Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F911427242C911F1A1743501CF1D38B0.roa
File:                     F911427242C911F1A1743501CF1D38B0.roa (raw, json)
Hash identifier:          ZYJ5JoiMkW7hIEIEni/eiRqm0WPM0XWMCY9ZMNRAlDQ=
Subject key identifier:   48:9A:F2:DC:9D:E2:F8:EC:27:F2:F9:D7:53:5C:D6:28:08:58:B7:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AF7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F911427242C911F1A1743501CF1D38B0.roa
Signing time:             Tue 28 Apr 2026 06:17:46 +0000
ROA not before:           Tue 28 Apr 2026 06:17:42 +0000
ROA not after:            Fri 05 Jun 2026 06:17:42 +0000
asID:                     401696
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110462 (0x1af7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 28 06:17:42 2026 GMT
            Not After : Jun  5 06:17:42 2026 GMT
        Subject: CN=69f0510a-c5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:52:1d:43:4d:95:1a:2a:f0:3f:98:e5:9b:4c:
                    1c:ee:fc:a7:aa:07:9b:99:00:db:97:5f:46:29:34:
                    b5:a4:21:e8:7a:8d:e4:3e:e0:a0:eb:3a:eb:fc:72:
                    c2:03:fc:f7:7d:5e:7b:33:48:a7:45:e2:1b:20:0c:
                    70:b2:e7:de:97:02:0a:b9:88:b2:d9:ad:68:08:2e:
                    68:cb:86:ff:cc:e6:e9:ee:1c:be:ae:d9:6e:4e:a6:
                    2f:85:62:62:79:8b:1e:7e:42:4e:14:31:47:dd:1f:
                    5f:e5:19:c6:bd:6f:92:58:8b:ce:18:7b:54:d2:1e:
                    fa:86:a7:7a:2a:7b:6e:ef:c4:53:a6:e6:ef:6f:b4:
                    f0:24:f9:f8:0d:a4:e9:21:64:a4:41:f9:de:89:71:
                    6e:af:4a:99:08:a0:28:d3:5d:61:56:23:5c:75:3f:
                    1d:15:01:e4:b2:e5:f2:b2:3d:32:ab:8b:9f:fb:d9:
                    2d:c5:c3:f4:78:dc:27:5c:ce:05:1b:30:fd:f4:bd:
                    af:a4:78:a8:a0:5a:a0:e1:2f:fb:40:01:17:47:f7:
                    55:31:61:df:76:44:54:ad:ef:0f:7d:22:ff:9f:0b:
                    c4:02:0d:57:97:0c:b4:7d:8d:2c:0b:a7:d0:74:b0:
                    0f:d7:ab:e7:bd:18:fa:30:f6:83:ff:55:c4:bb:9c:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9A:F2:DC:9D:E2:F8:EC:27:F2:F9:D7:53:5C:D6:28:08:58:B7:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F911427242C911F1A1743501CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:20:62:49:d8:a1:6b:b0:3a:3f:9a:cf:ee:88:f6:18:8c:
         c8:b3:8d:06:5e:f2:41:3c:bf:86:e8:34:34:90:07:f3:8e:24:
         8d:9e:f0:f6:cd:38:54:85:9d:9f:7a:b7:76:60:eb:ff:f6:9c:
         b2:45:32:98:67:27:9f:81:a6:99:e0:67:e5:60:50:81:6a:d0:
         fa:c4:66:3c:ae:b6:4a:cc:b8:1f:b3:89:44:76:6e:92:4e:26:
         e9:6d:67:ec:8e:ea:a5:75:82:d3:e8:b0:03:87:28:7e:50:41:
         3f:83:04:d6:53:1c:53:2d:37:9d:c6:45:a3:cc:f3:d3:65:06:
         05:84:ab:3c:79:8e:2b:72:67:24:62:2d:b0:fb:97:3d:93:26:
         f6:c0:ab:7d:0e:ae:31:a3:59:2e:6f:9b:1b:50:6a:86:5d:3f:
         40:96:e0:42:d3:43:78:02:9a:e0:99:30:24:b8:a5:86:2c:24:
         c1:8b:91:19:58:c8:bd:ab:bc:59:97:cd:6b:3f:4c:e0:88:8f:
         7a:47:c8:7d:7c:bc:d2:3d:27:66:d6:da:b5:c6:3c:2b:0a:91:
         4a:59:99:98:b9:1a:6b:9b:52:c2:f0:a5:e8:5e:82:96:46:24:
         36:4b:d6:0c:2d:a6:3c:14:b7:40:5d:b8:27:f8:6c:82:7a:16:
         a8:b3:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:10 2026 by rpki-client