Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C804DF40399B11F1B41482C7CE1D38B0.roa
File:                     C804DF40399B11F1B41482C7CE1D38B0.roa (raw, json)
Hash identifier:          E0sEfvjBihZ2lrQzpceWCs8PJ3EOJC1rr+hvGRPe6ck=
Subject key identifier:   59:88:82:27:16:4C:B8:39:6E:92:21:76:DD:F1:D6:3E:30:B0:58:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AD3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C804DF40399B11F1B41482C7CE1D38B0.roa
Signing time:             Thu 16 Apr 2026 13:54:27 +0000
ROA not before:           Thu 16 Apr 2026 13:54:22 +0000
ROA not after:            Thu 30 Apr 2026 13:54:22 +0000
asID:                     9304
IP address blocks:        156.233.66.0/24 maxlen: 24
                          156.245.163.0/24 maxlen: 24
                          156.245.194.0/24 maxlen: 24
                          156.245.211.0/24 maxlen: 24
                          156.245.224.0/24 maxlen: 24
                          156.249.133.0/24 maxlen: 24
                          156.249.153.0/24 maxlen: 24
                          156.249.154.0/24 maxlen: 24
                          156.249.162.0/24 maxlen: 24
                          156.249.166.0/24 maxlen: 24
                          156.249.167.0/24 maxlen: 24
                          156.249.170.0/24 maxlen: 24
                          156.249.180.0/24 maxlen: 24
                          156.249.183.0/24 maxlen: 24
                          156.249.185.0/24 maxlen: 24
                          156.249.187.0/24 maxlen: 24
                          156.249.190.0/24 maxlen: 24
                          156.249.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 14:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109883 (0x1ad3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 16 13:54:22 2026 GMT
            Not After : Apr 30 13:54:22 2026 GMT
        Subject: CN=69e0ea13-1f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:98:d3:8e:00:84:3f:51:79:d7:4e:25:2b:
                    28:1a:da:06:11:fb:df:17:a7:1d:94:88:d6:59:b6:
                    2f:80:c9:78:72:3c:31:e9:e7:9a:d0:cd:d4:e8:52:
                    0c:c0:ec:02:9f:0e:2f:51:b1:d8:28:03:02:ed:ca:
                    7f:fd:94:e7:32:bb:0c:7f:d3:9f:e6:27:a1:4e:fa:
                    33:f4:ff:dd:05:11:42:5c:62:80:8e:fc:7f:57:a0:
                    60:72:39:ed:0c:b7:2a:1b:ca:cf:7f:8f:6c:23:a6:
                    d3:8e:8b:4c:ec:5b:0a:4c:7c:50:8e:b6:96:1c:80:
                    91:23:8e:6c:dd:3c:ab:04:6a:50:19:de:23:46:93:
                    5d:69:8f:f2:40:59:34:bd:f9:73:5a:36:e5:7a:d5:
                    47:11:ed:b9:8c:d6:b3:c0:db:68:b3:d2:69:b8:0d:
                    97:a3:c1:f8:2d:73:91:ba:75:c2:51:17:49:ee:1d:
                    4f:de:f7:4a:e9:41:59:be:d7:17:8a:f0:7c:cc:45:
                    d1:ec:b1:9b:5b:2b:89:b7:80:24:1d:2b:13:ae:94:
                    9e:e8:7f:01:69:6c:ce:47:46:e9:aa:13:16:32:33:
                    21:b7:c5:05:09:8e:96:35:13:b6:4a:75:1b:9e:8a:
                    e8:f5:2c:65:97:05:f3:55:9e:a8:56:99:82:ff:73:
                    dd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:88:82:27:16:4C:B8:39:6E:92:21:76:DD:F1:D6:3E:30:B0:58:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C804DF40399B11F1B41482C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.66.0/24
                  156.245.163.0/24
                  156.245.194.0/24
                  156.245.211.0/24
                  156.245.224.0/24
                  156.249.133.0/24
                  156.249.153.0-156.249.154.255
                  156.249.162.0/24
                  156.249.166.0/23
                  156.249.170.0/24
                  156.249.180.0/24
                  156.249.183.0/24
                  156.249.185.0/24
                  156.249.187.0/24
                  156.249.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:1e:2a:3f:5c:d7:20:ae:c3:55:f2:c7:5c:3c:2c:9b:de:
         f4:2c:f1:f5:d5:2e:f8:77:40:01:00:5b:c0:ae:8b:0f:ac:1f:
         7f:fd:0d:98:9e:85:50:13:31:7b:70:25:97:d6:68:9b:51:cf:
         df:f1:6a:a8:0c:31:f0:c5:48:bc:12:c7:77:ae:34:d2:38:c4:
         55:87:b9:21:21:04:10:fd:42:7c:8c:2b:2e:20:b0:f0:d2:03:
         df:30:48:88:3c:61:fe:e3:fc:02:90:52:9b:27:b3:7c:53:83:
         3e:71:41:14:3c:73:86:82:4a:76:b0:15:e9:2f:59:42:fe:07:
         b2:1d:cf:66:21:2d:d5:a3:3e:ca:67:50:14:58:65:15:cb:9a:
         d8:3d:eb:61:6d:6e:09:27:cb:8f:61:8d:6c:65:9b:6c:c4:00:
         fe:be:39:f1:1e:79:34:c6:1f:84:aa:74:ce:a2:d4:bd:f5:99:
         7c:fb:73:34:bb:ed:67:53:2f:c7:ec:ae:1c:98:f9:8d:17:c1:
         83:03:cc:c2:3a:83:68:25:55:6f:df:f8:70:7a:10:3c:ce:86:
         88:57:51:90:a4:69:e1:1b:c2:ec:7c:12:88:97:d2:1c:05:94:
         5e:8d:7f:56:9c:c1:99:5d:c1:67:ff:04:59:5d:73:97:24:0d:
         6b:5a:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:22 2026 by rpki-client