Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A945106C68FC11F19110EABCCE1D38B0.roa
File:                     A945106C68FC11F19110EABCCE1D38B0.roa (raw, json)
Hash identifier:          84XdMAgk92Swmql/vxaR6p1uIOZqkbdkA/xSQWDLT4Y=
Subject key identifier:   4B:B3:66:1E:81:A0:8A:F3:90:1C:B2:5B:9B:D5:26:91:8E:DD:09:90
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BD94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A945106C68FC11F19110EABCCE1D38B0.roa
Signing time:             Mon 15 Jun 2026 20:56:21 +0000
ROA not before:           Mon 15 Jun 2026 20:56:16 +0000
ROA not after:            Tue 21 Jul 2026 20:56:16 +0000
asID:                     202437
IP address blocks:        156.228.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Jun 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114068 (0x1bd94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 15 20:56:16 2026 GMT
            Not After : Jul 21 20:56:16 2026 GMT
        Subject: CN=6a3066f5-c02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:e1:66:66:74:06:10:14:c5:ff:44:bf:80:
                    d8:7e:b9:b9:4c:ea:fd:dc:f5:72:3c:d3:cd:71:c0:
                    de:4b:3d:3e:da:c9:ba:25:6e:7f:5b:a0:a2:e9:36:
                    b3:da:ec:3d:89:92:be:64:a1:7f:bb:5b:50:f0:a2:
                    25:e7:a6:df:5e:82:29:7c:d3:1d:a7:6b:cc:a3:85:
                    8c:9a:0f:74:7f:a2:85:87:15:e5:13:e3:23:e4:28:
                    db:f2:04:1e:37:17:c2:04:6e:33:b7:61:aa:cb:ca:
                    56:47:02:57:fc:be:2a:79:f2:54:0b:69:b2:8e:9f:
                    2f:4b:96:1e:ae:c6:49:69:0f:60:54:26:15:7d:00:
                    08:c1:81:4f:34:3f:63:ca:b8:e8:f5:92:0d:87:c8:
                    e7:e3:76:dc:a0:e7:d9:eb:e9:5e:13:b3:92:eb:5c:
                    b4:19:87:d2:99:a0:45:c9:cd:a5:a4:cd:20:c8:b5:
                    26:ae:0c:c5:a7:f4:95:47:77:52:6c:04:86:66:4f:
                    45:e0:a7:37:b8:79:a6:07:4d:e4:74:dc:c6:55:25:
                    e4:84:7f:fd:f1:5d:e7:92:5f:1a:6f:46:a7:6c:6e:
                    01:ce:38:4b:ae:e5:c7:e0:d4:e7:22:fa:4f:99:a9:
                    4c:75:b2:64:f5:0b:05:14:f3:6e:d4:72:64:9b:32:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B3:66:1E:81:A0:8A:F3:90:1C:B2:5B:9B:D5:26:91:8E:DD:09:90
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A945106C68FC11F19110EABCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:4f:a7:38:76:ff:99:d7:80:1e:33:80:20:d1:54:0a:fb:b3:
         40:08:48:53:e2:f7:ab:a8:73:ee:c8:5e:8f:54:04:e7:f1:96:
         07:d3:b0:9a:26:01:29:8d:f3:b2:b6:e6:e2:91:38:31:49:95:
         d3:6c:d3:a1:b9:b0:60:5d:f0:ee:a9:e3:30:9a:2a:b7:bf:33:
         38:93:41:7d:14:a7:d5:b8:e7:dc:58:50:95:aa:48:ef:89:07:
         ce:6b:45:0e:26:aa:b4:0b:d2:a5:5c:1c:9c:8d:64:4f:0c:a5:
         0b:3f:7c:c5:72:22:67:0d:f4:ac:85:89:7c:81:a5:c2:2f:87:
         23:7c:8d:e8:cb:6e:ce:d3:87:06:aa:0e:02:cb:c8:9b:e9:84:
         e3:d2:dd:04:0e:c6:75:6f:9b:c8:65:f2:2b:ae:dd:fe:77:41:
         04:d8:f3:1a:21:bc:f5:05:f1:85:ff:a6:e1:8c:5d:b3:5c:8b:
         dd:72:f9:4e:ef:43:7d:41:fa:23:b1:b2:69:f5:92:42:e9:81:
         33:a3:5a:85:ac:3b:41:a8:85:2e:fe:14:f7:ed:db:33:3d:ab:
         80:a7:87:27:15:d8:e4:00:65:10:b4:31:d3:37:0c:79:5e:44:
         6d:ba:13:26:5d:af:50:bc:06:34:73:eb:13:48:75:47:4b:3b:
         75:00:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:07:08 2026 by rpki-client