Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE7F1E9E498311F1BC93F4DDCE1D38B0.roa
File:                     FE7F1E9E498311F1BC93F4DDCE1D38B0.roa (raw, json)
Hash identifier:          QgGcdqtpV263xKmVDjms3mmPpwZsABHs92y29mlU85I=
Subject key identifier:   92:D1:C9:A6:B2:11:3B:43:8F:E4:6F:30:6F:9A:65:84:8B:99:F5:17
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B1FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE7F1E9E498311F1BC93F4DDCE1D38B0.roa
Signing time:             Wed 06 May 2026 19:44:29 +0000
ROA not before:           Wed 06 May 2026 19:44:24 +0000
ROA not after:            Sun 06 May 2029 19:44:24 +0000
asID:                     17561
IP address blocks:        156.235.188.0/24 maxlen: 24
                          156.235.189.0/24 maxlen: 24
                          156.235.190.0/24 maxlen: 24
                          156.235.191.0/24 maxlen: 24
                          156.235.192.0/24 maxlen: 24
                          156.235.193.0/24 maxlen: 24
                          156.235.194.0/24 maxlen: 24
                          156.235.195.0/24 maxlen: 24
                          156.235.196.0/24 maxlen: 24
                          156.235.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111100 (0x1b1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  6 19:44:24 2026 GMT
            Not After : May  6 19:44:24 2029 GMT
        Subject: CN=69fb9a1d-00d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:a6:8a:50:32:22:66:a4:bc:fa:8c:17:60:
                    db:26:c3:19:a0:e7:0f:42:21:d1:71:98:c2:6d:2a:
                    78:e0:c3:ba:0d:82:c6:1d:f8:c4:0b:bf:9e:11:c5:
                    3c:ef:10:b2:db:9a:39:41:fa:29:34:cb:91:1e:3b:
                    98:22:a2:09:98:9f:42:3a:5b:7b:48:43:68:c5:b1:
                    89:77:f5:cf:96:b6:18:51:a6:20:38:aa:50:a0:37:
                    de:e7:d3:27:6d:fc:73:7a:8d:17:5e:49:bd:bd:4f:
                    ef:78:02:01:bf:d9:85:b7:36:75:d4:9a:c0:39:b9:
                    da:c2:5b:b4:97:e3:73:00:88:fe:e7:2e:6c:9b:cc:
                    e0:85:ad:9a:cb:41:f1:5a:3a:af:22:87:6f:79:15:
                    e1:24:66:7f:45:53:a3:0e:d0:43:ff:87:43:45:2d:
                    b6:fe:40:c2:cd:c4:8a:d4:0c:c6:05:a8:ec:6a:ae:
                    9e:ad:02:d7:54:34:a5:81:90:a1:58:c4:86:bc:eb:
                    b7:e5:6c:03:89:9e:bd:d5:02:76:c1:4d:df:2d:20:
                    1b:d7:01:43:bc:c5:ad:b6:b9:30:58:5d:cf:c8:17:
                    c3:4a:77:90:af:86:ab:17:f6:86:d4:dd:2f:c2:7a:
                    47:fe:a3:0c:ca:08:5a:ce:fc:5c:ec:8b:a6:0c:e5:
                    3b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D1:C9:A6:B2:11:3B:43:8F:E4:6F:30:6F:9A:65:84:8B:99:F5:17
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE7F1E9E498311F1BC93F4DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.188.0-156.235.197.255

    Signature Algorithm: sha256WithRSAEncryption
         bc:73:03:4a:19:ee:58:f0:2d:8e:f8:4d:cd:b3:84:b5:22:e1:
         0d:8b:33:39:be:71:11:4b:08:58:87:c2:86:10:f8:e0:52:34:
         9e:e7:04:d3:99:ca:10:6f:ca:02:44:f1:ca:57:40:46:26:17:
         0b:e0:cf:f7:e2:7f:40:36:cf:08:1e:46:c5:70:66:02:bc:22:
         a8:73:a1:aa:2b:92:e7:f6:bf:0e:04:40:ef:95:09:9a:98:c0:
         11:09:aa:cd:8d:a9:16:16:5f:34:76:88:39:da:63:43:69:da:
         9e:42:91:e6:b2:5b:f6:66:ba:41:c5:06:ae:39:42:79:3b:1b:
         a7:32:50:ab:b1:bf:77:3b:a9:3f:87:44:5e:ea:46:90:97:3a:
         ad:0c:b5:a6:5d:96:94:95:d4:94:5f:8f:e7:c4:e1:3e:5c:b4:
         29:40:e7:dc:b4:b9:22:97:65:41:5a:4e:1d:cc:77:3c:2c:cc:
         12:6b:94:a0:6e:35:eb:17:f7:82:72:bd:11:70:0e:3e:8f:da:
         0f:5d:78:b1:39:f4:22:41:08:cc:f5:68:93:9d:ee:ce:2a:e7:
         c6:5b:24:f3:8b:5d:12:77:22:67:e2:9c:b9:e7:e1:99:6b:87:
         17:f4:de:38:d8:76:d4:1b:9f:9f:11:51:a7:60:f5:ac:db:52:
         a4:9d:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:01 2026 by rpki-client