Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEED0186269A11F1B7A422E3DAE4EC9C.roa
File:                     FEED0186269A11F1B7A422E3DAE4EC9C.roa (raw, json)
Hash identifier:          QqbJK8y3ChMGxACIxHb+m68eG6t1KQGFxxyg4JStpBc=
Subject key identifier:   9C:AC:AD:F8:BB:50:C5:50:BB:EF:1B:B1:6D:B1:A7:D2:C0:27:99:4A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A6DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEED0186269A11F1B7A422E3DAE4EC9C.roa
Signing time:             Mon 23 Mar 2026 09:30:57 +0000
ROA not before:           Mon 23 Mar 2026 09:30:52 +0000
ROA not after:            Tue 31 Mar 2026 09:30:52 +0000
asID:                     62240
IP address blocks:        156.233.0.0/24 maxlen: 24
                          156.233.1.0/24 maxlen: 24
                          156.233.100.0/24 maxlen: 24
                          156.233.104.0/24 maxlen: 24
                          156.233.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108255 (0x1a6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar 23 09:30:52 2026 GMT
            Not After : Mar 31 09:30:52 2026 GMT
        Subject: CN=69c10851-b9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:0a:e1:8f:b5:d5:13:ce:07:3a:e2:83:db:
                    1e:95:b8:d4:f2:4b:61:2d:0f:9f:89:0a:ee:45:4b:
                    1c:a5:71:9a:92:cc:85:33:06:80:cf:76:2c:4f:d3:
                    3d:42:b7:10:1b:dd:06:8a:d3:9c:88:d9:16:3f:50:
                    94:00:fc:e7:de:5b:f0:36:d0:d7:25:21:b6:1e:60:
                    91:a5:2b:4a:73:6c:c7:e7:23:3f:b3:a9:22:41:67:
                    e5:17:68:cd:b1:cc:5f:2c:f9:40:86:42:3e:6a:66:
                    e4:4e:69:14:c0:5e:a1:e2:5c:2a:ee:2c:2c:d8:f5:
                    18:76:b7:3a:82:0e:7d:e5:55:1e:20:db:8e:7d:71:
                    ee:12:bd:2a:37:8a:18:0e:98:e8:5f:7c:14:ca:2d:
                    0c:a9:c3:72:3b:be:fd:d6:02:cf:b7:96:51:8a:75:
                    ae:01:66:7a:81:11:f7:c8:18:d0:3d:42:9f:14:ab:
                    3e:c1:da:13:20:db:7b:c4:6d:96:c5:ab:82:b7:46:
                    d0:f2:bf:a4:c0:5a:11:8a:d3:47:7f:85:04:d9:30:
                    cb:b2:af:ae:82:39:77:55:fa:fe:96:a7:35:fe:82:
                    f0:90:07:08:3e:3d:b7:50:d6:5b:b3:2e:bf:c7:f5:
                    9b:9e:85:26:4c:4a:84:6d:62:cb:7a:21:c8:da:46:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:AD:F8:BB:50:C5:50:BB:EF:1B:B1:6D:B1:A7:D2:C0:27:99:4A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEED0186269A11F1B7A422E3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.0.0/23
                  156.233.100.0/24
                  156.233.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:6d:b6:14:2d:da:ce:f5:e4:8c:72:0f:4b:8a:d9:f0:84:
         67:ca:91:38:e0:7b:c4:08:ad:32:67:1b:7f:cf:2c:63:43:1a:
         96:8e:08:8c:91:7f:1a:aa:66:6b:68:95:b8:5b:76:ca:89:e7:
         07:75:2e:bf:b9:92:92:9d:6a:b7:1e:b3:34:c4:35:5a:7d:95:
         77:45:79:09:d4:83:34:2f:87:a9:50:6c:60:15:52:df:58:9d:
         15:85:c2:cc:f9:c1:3b:f4:3b:af:68:48:d8:b4:e1:02:a7:71:
         4b:f0:12:cf:34:a9:4a:c2:46:4a:2f:84:5c:28:41:e2:72:8a:
         2a:ec:ba:5b:87:e2:2b:f7:e8:fc:a8:88:a1:a8:91:f0:0f:36:
         7a:1f:87:02:28:6a:08:48:9e:0b:82:0c:f8:84:5c:df:df:fd:
         5c:eb:f7:fa:d4:e0:b7:25:6d:0c:a6:53:82:56:56:f3:56:3b:
         bc:ce:04:77:31:62:93:55:dc:25:05:9c:98:2d:af:6e:bb:57:
         a3:9f:e9:df:37:8d:6b:a0:75:58:68:a9:42:36:e4:a4:48:50:
         8e:af:2b:3f:78:69:3c:a3:54:04:cc:cf:6f:4c:fa:56:a5:cc:
         a4:53:0b:13:b3:12:d8:a1:bb:e0:d4:9b:28:76:3e:3b:ad:76:
         82:6c:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:47 2026 by rpki-client