Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFD1CF04491F11F1A0D8F308CF1D38B0.roa
File:                     EFD1CF04491F11F1A0D8F308CF1D38B0.roa (raw, json)
Hash identifier:          qW0lsN0VRJnpl9EXdMuPp588Yj7g/P/x22FO8LRstro=
Subject key identifier:   2C:17:B9:07:C9:F1:41:D8:7B:2E:5C:04:A6:1A:14:C9:6E:A0:19:4C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B1AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFD1CF04491F11F1A0D8F308CF1D38B0.roa
Signing time:             Wed 06 May 2026 07:48:14 +0000
ROA not before:           Wed 06 May 2026 07:48:10 +0000
ROA not after:            Sun 06 May 2029 07:48:10 +0000
asID:                     17561
IP address blocks:        156.235.178.0/24 maxlen: 24
                          156.235.179.0/24 maxlen: 24
                          156.235.180.0/24 maxlen: 24
                          156.235.181.0/24 maxlen: 24
                          156.235.182.0/24 maxlen: 24
                          156.235.183.0/24 maxlen: 24
                          156.235.184.0/24 maxlen: 24
                          156.235.185.0/24 maxlen: 24
                          156.235.186.0/24 maxlen: 24
                          156.235.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111022 (0x1b1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  6 07:48:10 2026 GMT
            Not After : May  6 07:48:10 2029 GMT
        Subject: CN=69faf23e-603a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f2:03:d2:35:48:2c:51:bd:c9:16:14:48:eb:
                    92:7b:16:83:81:17:39:66:fe:d1:2a:1d:40:91:a1:
                    43:3d:7a:e0:50:44:f8:63:41:c3:21:9d:41:f4:5f:
                    90:19:34:2d:d5:78:cc:be:58:1c:e2:9a:bc:5a:7b:
                    25:58:af:d1:62:e9:c2:d6:ef:43:18:74:78:f2:dc:
                    da:58:f5:b1:c5:e2:58:d8:e0:82:ab:b1:f3:8b:3f:
                    84:30:25:b2:eb:be:8b:46:ac:46:0a:42:94:c0:42:
                    b8:e5:e1:89:46:36:5e:d8:56:2e:8d:7e:c1:ed:25:
                    87:a2:70:96:73:9f:d1:8f:9e:67:28:98:fb:49:2d:
                    be:0c:05:2a:d0:de:32:1e:80:50:41:00:64:2b:12:
                    2c:6a:95:0c:6a:19:ad:d8:f7:22:a3:dc:b4:a2:66:
                    f4:26:a1:22:3e:36:d0:5e:97:6e:c0:87:59:a3:64:
                    91:19:af:10:f7:d5:a8:e4:2b:f4:a7:59:94:40:69:
                    58:1a:14:99:ad:e6:35:11:8a:2b:e4:31:46:d4:63:
                    e6:38:d2:e6:68:cd:af:84:99:10:2a:0a:d3:dd:28:
                    32:b4:70:d8:32:d2:d8:24:11:a6:3f:0f:aa:41:5f:
                    67:20:0b:7e:8d:05:bf:a0:f4:38:dd:1b:7a:99:c1:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:B9:07:C9:F1:41:D8:7B:2E:5C:04:A6:1A:14:C9:6E:A0:19:4C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFD1CF04491F11F1A0D8F308CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.178.0-156.235.187.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:5e:a8:04:0c:2f:5d:f7:76:64:64:1a:e5:4a:c9:08:4a:b2:
         e1:ac:fd:0b:b5:75:b2:a5:dd:d5:6b:df:a2:3a:27:f8:d0:22:
         29:e8:e3:c2:54:36:66:74:90:d3:c7:f7:d3:9f:49:70:f0:14:
         3c:53:fb:c0:9b:b3:03:af:42:46:5f:b7:47:5a:a2:6c:f4:2c:
         58:a8:58:58:bd:69:81:96:4b:f5:9a:5f:e9:f6:e8:57:c6:e8:
         4e:2e:ca:11:48:0f:4a:41:a5:81:f3:01:f1:3c:76:ed:46:57:
         4e:bc:3b:08:3e:0a:02:43:5d:75:dc:99:3e:a9:e5:89:cd:08:
         a3:37:0c:0d:2b:61:27:7b:12:05:4f:94:15:13:71:50:8b:ad:
         e0:25:44:c9:d7:fc:84:5b:c9:29:b4:d0:b9:0d:95:e0:b1:01:
         c2:bd:c0:5a:40:29:a5:15:db:24:b3:f0:d6:62:c9:b3:93:91:
         5b:28:b9:47:70:52:ad:a4:b7:97:fa:12:73:c4:4f:d1:09:7a:
         7f:86:0c:25:f0:7b:3d:0f:f5:50:70:06:76:22:ab:16:da:5a:
         f4:88:38:04:2d:9a:8a:79:f2:8c:79:6c:40:b0:7d:7f:78:5b:
         91:cf:86:d4:04:7f:57:8d:ed:3d:e6:92:1d:3a:8e:c2:35:24:
         a9:fe:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:13 2026 by rpki-client