Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92D74BC864A711F1994297FBCE1D38B0.roa
File:                     92D74BC864A711F1994297FBCE1D38B0.roa (raw, json)
Hash identifier:          G4EvBEkr4n3lDhpNEUHQSs7G37sxsoalbbsLKoqEO8k=
Subject key identifier:   46:96:06:7A:8F:DB:0A:D2:E0:06:62:67:A8:53:46:37:64:F8:8E:08
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BCA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92D74BC864A711F1994297FBCE1D38B0.roa
Signing time:             Wed 10 Jun 2026 08:37:11 +0000
ROA not before:           Wed 10 Jun 2026 08:37:07 +0000
ROA not after:            Fri 10 Jul 2026 08:37:07 +0000
asID:                     141883
IP address blocks:        156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113832 (0x1bca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 10 08:37:07 2026 GMT
            Not After : Jul 10 08:37:07 2026 GMT
        Subject: CN=6a292237-479d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a9:fe:a7:41:24:ba:25:b3:dd:7c:34:e4:89:
                    a8:86:8c:7b:c7:0f:3c:3f:fc:7c:07:c5:0e:bd:58:
                    cc:72:42:25:cf:6a:e0:6f:f4:1e:08:ac:37:7d:59:
                    7c:f9:d0:e1:88:8a:30:59:e0:64:a5:cf:8e:19:e6:
                    36:13:04:06:ff:4a:1f:75:f7:08:96:d7:e2:4c:0d:
                    65:9a:53:c2:35:cf:5a:1f:aa:56:e3:eb:a8:ce:a2:
                    f7:d6:18:c6:82:89:82:36:39:57:d8:06:06:1c:b5:
                    5f:67:39:13:34:1d:e3:5a:dc:80:a2:6c:38:00:d6:
                    f6:ca:61:64:0e:93:46:27:f1:57:d5:7c:4f:61:32:
                    a7:5e:db:04:b8:0f:94:bb:e2:06:a0:6b:9f:85:c3:
                    7c:ee:81:96:b1:0e:e4:b1:38:9f:87:e6:c9:5c:d7:
                    a8:c5:e6:5b:10:e7:c3:76:f9:25:33:81:51:3a:c2:
                    16:ea:04:c4:51:02:23:99:27:7f:22:37:e6:59:b9:
                    58:bc:c6:f7:a5:57:ec:14:a8:70:61:c1:1a:dc:49:
                    a8:c0:96:bf:46:20:05:41:ef:d2:03:32:86:39:e2:
                    21:0e:88:c7:03:4f:c8:05:d9:27:a1:6f:ee:6d:c1:
                    be:7a:a6:47:f9:32:b0:c7:1c:4c:90:01:83:bf:5e:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:96:06:7A:8F:DB:0A:D2:E0:06:62:67:A8:53:46:37:64:F8:8E:08
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92D74BC864A711F1994297FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:31:f8:68:c8:2c:af:79:97:86:94:a9:69:26:0e:46:f5:
         5d:e9:76:6b:aa:4f:6d:21:21:3c:39:29:df:aa:06:1d:d4:8d:
         fd:ea:85:b5:06:fe:0c:a5:df:32:f3:02:86:87:4c:ae:99:71:
         55:72:a4:de:39:ae:16:57:81:89:13:9e:83:c1:fc:f5:ca:55:
         2b:40:28:32:21:25:79:87:12:5f:05:90:e8:d5:8f:23:e9:39:
         c3:1e:a5:b0:ad:7f:0f:e8:8f:08:f7:9d:78:2c:00:4f:aa:28:
         d1:5c:ed:91:c9:71:7a:5b:6d:50:20:1a:67:38:f9:d1:1a:26:
         bb:e4:f0:e7:0e:2b:4f:a5:0f:a2:e0:d9:4d:69:75:9e:b1:20:
         12:f2:be:51:37:49:8d:45:99:ff:7b:62:4b:7b:ed:5a:16:4e:
         d8:74:89:39:e1:c8:27:7b:cd:71:22:93:e7:27:4b:2e:8d:d7:
         da:fa:57:4f:02:d4:14:dc:bf:62:6e:4f:dc:62:8b:83:ea:fa:
         53:ce:51:ff:e5:c0:11:e9:d5:aa:4d:ea:42:ee:5d:12:58:ce:
         7a:97:7d:cf:2e:fe:fe:5c:9b:58:88:70:01:bc:89:91:20:d8:
         30:2e:ea:d2:11:40:e5:b2:4e:08:ef:20:ec:2f:0f:94:89:29:
         56:08:e1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:26:26 2026 by rpki-client