Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22346532211211F1A40399A3DAE4EC9C.roa
File:                     22346532211211F1A40399A3DAE4EC9C.roa (raw, json)
Hash identifier:          LyoKhPhmDhV3xx9FvTfy+t2JyE05ZOoW1pPoZfLTaHw=
Subject key identifier:   0F:D8:2E:27:9F:CB:68:A1:FD:2E:63:EF:07:5D:82:50:1F:EC:CF:94
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A58A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22346532211211F1A40399A3DAE4EC9C.roa
Signing time:             Mon 16 Mar 2026 08:28:39 +0000
ROA not before:           Mon 16 Mar 2026 08:28:35 +0000
ROA not after:            Fri 16 Mar 2029 08:28:35 +0000
asID:                     17561
IP address blocks:        156.247.183.0/24 maxlen: 24
                          156.247.184.0/24 maxlen: 24
                          156.247.185.0/24 maxlen: 24
                          156.247.186.0/24 maxlen: 24
                          156.247.187.0/24 maxlen: 24
                          156.247.188.0/24 maxlen: 24
                          156.247.189.0/24 maxlen: 24
                          156.247.190.0/24 maxlen: 24
                          156.247.191.0/24 maxlen: 24
                          156.247.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107914 (0x1a58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar 16 08:28:35 2026 GMT
            Not After : Mar 16 08:28:35 2029 GMT
        Subject: CN=69b7bf37-db2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0f:76:ec:bc:65:d9:6e:28:ce:d9:92:08:96:
                    66:3c:2e:06:19:46:03:57:a2:c6:a2:f3:48:35:85:
                    fe:b8:ca:68:12:43:95:34:b6:da:e0:3a:2b:d5:dc:
                    ca:06:1a:20:26:46:cb:7c:1a:67:ce:ee:ab:b9:ec:
                    8a:6d:63:79:31:8b:25:e2:c3:dc:35:d9:12:a7:ec:
                    6c:d4:f3:27:86:09:ba:92:e0:8d:cd:0c:0a:72:6a:
                    88:59:3f:12:a2:4f:a4:1c:c3:cc:74:55:fa:bc:cf:
                    7b:eb:7d:2f:42:c3:5b:03:e5:e0:f8:50:f0:92:35:
                    d0:b0:3e:6d:4c:0f:c7:4c:89:a1:45:a7:da:73:25:
                    86:bc:03:c5:db:db:ce:f1:b4:e1:6b:4d:75:72:83:
                    dc:8d:89:d5:d2:95:df:41:fc:d7:b7:c4:66:83:bf:
                    2b:2e:a9:c3:09:ab:c5:6f:00:6a:2d:7e:19:87:04:
                    32:ec:e3:c5:43:ab:95:12:ec:cd:95:d2:52:0b:d2:
                    4e:41:88:4a:1f:f8:ea:0e:5d:2e:d2:5a:35:a4:14:
                    89:d0:fa:45:06:3f:4d:4e:6d:db:5f:3c:e3:46:89:
                    46:eb:8e:af:d2:2f:72:af:34:be:d3:6c:df:e1:45:
                    e5:25:08:b7:b8:8a:24:45:e3:d3:02:68:5f:af:c9:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D8:2E:27:9F:CB:68:A1:FD:2E:63:EF:07:5D:82:50:1F:EC:CF:94
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22346532211211F1A40399A3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.183.0-156.247.192.255

    Signature Algorithm: sha256WithRSAEncryption
         64:9b:d5:83:38:6b:e2:b5:4f:e3:ee:ce:82:b0:ac:03:4d:46:
         96:cf:e0:b3:f8:d6:b6:1f:cd:ea:06:3a:62:94:06:c2:72:e5:
         33:af:2c:f6:08:36:45:f0:42:19:88:da:25:7c:97:da:09:bd:
         d6:5c:a2:18:c9:1b:c2:ad:37:df:42:27:c4:2f:b3:55:b9:8d:
         97:85:17:2f:a3:95:cd:34:e4:3d:47:c2:4a:c1:63:e3:ca:af:
         c0:4c:4b:b4:14:05:6a:ba:85:71:a3:9d:3e:17:7b:a0:8e:b5:
         fd:6f:4f:36:7f:93:15:1c:da:70:93:29:e2:09:3a:cd:65:85:
         c4:a7:de:8d:ab:96:3f:95:c9:52:1a:b1:ce:c7:76:93:c8:eb:
         95:6c:92:ab:cd:69:af:17:7c:09:d3:ed:a5:46:67:5e:95:14:
         79:7a:80:1c:41:88:1f:f4:a4:d8:bb:e7:8d:0f:1d:b3:e2:1b:
         36:70:31:2c:2d:bf:63:62:07:4f:82:9d:a8:e1:59:ee:03:09:
         9d:ce:e6:0a:73:13:07:f1:f5:ec:58:d0:b7:37:a7:9b:a4:06:
         51:e7:ed:78:a3:ec:30:f3:a0:dc:4a:64:65:3f:2b:1b:78:75:
         22:d3:a5:c3:e6:fc:e3:28:7d:ce:7e:73:2b:c3:ce:b5:30:9e:
         c0:7d:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:22 2026 by rpki-client