Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92A3E9E65FF111F1B13D34D8CE1D38B0.roa
File:                     92A3E9E65FF111F1B13D34D8CE1D38B0.roa (raw, json)
Hash identifier:          xZg2/f0A0sURYM3bdEUV1Cy9dCjPkwkjmvfkvdmJ9n8=
Subject key identifier:   1D:64:A9:42:29:F4:60:25:38:24:C3:AF:FB:EC:1A:81:E8:1D:63:BD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BBBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92A3E9E65FF111F1B13D34D8CE1D38B0.roa
Signing time:             Thu 04 Jun 2026 08:44:18 +0000
ROA not before:           Thu 04 Jun 2026 08:44:13 +0000
ROA not after:            Fri 10 Jul 2026 08:44:13 +0000
asID:                     138915
IP address blocks:        156.244.49.0/24 maxlen: 24
                          156.244.50.0/24 maxlen: 24
                          156.244.51.0/24 maxlen: 24
                          156.244.52.0/24 maxlen: 24
                          156.244.53.0/24 maxlen: 24
                          156.244.54.0/24 maxlen: 24
                          156.244.55.0/24 maxlen: 24
                          156.244.56.0/23 maxlen: 24
                          156.244.58.0/23 maxlen: 24
                          156.244.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113596 (0x1bbbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  4 08:44:13 2026 GMT
            Not After : Jul 10 08:44:13 2026 GMT
        Subject: CN=6a213ae2-b3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:61:08:fb:c4:14:59:b5:c7:cd:b6:da:3a:
                    6b:f4:91:23:74:62:ff:95:01:04:d4:49:83:56:d2:
                    f9:a6:53:fa:22:42:9d:b1:fd:12:eb:85:e3:c9:f5:
                    3d:17:75:72:b7:a1:94:4b:a3:7b:50:53:25:86:44:
                    0b:ab:ac:e5:f6:d9:b3:88:1e:b1:11:c9:f5:9f:1e:
                    00:55:5e:ec:56:ed:2b:b6:a3:9b:ff:cf:dd:86:6b:
                    b1:84:fb:45:17:bd:93:b9:65:cb:02:5c:1d:bd:c4:
                    68:31:b8:82:f2:1d:48:0c:5d:66:c6:97:68:e7:13:
                    95:19:06:cb:e9:3c:f2:7b:8b:55:7a:76:7d:c9:f8:
                    03:02:d4:14:a3:c9:dc:ea:48:4c:b6:7e:4b:66:90:
                    ff:08:d5:03:33:39:29:49:37:3b:0b:e5:30:1c:b7:
                    b2:be:e1:46:a6:11:38:fb:5e:cc:f0:ec:64:d1:9c:
                    dd:82:d4:56:58:d7:b7:6e:ce:b7:18:99:3d:a8:4d:
                    ae:be:81:30:83:42:77:bf:3f:f2:60:3d:6a:b3:5c:
                    82:80:bd:9b:7f:90:64:86:c5:72:74:3d:e1:68:19:
                    a1:5f:f6:05:ff:c7:af:6a:0f:aa:19:aa:b4:20:01:
                    1f:92:9e:ef:b5:bc:1e:21:ba:d6:a5:cb:d8:7f:82:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:64:A9:42:29:F4:60:25:38:24:C3:AF:FB:EC:1A:81:E8:1D:63:BD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92A3E9E65FF111F1B13D34D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.49.0-156.244.60.255

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:a3:49:99:d9:82:59:62:ab:d9:af:16:c6:d3:03:fb:23:
         56:de:2e:60:72:cc:5d:dd:e5:fd:fc:3f:07:2d:30:22:e4:7a:
         48:81:9f:24:9d:29:fe:ec:0f:c8:6b:bb:84:ac:e5:5e:14:83:
         e9:cc:7f:d0:5a:c5:ce:33:5e:5d:37:22:b7:ba:b3:72:95:c0:
         19:f4:68:a9:4a:7e:32:3e:52:23:42:8b:8d:7d:2c:4d:d5:b1:
         e1:34:18:bd:2a:6f:90:20:98:e6:fd:42:9c:d9:9c:af:66:88:
         67:88:01:5c:b4:97:14:9c:5b:01:cd:b6:9d:fd:e5:1a:11:7f:
         15:10:e9:ea:98:f7:08:44:5a:eb:3e:2e:03:29:32:b9:88:26:
         eb:cb:61:f0:5a:41:59:d8:ba:37:31:34:1d:d0:f0:50:97:39:
         25:b0:f7:42:78:db:ad:8a:98:02:ab:2b:a4:77:39:e3:18:14:
         72:4e:2c:34:ac:43:3d:77:dd:e5:eb:0a:da:2e:6d:8c:67:0d:
         f0:35:8a:bd:52:40:fa:7f:d1:82:eb:a1:15:36:b1:1d:66:e7:
         ea:2c:43:78:91:af:0f:a9:39:19:58:8b:05:6c:10:27:1a:6c:
         fe:03:97:e4:d2:ef:4c:de:e2:c1:fe:16:31:21:92:a4:bc:eb:
         48:15:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:33:39 2026 by rpki-client