Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E847EA9E4A0911F1BEB49A12CF1D38B0.roa
File:                     E847EA9E4A0911F1BEB49A12CF1D38B0.roa (raw, json)
Hash identifier:          jfS45b+AbSKbvxB33Y390DTj4vzyqHBQjzR6NNGVlyo=
Subject key identifier:   B1:A6:87:01:1D:A7:9F:DE:B7:78:89:21:94:9C:BE:83:D8:29:6D:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B24A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E847EA9E4A0911F1BEB49A12CF1D38B0.roa
Signing time:             Thu 07 May 2026 11:43:04 +0000
ROA not before:           Thu 07 May 2026 11:42:59 +0000
ROA not after:            Fri 22 May 2026 11:42:59 +0000
asID:                     401701
IP address blocks:        156.233.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111178 (0x1b24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  7 11:42:59 2026 GMT
            Not After : May 22 11:42:59 2026 GMT
        Subject: CN=69fc7ac8-43fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3d:3d:05:c1:8d:ec:64:ea:96:88:0c:17:82:
                    f3:1a:63:cf:44:7c:7f:e6:46:9e:43:6d:3d:ba:5a:
                    18:e1:6b:c5:73:9c:43:da:b6:c6:fb:17:48:24:9f:
                    8d:00:df:82:8f:d9:e5:98:9a:d5:ad:aa:70:0c:da:
                    7a:d9:3f:27:70:97:c7:d6:af:cd:2d:ec:71:07:30:
                    f1:d8:9e:41:aa:7d:b7:e6:50:62:c6:ad:4a:13:24:
                    d9:d9:30:5e:28:28:06:c2:1c:60:a9:87:02:72:64:
                    18:5a:15:d6:3c:5c:5b:3b:09:d8:0f:40:9a:2d:f4:
                    7d:e2:74:3e:98:79:8e:f1:29:73:d4:f5:12:4f:a4:
                    16:b6:84:7f:1e:bf:02:43:1d:10:77:3d:bc:68:19:
                    19:e8:c0:b4:f3:56:0d:2d:c6:2d:92:56:b4:47:6e:
                    b5:bb:95:4a:08:b0:32:06:d5:56:33:1d:00:0f:63:
                    cb:23:e9:af:d5:e3:08:bb:7c:08:72:a0:3c:a8:fb:
                    63:72:2c:41:8f:17:11:51:ec:91:cc:50:e8:a6:52:
                    33:fb:b8:97:09:24:88:05:98:ff:47:16:2d:f6:c7:
                    4b:96:dc:03:19:ac:83:ef:12:18:79:8b:05:2d:8d:
                    bf:86:92:37:6a:61:1c:17:bf:70:b8:48:5d:e3:2d:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A6:87:01:1D:A7:9F:DE:B7:78:89:21:94:9C:BE:83:D8:29:6D:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E847EA9E4A0911F1BEB49A12CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:d4:5c:7a:ef:a4:3b:e1:4c:20:eb:38:23:f3:67:06:49:0a:
         fc:68:41:5a:e4:2e:a6:10:52:aa:36:6e:9c:ef:a4:82:df:ff:
         4c:4a:fa:90:9c:4a:6b:66:0e:da:85:65:69:ca:90:4b:2a:38:
         39:20:14:fc:b1:37:17:40:ee:37:c8:2e:0e:59:24:9e:0c:42:
         d7:d8:19:3e:fa:b8:fd:bf:09:ed:e3:e6:59:aa:65:5d:d5:f0:
         50:bb:35:dc:f3:c9:a2:6b:77:f6:0e:6f:a2:b1:0f:b7:3a:89:
         4f:19:a6:44:73:b8:43:f0:a1:ed:ee:4e:68:26:1a:fa:68:8e:
         33:aa:58:0c:c6:39:62:39:34:7d:b8:d5:3a:14:ea:a0:5c:2b:
         a5:e1:ad:63:33:e3:de:44:48:f8:8d:8e:02:b4:ed:49:f5:64:
         cb:c1:53:a5:04:82:47:cd:e3:77:a5:31:a7:eb:a3:39:fb:db:
         bc:3d:c7:a0:3a:fe:bf:ee:ea:e6:6f:78:66:e1:78:81:5e:e9:
         cd:35:83:00:a3:26:5c:fa:f7:95:a6:79:f1:a3:35:9f:10:d2:
         d4:bc:f0:06:ee:49:16:f8:1e:f7:45:40:87:2a:60:bf:26:42:
         af:ad:5c:de:20:87:43:eb:9c:3f:ac:72:a3:73:33:70:a6:74:
         49:45:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:22 2026 by rpki-client