Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F7664A3FDA11F19246AE14CF1D38B0.roa
File:                     95F7664A3FDA11F19246AE14CF1D38B0.roa (raw, json)
Hash identifier:          aGP8O3xaeNnx18hW3A+PHj+Pi07TsbH3jo4hUmNVBs0=
Subject key identifier:   68:3C:60:D6:E7:8A:99:E1:1F:4B:13:A1:BC:59:30:E0:85:46:92:11
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AEF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F7664A3FDA11F19246AE14CF1D38B0.roa
Signing time:             Fri 24 Apr 2026 12:39:08 +0000
ROA not before:           Fri 24 Apr 2026 12:39:03 +0000
ROA not after:            Sun 31 May 2026 12:39:03 +0000
asID:                     62240
IP address blocks:        156.229.1.0/24 maxlen: 24
                          156.229.124.0/24 maxlen: 24
                          156.229.175.0/24 maxlen: 24
                          156.229.237.0/24 maxlen: 24
                          156.229.238.0/24 maxlen: 24
                          156.229.244.0/24 maxlen: 24
                          156.229.245.0/24 maxlen: 24
                          156.229.246.0/24 maxlen: 24
                          156.229.254.0/24 maxlen: 24
                          156.229.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110328 (0x1aef8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 24 12:39:03 2026 GMT
            Not After : May 31 12:39:03 2026 GMT
        Subject: CN=69eb646c-16fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:57:15:55:64:08:65:37:ef:ae:93:41:ea:
                    45:6d:45:d2:a4:13:44:b6:74:b0:19:cc:b2:38:a2:
                    e1:3b:dd:b9:a0:a2:07:8a:65:7b:9a:70:bd:2a:fd:
                    67:61:cc:b6:8e:1b:4e:dd:c6:5f:78:2d:a6:eb:0b:
                    d4:9b:77:e5:87:93:16:f5:45:45:5f:5c:f3:0a:54:
                    49:b4:0d:87:c6:a6:97:66:63:2f:5c:cd:d3:86:bc:
                    df:5c:7c:36:a1:26:8c:a6:69:ba:8c:ce:aa:10:29:
                    fa:ac:e4:cb:59:70:7a:e4:8b:c6:d7:3b:58:3f:78:
                    a4:44:22:4f:c6:27:4e:4e:db:b6:d6:ea:64:93:e2:
                    87:fb:08:c3:98:c2:87:37:e0:36:5c:57:88:c8:52:
                    72:6d:cd:ba:7b:f2:66:1f:47:da:0d:81:aa:50:d6:
                    87:a9:54:10:a9:2c:c3:07:1d:20:83:a0:2b:f5:f0:
                    ff:f0:d4:7a:fa:bc:5e:94:25:82:4c:be:62:1d:42:
                    25:22:a1:97:f6:ae:7b:b8:10:90:04:42:c0:a9:d0:
                    bb:94:eb:e4:6a:3f:ae:9e:c8:06:47:ff:74:62:22:
                    fd:62:c2:28:3f:3d:e7:c0:0b:ed:15:be:09:21:71:
                    54:2c:ed:05:4a:0b:36:c1:59:9e:51:2d:64:65:f2:
                    9c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3C:60:D6:E7:8A:99:E1:1F:4B:13:A1:BC:59:30:E0:85:46:92:11
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F7664A3FDA11F19246AE14CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.1.0/24
                  156.229.124.0/24
                  156.229.175.0/24
                  156.229.237.0-156.229.238.255
                  156.229.244.0-156.229.246.255
                  156.229.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:1c:90:e3:d0:b7:05:1f:e6:f2:b1:e6:28:85:51:80:3a:f9:
         7b:b3:43:8b:4d:e7:78:74:16:65:1d:2e:9a:96:fd:9f:e3:65:
         54:04:fe:b1:05:d6:4a:ae:91:1a:ab:d5:a1:5e:6b:a1:64:2e:
         2b:36:a5:ee:13:b7:3e:3b:53:42:3b:8c:27:6f:a2:7c:51:21:
         5f:74:da:8a:19:db:cd:f6:3d:b9:59:38:48:c4:05:dc:b1:19:
         a0:d7:55:da:dd:2e:7e:7b:f7:5a:8a:ce:8f:24:93:8d:e2:1b:
         42:41:8f:ca:16:f3:51:71:a5:32:1a:37:95:4e:4d:9d:2b:d7:
         8e:df:77:cc:cb:18:00:dc:55:b1:fe:ff:40:c8:49:a2:c9:59:
         54:fd:35:42:b6:b8:0d:14:ae:8c:ae:37:a8:16:4a:7f:de:42:
         54:61:b6:70:fa:34:eb:39:ad:a4:2f:f4:dd:d7:d3:c4:be:e3:
         ea:bf:a2:26:14:7d:c4:5f:c3:e2:fc:d1:52:1e:fb:10:ac:1c:
         42:66:10:26:ca:59:06:7b:74:23:d7:b9:53:f2:dd:88:c3:48:
         85:a6:49:1c:b2:11:e4:13:26:13:4a:d3:fa:14:ec:ee:cb:bc:
         ef:2a:1b:1b:f3:56:a4:38:7c:b6:d3:80:3e:e0:34:a4:b9:1a:
         4d:d6:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:48 2026 by rpki-client