        156.229.32.0/23 maxlen: 24
                          156.229.32.0/24 maxlen: 24
                          156.229.33.0/24 maxlen: 24
                          156.229.34.0/23 maxlen: 24
                          156.229.34.0/24 maxlen: 24
                          156.229.35.0/24 maxlen: 24
                          156.229.36.0/24 maxlen: 24
                          156.229.37.0/24 maxlen: 24
                          156.229.38.0/24 maxlen: 24
                          156.229.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116378 (0x1c69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 21 07:59:01 2026 GMT
            Not After : Jul 29 07:59:01 2026 GMT
        Subject: CN=6a5f26c9-2243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:c6:70:43:4d:c6:2c:e6:e5:fc:e0:36:28:
                    f1:54:8e:eb:53:15:32:a2:7c:07:2f:f2:2d:f9:71:
                    10:d3:84:1c:2d:63:da:4e:63:f7:5c:ca:09:0f:3f:
                    32:f2:6e:d9:40:b2:ee:00:5f:03:df:d1:6f:1c:40:
                    9c:ec:5c:b8:3e:77:d6:cc:cb:2a:3a:c2:d6:3a:d4:
                    b5:b7:34:26:2e:2a:fb:dd:41:9f:03:1b:4b:0d:6d:
                    19:25:57:88:c0:79:b7:db:79:ca:13:84:dc:d3:c8:
                    32:a2:5e:68:e1:a5:55:e8:73:1e:06:f6:fd:7a:1a:
                    6e:5a:d6:4c:5a:57:7d:a9:cf:6d:46:8b:32:da:47:
                    9f:11:0a:90:a4:f1:eb:65:2f:b2:eb:4f:40:6d:bf:
                    17:4a:a5:5c:88:ef:d2:e7:fe:11:86:dc:b4:9d:82:
                    e3:34:64:e1:d1:2e:83:a5:ec:60:9a:97:79:37:fc:
                    9c:28:3d:f2:e4:b7:45:9f:5b:fe:be:49:bd:55:3b:
                    d5:f5:ae:5f:27:d6:3e:68:13:65:db:71:9b:62:e2:
                    9e:c3:45:c4:00:8f:c7:ef:40:d2:5b:e2:75:e2:d5:
                    e0:88:27:98:a3:4c:d2:28:66:51:2b:d3:bb:2f:fc:
                    a8:01:e5:e2:60:da:f7:33:72:31:45:a4:f7:54:d8:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:36:30:CC:0F:B5:52:BA:E0:AD:70:9A:01:C6:85:C0:69:86:7A:7C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AFBC19084DA11F184A5680ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:6d:58:c5:14:68:93:eb:71:c9:d7:a7:51:7f:c6:e3:98:
         4f:0f:33:08:7f:dd:1b:13:f0:7f:76:47:f3:21:70:38:45:7c:
         7f:8d:f3:b3:9e:72:2d:a0:8a:24:5f:5a:49:25:c1:b5:14:9c:
         dc:52:60:71:0f:bb:09:89:14:d1:3e:12:4c:3e:01:1c:d2:de:
         c3:5c:77:1c:6a:bf:e5:88:3d:e4:d8:69:ac:e4:04:96:aa:80:
         11:2b:39:69:2d:c2:fd:30:66:64:08:7e:cb:d1:a7:30:92:a6:
         a2:9e:35:e2:27:71:85:db:be:b7:3e:c8:dc:5f:d7:57:e7:51:
         16:c4:56:a5:cf:f0:2d:2d:5b:23:26:04:9a:81:3f:16:e2:f7:
         b7:a3:4a:74:b1:a4:a3:72:b0:24:55:e4:d8:b8:03:32:62:bd:
         1d:9b:bd:8f:81:8f:d3:ff:8f:cb:1d:4d:76:bb:66:04:79:a7:
         4a:b8:47:e0:4b:d8:16:81:7b:39:3d:e4:16:e8:76:e1:17:98:
         5d:81:53:97:05:fd:b1:a9:2a:1b:3b:f4:ce:f1:7e:b7:f1:f6:
         4e:55:14:92:4f:35:ee:72:7a:b4:ac:b4:61:2b:9a:c2:54:54:
         d1:c4:53:7f:7b:fd:0c:a4:a5:c8:b5:b9:5d:d5:02:79:93:68:
         5a:bf:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:37 2026 by rpki-client