Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9031534A370811F19D971511CF1D38B0.roa
File:                     9031534A370811F19D971511CF1D38B0.roa (raw, json)
Hash identifier:          FL+TpyyPtv7/3RayoRQ0rmLGSN3UKId+JgScyK6S4co=
Subject key identifier:   87:7C:12:06:28:23:7D:02:5D:B3:18:0E:32:D2:77:62:BC:AB:4E:77
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AC36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9031534A370811F19D971511CF1D38B0.roa
Signing time:             Mon 13 Apr 2026 07:15:35 +0000
ROA not before:           Mon 13 Apr 2026 07:15:30 +0000
ROA not after:            Mon 20 Apr 2026 07:15:30 +0000
asID:                     136907
IP address blocks:        156.230.32.0/21 maxlen: 24
                          156.230.40.0/21 maxlen: 24
                          156.230.64.0/18 maxlen: 24
                          156.240.128.0/18 maxlen: 24
                          156.253.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 14:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109622 (0x1ac36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 13 07:15:30 2026 GMT
            Not After : Apr 20 07:15:30 2026 GMT
        Subject: CN=69dc9817-34d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:74:9f:34:c0:6d:17:2d:4e:47:99:8d:83:
                    c8:e7:d8:d7:ae:57:fa:62:79:c7:dd:b5:0c:61:26:
                    6e:89:82:8a:09:4e:0b:3f:a6:b8:b7:3e:b9:6d:9d:
                    29:3c:e9:96:80:f9:24:9e:cc:db:5f:12:1d:6a:9f:
                    a2:67:83:9a:cf:b7:2d:99:44:26:e7:52:83:6c:fe:
                    91:f1:b4:86:8b:0d:38:0b:c4:6e:bd:28:e1:5c:04:
                    fa:1e:92:35:70:ce:5e:bd:9f:bd:78:0d:17:58:bc:
                    f0:44:bc:ec:0e:90:f9:77:29:8a:99:73:6e:29:65:
                    70:fd:d1:d9:4f:cc:49:81:30:0b:61:da:55:32:73:
                    28:82:23:4d:a0:65:cf:7b:7e:4d:44:78:0d:f8:8f:
                    6c:7c:21:c9:1d:5c:41:79:0f:f5:aa:36:f8:28:95:
                    f4:a4:8b:3b:fc:98:4d:bb:7a:d0:44:07:b0:d4:ab:
                    22:d6:db:47:2e:69:a7:cf:b6:cb:42:d3:f8:5f:06:
                    5a:d1:44:65:d7:13:02:64:54:57:5c:8e:da:a3:53:
                    d3:b1:70:27:45:5a:8c:48:82:d8:0c:eb:6a:9d:4f:
                    b6:e5:40:b1:a8:2a:2c:0c:c7:e2:bf:69:eb:b5:0a:
                    f3:85:04:ed:1f:d8:b6:4d:1b:7b:b3:7e:71:0a:1b:
                    e8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:12:06:28:23:7D:02:5D:B3:18:0E:32:D2:77:62:BC:AB:4E:77
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9031534A370811F19D971511CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.32.0/20
                  156.230.64.0/18
                  156.240.128.0/18
                  156.253.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:25:8b:60:e8:44:ba:71:76:33:c7:68:d6:9f:54:e7:21:39:
         b7:6b:b2:12:83:e0:7a:94:a3:47:7f:6b:63:21:62:02:97:71:
         71:54:2c:ed:1a:d5:04:4a:63:fc:42:c1:6b:18:8b:19:74:2d:
         80:c2:d5:d6:6e:83:0e:8f:8f:5f:de:1f:f1:09:0a:4b:04:6c:
         c2:3b:a6:92:0c:5e:81:41:e6:da:32:28:46:02:a4:4f:e8:24:
         50:cf:85:d0:37:85:2c:8d:70:2b:bb:f3:34:96:60:a0:94:76:
         d4:fa:cb:ea:da:42:5d:70:bd:ec:76:5a:ae:97:3b:d6:6a:d1:
         7f:92:0a:44:0f:33:56:f2:3b:16:e0:f8:66:39:3c:0d:46:75:
         c9:40:b2:43:0c:47:1c:41:74:4b:1a:0d:d2:c9:96:cd:5a:c2:
         ba:b2:a6:6d:06:a1:90:77:52:40:12:c9:9c:2f:6d:bf:3d:4c:
         15:e0:8c:b5:9f:15:22:c3:e8:2d:81:72:55:48:cf:b5:d8:ca:
         8c:50:27:72:d0:92:b9:60:33:96:d1:df:2c:fb:11:38:92:e0:
         2a:8b:1a:2f:ce:8f:76:11:29:ac:13:89:80:71:f1:c4:ae:00:
         e7:a6:17:e3:07:2a:1e:99:be:a3:3d:29:fd:f5:68:53:24:f4:
         c4:4e:f2:de
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAaw2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDEzMDcxNTMwWhcNMjYwNDIwMDcxNTMwWjAYMRYw
FAYDVQQDEw02OWRjOTgxNy0zNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqHF0nzTAbRctTkeZjYPI59jXrlf6YnnH3bUMYSZuiYKKCU4LP6a4tz65
bZ0pPOmWgPkknszbXxIdap+iZ4Oaz7ctmUQm51KDbP6R8bSGiw04C8RuvSjhXAT6
HpI1cM5evZ+9eA0XWLzwRLzsDpD5dymKmXNuKWVw/dHZT8xJgTALYdpVMnMogiNN
oGXPe35NRHgN+I9sfCHJHVxBeQ/1qjb4KJX0pIs7/JhNu3rQRAew1Ksi1ttHLmmn
z7bLQtP4XwZa0URl1xMCZFRXXI7ao1PTsXAnRVqMSILYDOtqnU+25UCxqCosDMfi
v2nrtQrzhQTtH9i2TRt7s35xChvo+QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFId8
EgYoI30CXbMYDjLSd2K8q053MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MDMxNTM0QTM3MDgxMUYxOUQ5NzE1MTFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEnOYgAwQGnOZAAwQGnPCAAwQE
nP0QMA0GCSqGSIb3DQEBCwUAA4IBAQBPJYtg6ES6cXYzx2jWn1TnITm3a7ISg+B6
lKNHf2tjIWICl3FxVCztGtUESmP8QsFrGIsZdC2AwtXWboMOj49f3h/xCQpLBGzC
O6aSDF6BQebaMihGAqRP6CRQz4XQN4UsjXAru/M0lmCglHbU+svq2kJdcL3sdlqu
lzvWatF/kgpEDzNW8jsW4PhmOTwNRnXJQLJDDEccQXRLGg3SyZbNWsK6sqZtBqGQ
d1JAEsmcL22/PUwV4Iy1nxUiw+gtgXJVSM+12MqMUCdy0JK5YDOW0d8s+xE4kuAq
ixovzo92ESmsE4mAcfHErgDnphfjByoemb6jPSn99WhTJPTETvLe
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:25:35 2026 by rpki-client