Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC1769FA42CA11F1941C4605CF1D38B0.roa
File:                     AC1769FA42CA11F1941C4605CF1D38B0.roa (raw, json)
Hash identifier:          6mY+aA8q4vTZiNFjQOOXkaNln8qle5MsbCv6OOJAizc=
Subject key identifier:   B9:F5:DE:BD:AE:C1:DD:A9:8A:D4:DC:31:C1:35:A5:78:DE:AD:37:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AF80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC1769FA42CA11F1941C4605CF1D38B0.roa
Signing time:             Tue 28 Apr 2026 06:22:47 +0000
ROA not before:           Tue 28 Apr 2026 06:22:42 +0000
ROA not after:            Fri 05 Jun 2026 06:22:42 +0000
asID:                     40779
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110464 (0x1af80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 28 06:22:42 2026 GMT
            Not After : Jun  5 06:22:42 2026 GMT
        Subject: CN=69f05236-1530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:4d:31:d6:4b:4c:5e:da:52:b6:3d:a1:99:
                    01:33:c2:56:59:5f:dd:89:54:aa:d0:e4:2b:e6:39:
                    9a:7c:2d:32:07:d9:ba:b7:9d:31:16:1b:25:3e:03:
                    92:38:6b:54:ba:f7:b1:85:12:fa:91:a6:f5:eb:4a:
                    4f:84:3b:fe:77:0c:9c:39:2b:a1:e7:34:a0:f4:16:
                    ba:8f:5e:65:5b:ae:04:35:93:65:b4:27:2c:a8:a9:
                    ac:a5:88:d6:48:08:bf:64:39:a7:0b:e7:a2:5b:61:
                    c9:82:26:34:12:07:ab:1c:4f:ab:3e:0a:0a:30:66:
                    82:77:5c:e9:c9:92:3f:a3:38:da:9d:ee:bd:2d:64:
                    64:a4:65:45:69:b2:29:70:58:bb:f0:11:8c:a5:8b:
                    eb:82:75:1b:21:25:ee:f7:fe:d7:ad:52:6d:d2:8d:
                    23:17:a8:87:38:f5:86:7a:86:5d:71:6f:6f:c9:95:
                    55:26:1e:4c:ba:02:c7:62:e0:d0:ca:1f:93:3c:7a:
                    2b:31:b0:ac:f2:0a:ba:73:f5:d1:a8:69:76:35:d6:
                    57:59:14:5f:e0:24:c0:af:17:76:b5:f0:4e:de:f5:
                    65:0d:53:07:a9:46:fe:a5:f5:aa:84:c4:05:71:51:
                    82:54:6c:ad:68:74:db:97:c6:33:20:24:1a:e6:f7:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:DE:BD:AE:C1:DD:A9:8A:D4:DC:31:C1:35:A5:78:DE:AD:37:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC1769FA42CA11F1941C4605CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:d1:7d:38:2d:85:f1:92:2c:24:fe:d0:a7:87:6a:9d:cb:fc:
         33:04:3b:81:05:ca:dc:9c:0d:91:aa:d7:02:e1:ff:fa:68:66:
         72:dd:ea:36:32:c0:e7:4c:a6:26:05:58:18:3b:59:ed:f0:3b:
         7c:3d:6d:f8:1e:fa:6e:2e:4c:9c:8e:e3:40:dd:67:4b:f4:9b:
         6e:b4:ac:bb:d2:b5:eb:58:6d:65:e9:f7:a4:75:64:27:20:8d:
         fb:c8:e0:06:da:0a:a7:f7:64:bd:c3:8b:90:c4:72:7c:4c:d9:
         e8:5e:75:3c:e2:e0:e1:00:22:db:b8:53:19:c6:da:49:a3:fa:
         0e:65:03:dc:1e:c2:29:ba:1d:77:64:83:6e:b9:c1:94:ce:07:
         f1:2a:b4:97:1b:07:f4:45:3f:3c:b4:35:dd:b3:57:a8:bc:5c:
         9b:eb:59:81:03:84:b1:55:2f:cd:17:5d:56:14:fc:47:f1:fb:
         a9:5c:3d:fc:2f:bf:18:bb:e2:7f:5d:c0:5f:dd:03:df:07:19:
         4c:f6:54:27:7f:a8:3a:b7:06:24:c0:f4:87:71:55:9a:ed:27:
         0a:d6:fa:85:bf:25:c2:05:6f:97:58:a2:70:37:a0:3b:22:d7:
         f9:10:63:ac:75:15:f0:26:1d:93:3f:fb:5f:68:05:40:b4:90:
         a2:04:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:43:13 2026 by rpki-client