Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F93128A45E411F1A0FBBDE3CE1D38B0.roa
File:                     3F93128A45E411F1A0FBBDE3CE1D38B0.roa (raw, json)
Hash identifier:          x315255szA6btd+NWgj1T+8eUKJzndmuaX8AW9e66HY=
Subject key identifier:   DA:70:DA:35:33:20:73:18:69:4F:44:DD:D7:61:77:C6:4C:40:39:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B115
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F93128A45E411F1A0FBBDE3CE1D38B0.roa
Signing time:             Sat 02 May 2026 05:03:25 +0000
ROA not before:           Sat 02 May 2026 05:03:19 +0000
ROA not after:            Sat 28 Apr 2029 05:03:19 +0000
asID:                     17561
IP address blocks:        156.226.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110869 (0x1b115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  2 05:03:19 2026 GMT
            Not After : Apr 28 05:03:19 2029 GMT
        Subject: CN=69f5859d-80e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b3:68:2b:f6:35:33:66:ba:1d:c6:8b:56:dd:
                    ea:ae:a9:af:07:58:6b:04:11:a5:14:b3:47:58:97:
                    9e:5b:70:b5:d0:47:08:fe:46:ac:8b:e8:52:ec:5d:
                    ee:7c:ab:40:39:48:c4:b5:02:d8:9b:ae:bd:93:ec:
                    81:a7:00:a0:2a:13:f8:ba:6a:11:1d:dc:04:ea:2d:
                    58:f3:9b:3b:b5:95:da:44:e0:78:92:87:98:77:c3:
                    de:1b:9d:52:93:2c:25:ee:92:4e:ce:45:48:9e:f5:
                    98:2c:3e:d0:d9:d1:82:7d:d3:ee:84:2d:c6:a1:f0:
                    8c:6e:9b:f2:32:d4:3f:33:64:2a:09:c3:37:23:be:
                    60:ea:07:f8:9b:b3:59:6b:65:bc:25:ab:18:6b:49:
                    c2:af:db:c3:43:38:c4:62:60:65:be:24:b5:d2:1c:
                    0e:7c:73:c1:f8:aa:a1:f2:1c:cc:7c:31:67:46:78:
                    96:3d:98:a4:48:73:11:8c:c6:2c:f9:11:ce:c0:ca:
                    40:37:bc:0d:08:d3:d5:fe:4e:fe:3c:e0:42:c9:36:
                    de:b1:6f:50:aa:3e:b0:8a:0b:31:9e:5f:2f:cf:09:
                    fe:3c:4a:7b:68:16:4a:52:4f:a6:41:96:8d:92:20:
                    68:58:5f:b2:83:f9:f7:70:16:2a:54:cb:4a:b7:42:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:70:DA:35:33:20:73:18:69:4F:44:DD:D7:61:77:C6:4C:40:39:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F93128A45E411F1A0FBBDE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:6b:11:5a:fa:71:72:69:43:46:5f:44:86:ab:9a:a8:6b:
         0b:46:9b:fc:79:4c:8a:3d:a9:a3:ad:fc:fa:13:db:ff:45:ca:
         35:17:a4:2b:13:44:af:16:62:64:4d:b8:a6:e0:4f:25:2b:0b:
         76:0c:39:d1:68:c8:67:9a:8e:e2:bb:91:6b:95:0e:c5:9b:59:
         73:c0:8d:66:f6:1a:46:83:48:72:a9:69:ec:c7:3b:44:c1:dd:
         43:dd:02:fd:07:4a:ef:d0:f2:90:ea:9e:e0:50:9b:53:68:27:
         86:80:fd:59:63:c0:7f:4a:3f:8e:37:04:4e:b7:2a:dd:10:8a:
         3d:48:65:82:d1:0b:57:93:5b:59:9d:7e:e6:75:bc:f3:cf:da:
         d0:fb:6f:52:3d:28:5e:31:c4:55:e9:82:d9:a6:f4:4e:92:09:
         f5:7a:d4:c5:05:93:55:88:84:0d:98:27:71:67:f4:e3:90:1a:
         d8:65:1b:eb:fc:cd:e4:67:e4:3d:32:05:14:df:89:c9:d9:6c:
         fb:20:61:76:77:ed:03:17:6d:8e:28:af:d2:6b:52:f1:5b:c5:
         ee:4e:93:ac:df:69:ef:a7:82:43:70:d0:f7:b5:2d:15:71:42:
         df:25:c7:e5:8f:93:2f:3c:d5:b8:19:8d:f0:37:47:49:12:60:
         67:c3:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:24 2026 by rpki-client