Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A49453860D911F1A018B0D8CE1D38B0.roa
File:                     7A49453860D911F1A018B0D8CE1D38B0.roa (raw, json)
Hash identifier:          juCLWcAsbEoTwBZWK7vsJGFbCjIDIEbUf5oJwMyZHoY=
Subject key identifier:   4C:40:E7:34:05:9D:59:95:58:A7:F1:9A:F3:5E:29:88:91:75:2C:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BC17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A49453860D911F1A018B0D8CE1D38B0.roa
Signing time:             Fri 05 Jun 2026 12:24:20 +0000
ROA not before:           Fri 05 Jun 2026 12:24:15 +0000
ROA not after:            Tue 05 Jun 2029 12:24:15 +0000
asID:                     17561
IP address blocks:        156.242.178.0/24 maxlen: 24
                          156.242.179.0/24 maxlen: 24
                          156.242.180.0/24 maxlen: 24
                          156.242.181.0/24 maxlen: 24
                          156.242.182.0/24 maxlen: 24
                          156.242.183.0/24 maxlen: 24
                          156.242.184.0/24 maxlen: 24
                          156.242.185.0/24 maxlen: 24
                          156.242.186.0/24 maxlen: 24
                          156.242.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113687 (0x1bc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  5 12:24:15 2026 GMT
            Not After : Jun  5 12:24:15 2029 GMT
        Subject: CN=6a22bff4-bf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:a1:8f:58:49:b6:8b:50:2f:7f:44:58:6b:
                    b2:7c:6d:de:07:ec:bb:01:42:50:46:2b:47:71:07:
                    1e:22:4d:71:93:ad:73:d8:3c:34:1e:cc:76:36:fb:
                    5c:5b:e8:53:fa:bd:e3:88:0f:ba:4d:c0:99:b9:16:
                    72:85:a9:8e:f5:dc:c0:c2:51:00:3e:8a:3e:e9:02:
                    01:a2:f1:4d:62:05:a8:a8:a5:88:cd:9a:ab:c3:28:
                    7b:53:5c:e0:a2:69:79:04:e0:95:13:44:cd:e9:b5:
                    6a:51:64:8a:65:0d:0b:6f:9e:bf:c2:4f:40:7b:c3:
                    24:48:11:ba:d7:5e:4b:70:48:3f:4e:9c:b0:6f:01:
                    ba:f2:ea:14:b8:ec:73:3f:cf:9a:93:ca:c1:51:19:
                    66:c4:50:88:88:11:8f:7d:c1:65:d3:13:6d:a2:8f:
                    11:a6:9c:20:90:85:a8:17:ae:5c:b7:05:30:26:d3:
                    e4:2d:98:e0:cc:13:2d:10:c8:1c:90:8c:83:65:de:
                    cf:fc:02:04:70:bb:7b:4e:0c:37:34:36:30:5a:1e:
                    e8:8f:70:84:cf:a4:ef:31:13:ec:df:e1:9a:17:9f:
                    71:e2:8f:90:fb:65:c8:55:85:8b:be:5b:8c:53:31:
                    8a:34:21:95:90:97:62:4e:d3:af:2a:a9:e2:8e:6b:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:40:E7:34:05:9D:59:95:58:A7:F1:9A:F3:5E:29:88:91:75:2C:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A49453860D911F1A018B0D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.178.0-156.242.187.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:c0:3c:6f:b5:4f:39:59:04:41:e1:03:e8:d8:8c:88:1d:e9:
         85:bd:10:84:9b:7c:67:b2:f2:90:c8:36:9c:a0:fd:de:e5:13:
         47:fc:5b:34:64:cd:ae:32:68:8e:33:8f:4a:a4:94:bd:b2:0e:
         96:21:a4:2e:d6:13:78:3c:9a:f9:4a:36:39:32:fe:90:20:3d:
         23:1c:de:7a:cf:c8:19:41:3a:cd:65:3e:ac:56:d6:28:fe:2c:
         93:34:55:97:aa:f4:ce:3a:09:f6:aa:99:1b:23:a8:80:f6:51:
         fb:1b:6f:79:2e:dc:12:7e:c1:52:01:0a:25:a9:82:7c:22:ba:
         f6:07:7e:9a:5c:55:c6:3b:9c:b9:2c:e8:2f:f7:96:48:b9:69:
         19:3f:bf:69:7d:b7:d5:8e:7e:5c:97:d9:22:d6:c1:af:f6:60:
         70:c4:b2:6c:90:73:48:0f:76:cd:b0:a4:d5:24:a0:45:09:b3:
         41:66:36:e4:f0:37:ce:13:40:e5:8e:84:c8:b4:d8:5d:cf:8a:
         fd:b2:b0:bf:6c:d7:04:46:f7:90:37:05:e8:eb:cf:1d:69:48:
         ab:d8:f3:98:ef:9f:eb:c8:d1:06:55:4e:22:3f:a9:2c:5e:66:
         07:e5:01:9d:b3:98:c3:ea:85:a3:e1:7b:60:a4:f6:b7:a1:55:
         8c:e5:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:43 2026 by rpki-client