Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7F7868462F811F18D5C5FC7CE1D38B0.roa
File:                     C7F7868462F811F18D5C5FC7CE1D38B0.roa (raw, json)
Hash identifier:          /qIDiivmMkMIKpUCYpkuLvIO4iG4Ni5USluEMz4hPDA=
Subject key identifier:   3B:D2:6A:8B:60:39:F5:43:8D:52:AA:CC:2C:4F:0E:3B:BB:2E:D4:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BC4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7F7868462F811F18D5C5FC7CE1D38B0.roa
Signing time:             Mon 08 Jun 2026 05:13:27 +0000
ROA not before:           Mon 08 Jun 2026 05:13:22 +0000
ROA not after:            Tue 16 Jun 2026 05:13:22 +0000
asID:                     399077
IP address blocks:        156.240.192.0/24 maxlen: 24
                          156.240.193.0/24 maxlen: 24
                          156.240.194.0/24 maxlen: 24
                          156.240.195.0/24 maxlen: 24
                          156.240.196.0/24 maxlen: 24
                          156.240.197.0/24 maxlen: 24
                          156.240.198.0/24 maxlen: 24
                          156.240.199.0/24 maxlen: 24
                          156.240.200.0/24 maxlen: 24
                          156.240.201.0/24 maxlen: 24
                          156.240.202.0/24 maxlen: 24
                          156.240.203.0/24 maxlen: 24
                          156.240.204.0/24 maxlen: 24
                          156.240.205.0/24 maxlen: 24
                          156.240.206.0/24 maxlen: 24
                          156.240.207.0/24 maxlen: 24
                          156.240.208.0/24 maxlen: 24
                          156.240.209.0/24 maxlen: 24
                          156.240.210.0/24 maxlen: 24
                          156.240.211.0/24 maxlen: 24
                          156.240.212.0/24 maxlen: 24
                          156.240.213.0/24 maxlen: 24
                          156.240.214.0/24 maxlen: 24
                          156.240.215.0/24 maxlen: 24
                          156.240.216.0/24 maxlen: 24
                          156.240.217.0/24 maxlen: 24
                          156.240.218.0/24 maxlen: 24
                          156.240.219.0/24 maxlen: 24
                          156.240.220.0/24 maxlen: 24
                          156.240.221.0/24 maxlen: 24
                          156.240.222.0/24 maxlen: 24
                          156.240.223.0/24 maxlen: 24
                          156.240.224.0/24 maxlen: 24
                          156.240.225.0/24 maxlen: 24
                          156.240.226.0/24 maxlen: 24
                          156.240.227.0/24 maxlen: 24
                          156.240.228.0/24 maxlen: 24
                          156.240.229.0/24 maxlen: 24
                          156.240.230.0/24 maxlen: 24
                          156.240.231.0/24 maxlen: 24
                          156.240.232.0/24 maxlen: 24
                          156.240.233.0/24 maxlen: 24
                          156.240.234.0/24 maxlen: 24
                          156.240.235.0/24 maxlen: 24
                          156.240.236.0/24 maxlen: 24
                          156.240.237.0/24 maxlen: 24
                          156.240.238.0/24 maxlen: 24
                          156.240.239.0/24 maxlen: 24
                          156.240.240.0/24 maxlen: 24
                          156.240.241.0/24 maxlen: 24
                          156.240.242.0/24 maxlen: 24
                          156.240.243.0/24 maxlen: 24
                          156.240.244.0/24 maxlen: 24
                          156.240.245.0/24 maxlen: 24
                          156.240.246.0/24 maxlen: 24
                          156.240.247.0/24 maxlen: 24
                          156.240.248.0/24 maxlen: 24
                          156.240.249.0/24 maxlen: 24
                          156.240.250.0/24 maxlen: 24
                          156.240.251.0/24 maxlen: 24
                          156.240.252.0/24 maxlen: 24
                          156.240.253.0/24 maxlen: 24
                          156.240.254.0/24 maxlen: 24
                          156.240.255.0/24 maxlen: 24
                          156.251.0.0/24 maxlen: 24
                          156.251.1.0/24 maxlen: 24
                          156.251.2.0/24 maxlen: 24
                          156.251.3.0/24 maxlen: 24
                          156.251.4.0/24 maxlen: 24
                          156.251.5.0/24 maxlen: 24
                          156.251.6.0/24 maxlen: 24
                          156.251.7.0/24 maxlen: 24
                          156.251.8.0/24 maxlen: 24
                          156.251.9.0/24 maxlen: 24
                          156.251.10.0/24 maxlen: 24
                          156.251.11.0/24 maxlen: 24
                          156.251.12.0/24 maxlen: 24
                          156.251.13.0/24 maxlen: 24
                          156.251.14.0/24 maxlen: 24
                          156.251.15.0/24 maxlen: 24
                          156.251.16.0/24 maxlen: 24
                          156.251.17.0/24 maxlen: 24
                          156.251.18.0/24 maxlen: 24
                          156.251.19.0/24 maxlen: 24
                          156.251.20.0/24 maxlen: 24
                          156.251.21.0/24 maxlen: 24
                          156.251.22.0/24 maxlen: 24
                          156.251.23.0/24 maxlen: 24
                          156.251.24.0/24 maxlen: 24
                          156.251.25.0/24 maxlen: 24
                          156.251.26.0/24 maxlen: 24
                          156.251.27.0/24 maxlen: 24
                          156.251.28.0/24 maxlen: 24
                          156.251.29.0/24 maxlen: 24
                          156.251.30.0/24 maxlen: 24
                          156.251.31.0/24 maxlen: 24
                          156.251.32.0/24 maxlen: 24
                          156.251.33.0/24 maxlen: 24
                          156.251.34.0/24 maxlen: 24
                          156.251.35.0/24 maxlen: 24
                          156.251.36.0/24 maxlen: 24
                          156.251.37.0/24 maxlen: 24
                          156.251.38.0/24 maxlen: 24
                          156.251.39.0/24 maxlen: 24
                          156.251.40.0/24 maxlen: 24
                          156.251.41.0/24 maxlen: 24
                          156.251.42.0/24 maxlen: 24
                          156.251.43.0/24 maxlen: 24
                          156.251.44.0/24 maxlen: 24
                          156.251.45.0/24 maxlen: 24
                          156.251.46.0/24 maxlen: 24
                          156.251.47.0/24 maxlen: 24
                          156.251.48.0/24 maxlen: 24
                          156.251.49.0/24 maxlen: 24
                          156.251.50.0/24 maxlen: 24
                          156.251.51.0/24 maxlen: 24
                          156.251.52.0/24 maxlen: 24
                          156.251.53.0/24 maxlen: 24
                          156.251.54.0/24 maxlen: 24
                          156.251.55.0/24 maxlen: 24
                          156.251.56.0/24 maxlen: 24
                          156.251.57.0/24 maxlen: 24
                          156.251.58.0/24 maxlen: 24
                          156.251.59.0/24 maxlen: 24
                          156.251.60.0/24 maxlen: 24
                          156.251.61.0/24 maxlen: 24
                          156.251.62.0/24 maxlen: 24
                          156.251.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113742 (0x1bc4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  8 05:13:22 2026 GMT
            Not After : Jun 16 05:13:22 2026 GMT
        Subject: CN=6a264f77-b298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:f4:d1:b9:e4:9a:32:7e:86:0e:76:f4:4b:
                    0a:47:2b:93:30:fb:51:7c:d1:3a:af:39:83:9e:9c:
                    63:80:b9:85:27:8b:47:fd:e9:72:7d:8d:d8:8b:c6:
                    a3:09:6b:e6:f2:b2:b6:4b:14:4f:b3:5a:ba:84:bc:
                    ed:c6:00:81:fc:07:c8:19:3d:66:29:23:90:5f:b3:
                    ad:0a:7a:9c:08:8c:b9:55:61:6c:f8:22:74:40:2a:
                    67:da:7e:ff:bb:36:09:18:c6:79:72:16:1f:3e:9a:
                    f3:97:bb:5f:a4:e5:61:8c:eb:cf:59:6f:49:27:b7:
                    65:ab:9b:fa:7a:ac:9e:92:54:8b:bf:d5:cf:31:57:
                    5a:11:37:b3:95:9b:fa:1b:ae:5f:b9:65:ff:e6:84:
                    60:14:d5:47:87:43:61:6e:5c:96:14:3f:82:ca:c7:
                    5b:ef:7b:68:aa:55:b4:20:05:94:53:3c:07:6a:96:
                    12:50:3d:3e:b7:50:fa:f9:99:e9:88:f9:ef:c3:17:
                    f4:e1:6e:13:17:8d:d3:db:87:79:0a:09:85:1b:c4:
                    cc:b4:5d:a8:1f:3b:f6:24:16:68:4f:95:9d:55:6c:
                    c8:55:39:94:49:1f:74:41:0a:b1:9b:d7:11:a6:a0:
                    0d:e9:e3:59:4f:74:a7:0a:3c:26:50:e0:5b:c6:ce:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D2:6A:8B:60:39:F5:43:8D:52:AA:CC:2C:4F:0E:3B:BB:2E:D4:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7F7868462F811F18D5C5FC7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.192.0/18
                  156.251.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:59:f4:5a:ce:eb:c1:67:95:af:13:22:99:88:7a:32:a9:f0:
         d5:76:12:a5:0c:c7:1b:0d:bb:30:55:1b:30:e8:05:c3:95:3a:
         ca:ed:b2:4d:7a:b5:42:d6:13:6f:92:de:15:fc:03:ee:6e:99:
         54:85:63:73:cd:f2:1b:52:03:b0:ff:00:48:f4:30:38:a0:ab:
         34:69:c7:4f:a1:3e:89:57:a8:38:77:0f:1e:08:0a:03:7b:1c:
         57:14:90:d3:3d:93:3a:18:bc:ba:bd:b5:6b:90:72:e4:7c:53:
         77:45:34:35:55:8a:b4:24:0e:ab:cf:12:cd:74:64:45:03:f6:
         52:8d:6e:b6:18:ca:39:26:bc:28:cb:81:86:cb:cc:1a:44:61:
         c4:91:b5:c4:68:07:c5:7c:0a:b3:25:1e:68:6d:75:17:a2:e4:
         58:94:d7:7b:0f:f9:ef:2a:27:1a:2a:c2:b9:53:cb:f9:57:52:
         7c:f3:75:50:41:d2:9a:bf:19:8e:1b:a5:6b:77:3e:ba:23:0c:
         ae:3b:60:b0:75:82:c2:f7:38:be:5b:6f:2d:d8:d7:61:fa:24:
         1d:ae:ea:69:b7:86:e7:a6:ce:f7:75:b0:f5:d2:16:8a:f3:4d:
         45:42:99:11:7d:0b:e2:a3:a9:fd:bd:a7:97:1c:d3:16:cd:a8:
         e6:a8:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:50 2026 by rpki-client