Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C2D912C84F911F18C9AB9C6CE1D38B0.roa
File:                     1C2D912C84F911F18C9AB9C6CE1D38B0.roa (raw, json)
Hash identifier:          JBHQBxAU7Fqjb7yrduUbayd5TWfgZSIgDv1ERRiu5nw=
Subject key identifier:   EA:67:DA:44:65:A7:95:D6:3C:43:48:D5:B4:53:E2:F4:A8:DF:77:08
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C702
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C2D912C84F911F18C9AB9C6CE1D38B0.roa
Signing time:             Tue 21 Jul 2026 11:41:28 +0000
ROA not before:           Tue 21 Jul 2026 11:41:24 +0000
ROA not after:            Sat 29 Aug 2026 11:41:24 +0000
asID:                     202656
IP address blocks:        156.246.182.0/24 maxlen: 24
                          156.246.183.0/24 maxlen: 24
                          156.246.184.0/24 maxlen: 24
                          156.246.185.0/24 maxlen: 24
                          156.246.186.0/24 maxlen: 24
                          156.246.187.0/24 maxlen: 24
                          156.246.188.0/24 maxlen: 24
                          156.246.189.0/24 maxlen: 24
                          156.246.250.0/24 maxlen: 24
                          156.246.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116482 (0x1c702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 21 11:41:24 2026 GMT
            Not After : Aug 29 11:41:24 2026 GMT
        Subject: CN=6a5f5ae8-f540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:05:e1:7c:1d:c7:be:b5:5a:15:0f:1e:85:
                    22:5d:c5:c3:ea:98:c9:92:a7:29:91:69:90:b6:87:
                    93:5b:fa:54:13:16:1d:3d:d1:d1:79:cf:57:7d:96:
                    00:1b:92:89:31:54:a7:4f:1e:c4:de:a0:cf:c3:fa:
                    90:f4:91:52:31:7e:7c:c5:15:37:ae:c8:59:0d:88:
                    71:44:eb:53:36:ab:d6:80:0e:3a:a5:1b:c1:c0:bd:
                    f0:c5:ea:91:fe:d0:82:b0:5a:62:46:ac:37:d5:c6:
                    0e:a8:1b:64:e3:7b:cd:44:ed:1c:13:18:cb:00:c2:
                    f1:fc:3a:31:23:35:8c:6a:9d:07:ed:fd:65:8b:e0:
                    2e:9a:6c:3a:51:ec:f3:9c:0d:ec:d7:dd:32:e5:b3:
                    f0:12:94:21:c3:d4:a7:2b:a7:4f:74:3a:cf:f1:3d:
                    ab:9b:f3:0e:92:4c:b9:b7:60:02:a1:86:c7:37:a2:
                    50:e9:ba:a8:f8:75:75:ec:32:30:bf:be:3a:21:c4:
                    ab:fa:77:78:e1:d0:e2:b2:bb:16:ea:02:43:5e:d0:
                    d1:6f:5b:ec:92:cd:43:d1:b5:73:99:db:a9:a7:54:
                    fa:07:2f:c0:6e:7c:63:00:02:c2:17:76:20:71:61:
                    db:0e:64:6e:48:13:f4:4f:02:30:e9:7d:43:da:d1:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:67:DA:44:65:A7:95:D6:3C:43:48:D5:B4:53:E2:F4:A8:DF:77:08
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C2D912C84F911F18C9AB9C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.182.0-156.246.189.255
                  156.246.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:2a:79:63:33:aa:62:e9:ce:b3:e1:48:b4:2b:52:f3:ac:
         3b:43:ac:9a:88:65:29:b6:55:ea:9a:9f:02:9a:e7:6f:b0:78:
         8b:fc:4e:ad:d8:51:74:df:a7:83:5f:e1:23:24:c9:ab:ab:0c:
         c3:89:db:38:df:33:c9:b8:07:98:0c:b0:84:a9:3b:23:ff:5b:
         3c:cd:ae:1e:20:90:1a:0e:86:e3:28:94:9d:9d:4f:d0:11:88:
         75:52:ce:26:ef:84:d8:9f:6d:50:fe:b5:b4:2e:98:9a:ea:7c:
         70:7c:cd:11:93:89:b1:71:72:d7:46:da:06:59:2f:92:07:75:
         b4:b5:5b:4b:1f:57:52:39:02:bf:5c:31:24:c6:43:42:0c:bd:
         2e:2e:d7:0e:b9:c1:36:4d:ae:12:58:99:59:e6:51:85:5b:71:
         28:ec:91:52:94:9f:54:2a:57:45:6b:e3:03:6b:aa:a2:4f:40:
         5a:ab:50:ef:24:2e:7b:3a:c2:71:c1:9e:9c:f1:79:3d:71:38:
         46:09:da:a2:f1:cd:cd:b0:2f:ed:af:61:fb:3f:39:a9:2d:c4:
         fe:06:6b:cc:bc:f0:d8:60:36:c6:5d:83:0f:39:97:57:03:c3:
         8a:4e:84:06:5e:eb:49:6b:d4:ec:c9:95:28:90:99:28:29:cf:
         5f:48:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:59:00 2026 by rpki-client