Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C1B937A019511F1AC857FD4DAE4EC9C.roa
File:                     5C1B937A019511F1AC857FD4DAE4EC9C.roa (raw, json)
Hash identifier:          iwcPJreChn75A3pi0+CQGidZ0WWq29AmtclUFBUd9WI=
Subject key identifier:   AF:26:CA:C2:FB:4E:89:BC:68:7F:99:96:53:63:9E:16:E1:66:33:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019BB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C1B937A019511F1AC857FD4DAE4EC9C.roa
Signing time:             Wed 04 Feb 2026 06:47:24 +0000
ROA not before:           Wed 04 Feb 2026 06:47:19 +0000
ROA not after:            Thu 12 Mar 2026 06:47:19 +0000
asID:                     138915
IP address blocks:        156.244.0.0/24 maxlen: 24
                          156.244.1.0/24 maxlen: 24
                          156.244.2.0/24 maxlen: 24
                          156.244.3.0/24 maxlen: 24
                          156.244.4.0/24 maxlen: 24
                          156.244.5.0/24 maxlen: 24
                          156.244.6.0/24 maxlen: 24
                          156.244.7.0/24 maxlen: 24
                          156.244.61.0/24 maxlen: 24
                          156.244.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105401 (0x19bb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb  4 06:47:19 2026 GMT
            Not After : Mar 12 06:47:19 2026 GMT
        Subject: CN=6982eb7b-98b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:95:4b:e2:b6:54:d2:fa:58:62:0e:40:f3:54:
                    61:57:5c:8f:62:d9:b0:7a:b5:8b:04:6c:bc:d4:2b:
                    91:76:28:1d:59:04:6d:b2:8f:6a:64:05:79:70:27:
                    29:8e:13:80:43:c7:b7:ea:7b:5f:06:c0:96:00:fe:
                    3e:4f:aa:fe:34:06:18:c2:0e:9b:0d:7d:1e:32:56:
                    82:b1:8c:1d:51:18:8f:11:81:69:4d:24:5d:a1:05:
                    70:60:d2:ce:b8:9f:92:09:e3:b8:e2:a5:a7:60:7f:
                    31:64:7c:bb:1a:57:3b:54:c0:c2:dd:c6:c2:8a:9b:
                    9e:cc:9b:ea:ef:81:fa:9a:68:d9:86:58:9c:10:13:
                    b0:ef:9e:b4:54:35:49:45:c5:2b:a2:54:60:f6:06:
                    c2:32:4b:f3:dd:22:0f:34:4f:aa:2e:35:b6:1a:ea:
                    8b:00:f4:f9:36:25:af:35:11:61:62:06:8f:8e:e5:
                    dd:3a:45:c0:1d:9b:6d:7f:81:f0:42:a8:60:b2:21:
                    01:d2:1f:83:38:29:ae:95:cd:85:e5:03:00:31:04:
                    e0:15:6d:02:bc:1e:8e:65:cc:5b:55:75:0e:a1:8d:
                    7d:00:c3:dc:a8:e7:73:87:82:87:46:dc:68:12:56:
                    ff:33:62:2a:ff:35:34:ef:bd:73:c0:12:65:46:c1:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:CA:C2:FB:4E:89:BC:68:7F:99:96:53:63:9E:16:E1:66:33:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C1B937A019511F1AC857FD4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.0.0/21
                  156.244.61.0-156.244.63.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:f5:96:db:00:56:47:e2:fe:ca:7f:46:e0:29:9f:ed:78:d7:
         21:d9:36:7a:9a:d5:fe:ab:7d:d2:1f:8c:ab:09:6d:fb:db:de:
         69:ac:66:fc:e7:a5:6a:c9:7d:2a:13:53:ab:31:31:80:05:0e:
         03:c8:7f:4d:55:7f:ef:4f:a4:20:6a:f9:b2:27:d9:5a:a8:c5:
         bf:a2:d9:ff:7b:91:3d:65:94:3d:06:06:e5:d4:a3:3b:fb:26:
         65:66:57:2c:91:26:fa:c1:5f:48:e4:d0:ec:d1:67:07:59:61:
         ef:25:94:2e:40:85:b6:d9:94:07:47:91:83:3f:0d:dd:96:9a:
         51:49:85:57:e1:63:65:ee:89:c5:14:33:02:f2:af:e7:e9:8b:
         84:89:f9:34:56:77:20:a5:ca:3f:a0:7a:ed:8b:d7:97:1d:5d:
         b2:6b:5b:74:6e:fc:d7:ed:bd:c4:c9:77:90:aa:6e:e8:ff:04:
         3a:1a:d2:75:5d:91:b6:5c:bd:8a:10:28:20:a6:bc:00:a7:20:
         26:f7:cf:3f:62:66:0f:60:9f:bf:98:08:05:e8:e5:91:66:64:
         06:aa:13:55:a5:56:d9:c8:53:14:96:0a:9b:a7:fd:d0:7b:f6:
         fe:09:74:67:d0:e7:cb:81:0d:61:f9:3b:98:bb:55:df:9e:38:
         4b:a9:2b:90
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAZu5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjA0MDY0NzE5WhcNMjYwMzEyMDY0NzE5WjAYMRYw
FAYDVQQDEw02OTgyZWI3Yi05OGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+JVL4rZU0vpYYg5A81RhV1yPYtmwerWLBGy81CuRdigdWQRtso9qZAV5
cCcpjhOAQ8e36ntfBsCWAP4+T6r+NAYYwg6bDX0eMlaCsYwdURiPEYFpTSRdoQVw
YNLOuJ+SCeO44qWnYH8xZHy7Glc7VMDC3cbCipuezJvq74H6mmjZhlicEBOw7560
VDVJRcUrolRg9gbCMkvz3SIPNE+qLjW2GuqLAPT5NiWvNRFhYgaPjuXdOkXAHZtt
f4HwQqhgsiEB0h+DOCmulc2F5QMAMQTgFW0CvB6OZcxbVXUOoY19AMPcqOdzh4KH
RtxoElb/M2Iq/zU0771zwBJlRsHhWQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFK8m
ysL7Tom8aH+ZllNjnhbhZjOvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QzFCOTM3QTAxOTUxMUYxQUM4NTdGRDREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDnPQAMAwDBACc9D0DBAac9AAw
DQYJKoZIhvcNAQELBQADggEBAC31ltsAVkfi/sp/RuApn+141yHZNnqa1f6rfdIf
jKsJbfvb3mmsZvznpWrJfSoTU6sxMYAFDgPIf01Vf+9PpCBq+bIn2Vqoxb+i2f97
kT1llD0GBuXUozv7JmVmVyyRJvrBX0jk0OzRZwdZYe8llC5AhbbZlAdHkYM/Dd2W
mlFJhVfhY2XuicUUMwLyr+fpi4SJ+TRWdyClyj+geu2L15cdXbJrW3Ru/NftvcTJ
d5Cqbuj/BDoa0nVdkbZcvYoQKCCmvACnICb3zz9iZg9gn7+YCAXo5ZFmZAaqE1Wl
VtnIUxSWCpun/dB79v4JdGfQ58uBDWH5O5i7Vd+eOEupK5A=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:26 2026 by rpki-client