Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/763767C83D6011F1992DF2DCCE1D38B0.roa
File:                     763767C83D6011F1992DF2DCCE1D38B0.roa (raw, json)
Hash identifier:          ROVg+QHSRHtdVOMLxOtpSIZv8QuRMO9Bw7iTUaGLBks=
Subject key identifier:   9E:F8:FA:AB:0F:BA:DA:04:68:CE:D3:91:6B:0C:79:4A:9B:54:8C:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01ADC6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/763767C83D6011F1992DF2DCCE1D38B0.roa
Signing time:             Tue 21 Apr 2026 08:59:54 +0000
ROA not before:           Tue 21 Apr 2026 08:59:48 +0000
ROA not after:            Tue 26 May 2026 08:59:48 +0000
asID:                     274728
IP address blocks:        156.235.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110022 (0x1adc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 21 08:59:48 2026 GMT
            Not After : May 26 08:59:48 2026 GMT
        Subject: CN=69e73c8a-1519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:4d:62:7d:74:3d:40:8f:7f:32:de:e5:18:
                    b8:d8:cd:4d:64:27:97:17:76:44:10:24:24:b2:dd:
                    c4:62:34:a1:b2:8b:9e:aa:cb:69:a3:24:5b:a0:31:
                    0f:7b:ed:80:cf:ea:f7:32:07:bb:c9:dc:cd:2b:79:
                    8e:8b:35:d4:32:83:34:5c:62:1d:7c:6c:d0:92:75:
                    4f:22:b4:aa:4f:c3:5e:76:98:ab:18:38:95:34:e5:
                    20:7d:7e:d6:4e:9a:8b:1e:a2:66:8d:0e:e1:fb:87:
                    3c:15:5c:11:cd:a5:b1:32:c7:47:e4:99:53:78:cc:
                    38:83:89:07:90:52:59:e3:f4:e0:e6:fc:5f:9b:4e:
                    a9:76:05:c8:1f:11:22:5f:c1:e2:68:6d:b0:15:cc:
                    43:45:f3:02:9a:47:3a:72:26:f7:13:e4:df:1f:73:
                    80:3d:e8:c2:26:04:22:b4:20:d8:d9:dd:d2:f5:f9:
                    05:1a:f9:d8:ce:92:8f:35:34:d0:e0:c6:40:8b:13:
                    76:6b:f4:ba:11:12:6b:e4:88:be:5e:61:9f:37:9d:
                    da:5a:24:3c:1d:ca:5d:8a:c7:0f:72:e7:df:ca:11:
                    3a:7e:57:cc:64:0e:fe:20:74:cb:05:de:ac:19:25:
                    7b:72:44:2e:68:5c:5d:f3:d5:8a:a1:b9:03:ba:95:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F8:FA:AB:0F:BA:DA:04:68:CE:D3:91:6B:0C:79:4A:9B:54:8C:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/763767C83D6011F1992DF2DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2d:4e:df:d5:c7:06:39:b7:3a:74:61:1d:5d:c5:12:93:8b:
         0b:7a:e4:33:bf:31:d4:e6:96:25:e3:63:72:03:cd:c0:cc:3c:
         e7:0a:fc:d1:99:ef:23:66:a6:6d:18:ac:67:f7:cb:2e:c6:6c:
         2c:58:41:f8:70:3c:a8:80:59:b4:3d:fc:cd:89:ec:55:68:0a:
         9e:f4:35:fd:02:fa:19:39:e8:f5:aa:d2:75:9f:7a:56:8e:70:
         f2:f0:17:1c:b7:c8:3a:d6:02:28:ba:37:1d:19:96:e1:8e:24:
         9f:bd:e4:25:4e:37:cf:c8:01:4b:a0:f6:69:a3:51:13:7a:7c:
         51:4a:78:3c:d7:f0:66:50:73:ff:0d:28:ab:36:60:96:03:76:
         9f:68:0a:48:73:3c:9c:ad:fd:e9:35:10:f7:a8:3a:4e:12:fa:
         d9:7a:99:7a:33:fa:a2:da:c2:20:3d:2c:ac:2d:a8:a7:0e:3c:
         6c:5b:76:33:c5:83:97:64:fb:68:8b:c0:b8:e7:3c:5e:95:48:
         28:2c:62:95:18:06:1d:dd:01:dc:4d:45:61:4e:92:55:ae:a2:
         e8:01:67:40:ed:06:04:2a:0b:48:f6:ae:97:11:38:3e:a8:df:
         58:86:f2:9b:b4:b8:1e:90:56:90:de:a5:07:79:1e:40:c1:ac:
         72:df:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:25 2026 by rpki-client