Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D98C3965FE311F197396703CF1D38B0.roa
File:                     6D98C3965FE311F197396703CF1D38B0.roa (raw, json)
Hash identifier:          3mDGvo6PWskdd7I0lOR7UrMBF9rVfx30QlkjogN96rc=
Subject key identifier:   26:40:8D:1A:29:46:30:87:B7:AF:A8:F0:97:2D:F7:17:2B:3B:8F:B3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BBA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D98C3965FE311F197396703CF1D38B0.roa
Signing time:             Thu 04 Jun 2026 07:03:03 +0000
ROA not before:           Thu 04 Jun 2026 07:02:58 +0000
ROA not after:            Fri 10 Jul 2026 07:02:58 +0000
asID:                     154177
IP address blocks:        156.244.7.0/24 maxlen: 24
                          156.244.9.0/24 maxlen: 24
                          156.244.18.0/24 maxlen: 24
                          156.244.25.0/24 maxlen: 24
                          156.244.27.0/24 maxlen: 24
                          156.244.49.0/24 maxlen: 24
                          156.244.55.0/24 maxlen: 24
                          156.244.56.0/23 maxlen: 24
                          156.244.58.0/23 maxlen: 24
                          156.244.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113572 (0x1bba4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  4 07:02:58 2026 GMT
            Not After : Jul 10 07:02:58 2026 GMT
        Subject: CN=6a212327-6a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:78:0f:bc:ec:a6:cc:ca:0e:1f:22:59:e4:
                    01:8d:6d:f4:60:ce:3d:a2:ce:c0:8d:58:83:8d:b2:
                    30:7d:51:3e:54:e4:97:f2:eb:e8:4b:60:5c:96:65:
                    78:f8:75:27:4a:25:4e:4a:cf:59:40:9b:ba:9d:16:
                    79:72:65:9e:0d:ef:60:92:10:e7:cf:eb:9b:c1:52:
                    c1:c8:e7:8d:ff:47:58:09:4c:39:79:cf:34:cd:01:
                    20:47:7d:14:9a:3f:d3:9e:fc:25:6c:a5:66:e3:07:
                    fc:9f:85:0e:90:af:ff:6c:d0:e5:56:13:5b:60:30:
                    ac:29:e8:f7:3b:b1:5e:48:44:18:49:c4:5e:8a:13:
                    c9:e8:7b:04:1d:9c:ad:89:db:49:a6:69:ea:7c:cb:
                    3a:74:f2:2f:73:1a:13:97:54:a7:72:1c:b1:91:40:
                    dc:d7:59:f9:01:ef:e6:93:9c:ae:8f:3a:9c:db:1f:
                    17:13:f8:8c:aa:84:00:e5:2d:6b:ed:61:39:f6:19:
                    eb:aa:38:81:58:cf:72:39:09:82:26:59:cc:bc:14:
                    43:c9:24:7f:a4:a8:71:9d:5b:cb:46:5b:a8:47:a3:
                    13:73:13:62:af:c4:ce:32:ac:4d:7f:15:9a:05:5a:
                    32:f8:ce:b5:f6:cf:8b:4c:13:87:50:7e:95:e2:83:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:40:8D:1A:29:46:30:87:B7:AF:A8:F0:97:2D:F7:17:2B:3B:8F:B3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D98C3965FE311F197396703CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.7.0/24
                  156.244.9.0/24
                  156.244.18.0/24
                  156.244.25.0/24
                  156.244.27.0/24
                  156.244.49.0/24
                  156.244.55.0-156.244.59.255
                  156.244.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:b8:95:42:20:aa:fe:2d:11:5a:32:af:d6:27:9c:e9:cd:41:
         8c:e5:5f:2e:cf:89:6a:c4:70:f3:d4:c4:c1:2e:01:7c:62:ee:
         3f:c6:5d:6c:c1:7f:d5:0f:e2:a3:88:a5:d6:7b:1c:13:0a:04:
         ec:11:c0:01:7d:bd:76:3a:ae:c9:7f:44:8d:2d:b5:7b:5d:ed:
         c5:b0:61:ee:d9:68:7f:01:6f:b8:49:1e:cf:8f:dc:92:8b:1a:
         0f:a7:7d:1a:fa:c7:57:07:e3:72:0b:be:fa:78:bf:95:ce:e1:
         b2:3e:a4:a7:54:da:96:02:db:9c:55:7d:88:94:f6:7f:b6:67:
         25:a9:d6:8f:4e:60:4c:7f:63:cd:bc:5e:96:57:83:d7:bb:68:
         e0:67:e7:89:4f:09:a8:9f:ee:14:93:56:c9:7f:f5:e3:b0:4f:
         57:ea:3a:50:bf:07:e8:24:94:13:64:8c:a1:ed:42:c5:1f:fb:
         09:be:8e:c7:e9:00:70:c1:7c:08:2d:a3:17:ca:47:99:26:47:
         a4:d8:79:f1:9c:d5:ca:0c:45:ac:91:81:86:ff:74:44:5c:dd:
         58:b5:f5:71:df:2e:27:27:f9:93:e3:35:bd:c0:71:89:d7:6d:
         fc:77:0d:d3:48:76:95:01:5e:61:6c:bd:9e:96:a4:b6:b7:7c:
         62:90:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:19:09 2026 by rpki-client