Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C1B4A5C8A5F11F0B3DE5CE1DAE4EC9C.roa
File:                     1C1B4A5C8A5F11F0B3DE5CE1DAE4EC9C.roa (raw, json)
Hash identifier:          jYurwBrPFAc4LnpO+Y+dNGU3kOnxN7wXBTy0i1tK1c4=
Subject key identifier:   0E:AB:01:C2:67:78:CF:C1:FC:F4:42:39:34:CA:3F:DD:E9:D0:79:62
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       017931
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C1B4A5C8A5F11F0B3DE5CE1DAE4EC9C.roa
Signing time:             Fri 05 Sep 2025 13:49:15 +0000
ROA not before:           Fri 05 Sep 2025 13:49:08 +0000
ROA not after:            Sun 04 Jan 2026 13:49:08 +0000
asID:                     135377
IP address blocks:        156.232.92.0/24 maxlen: 24
                          156.232.93.0/24 maxlen: 24
                          156.232.94.0/24 maxlen: 24
                          156.232.95.0/24 maxlen: 24
                          156.232.96.0/24 maxlen: 24
                          156.232.97.0/24 maxlen: 24
                          156.232.98.0/24 maxlen: 24
                          156.232.99.0/24 maxlen: 24
                          156.232.100.0/24 maxlen: 24
                          156.232.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96561 (0x17931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  5 13:49:08 2025 GMT
            Not After : Jan  4 13:49:08 2026 GMT
        Subject: CN=68baea5b-4c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:78:c7:1e:00:90:ed:71:de:61:a0:25:50:
                    c9:01:23:0c:66:3d:f0:51:3e:36:2a:ad:c4:47:3b:
                    f3:ba:8c:ee:9b:f2:f1:79:48:92:ac:ac:5d:ff:7e:
                    d5:f1:c2:ad:e3:7e:f6:d9:e7:ad:84:47:1c:ac:39:
                    14:3e:40:9b:45:18:b2:31:9a:eb:51:31:08:71:36:
                    46:dd:38:b9:a2:5d:f7:bc:aa:35:66:8d:8a:1f:4e:
                    47:9a:f5:a7:81:91:d9:e9:65:a3:39:5e:95:06:98:
                    0b:8b:2f:53:90:aa:25:27:02:e1:6a:9b:10:4e:f7:
                    3c:b3:05:30:5e:9c:77:aa:ad:48:4d:6e:de:2d:56:
                    0a:c4:20:9b:24:d6:b2:fe:31:10:f9:ac:76:f3:c1:
                    85:26:a0:7b:ea:96:73:16:cc:8a:67:e5:1d:64:35:
                    3f:de:ae:af:e7:c3:12:e1:d5:9b:b2:d7:44:b2:99:
                    13:58:21:d9:8e:15:c1:ae:21:90:d2:14:bc:31:a5:
                    98:83:75:01:1a:6c:3e:b0:b1:c5:12:25:1d:f1:65:
                    51:66:50:9e:b7:0f:ba:5f:23:78:0d:78:9f:8e:fb:
                    02:db:a7:c6:d2:23:90:de:e7:8e:1d:b8:23:d6:44:
                    a9:3c:79:af:1f:42:d5:a3:dd:e4:56:c1:77:8d:cc:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AB:01:C2:67:78:CF:C1:FC:F4:42:39:34:CA:3F:DD:E9:D0:79:62
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C1B4A5C8A5F11F0B3DE5CE1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.232.92.0-156.232.101.255

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:5d:6b:4a:6c:a5:57:8d:45:cd:f7:67:b1:78:da:f3:3c:
         75:aa:5b:d3:cd:ae:ec:e4:df:5f:37:73:d6:a3:86:fe:81:3c:
         04:b4:f9:57:90:62:b3:9a:58:e2:c5:68:c6:43:cb:26:fb:29:
         da:81:50:38:37:da:6f:68:65:b9:34:cd:49:be:3d:43:2c:f9:
         bd:af:27:78:26:f9:5f:58:1b:01:17:a0:cf:25:6f:01:e8:b8:
         7b:2c:94:c9:de:c8:74:be:e8:51:3c:66:f6:88:e2:8b:bf:80:
         f3:0c:9a:77:d9:fb:7d:90:48:c8:c2:86:b0:15:c1:2c:92:c9:
         05:be:fc:c8:3d:7f:e9:5b:1a:07:e2:34:38:58:72:e7:c0:dc:
         4f:42:2e:28:71:93:2e:fd:5d:da:d2:4d:0c:c8:32:e5:a5:54:
         54:82:0c:b3:f1:1d:b0:28:1b:26:04:d4:3e:8a:16:88:08:c5:
         c9:59:13:f0:93:73:c9:77:69:b6:94:a8:d1:1d:55:9b:4c:61:
         19:96:1f:e8:bb:de:16:40:06:03:79:d3:84:29:55:52:10:99:
         70:60:97:2c:ac:9a:26:b6:db:25:12:04:26:a1:77:61:9f:17:
         31:2f:9b:8f:cd:ee:b2:6a:48:a9:18:ce:4b:fd:49:8e:83:cc:
         16:e8:09:e0
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAXkxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTA1MTM0OTA4WhcNMjYwMTA0MTM0OTA4WjAYMRYw
FAYDVQQDEw02OGJhZWE1Yi00YzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwH14xx4AkO1x3mGgJVDJASMMZj3wUT42Kq3ERzvzuozum/LxeUiSrKxd
/37V8cKt43722eethEccrDkUPkCbRRiyMZrrUTEIcTZG3Ti5ol33vKo1Zo2KH05H
mvWngZHZ6WWjOV6VBpgLiy9TkKolJwLhapsQTvc8swUwXpx3qq1ITW7eLVYKxCCb
JNay/jEQ+ax288GFJqB76pZzFsyKZ+UdZDU/3q6v58MS4dWbstdEspkTWCHZjhXB
riGQ0hS8MaWYg3UBGmw+sLHFEiUd8WVRZlCetw+6XyN4DXifjvsC26fG0iOQ3ueO
Hbgj1kSpPHmvH0LVo93kVsF3jczlowIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFA6r
AcJneM/B/PRCOTTKP93p0HliMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQzFCNEE1QzhBNUYxMUYwQjNERTVDRTFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKc6FwDBAGc6GQwDQYJKoZI
hvcNAQELBQADggEBAE9QXWtKbKVXjUXN92exeNrzPHWqW9PNruzk3183c9ajhv6B
PAS0+VeQYrOaWOLFaMZDyyb7KdqBUDg32m9oZbk0zUm+PUMs+b2vJ3gm+V9YGwEX
oM8lbwHouHsslMneyHS+6FE8ZvaI4ou/gPMMmnfZ+32QSMjChrAVwSySyQW+/Mg9
f+lbGgfiNDhYcufA3E9CLihxky79XdrSTQzIMuWlVFSCDLPxHbAoGyYE1D6KFogI
xclZE/CTc8l3abaUqNEdVZtMYRmWH+i73hZABgN504QpVVIQmXBglyysmia22yUS
BCahd2GfFzEvm4/N7rJqSKkYzkv9SY6DzBboCeA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:11 2025 by rpki-client