Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBEE8896341611F187AA81ADCE1D38B0.roa
File:                     EBEE8896341611F187AA81ADCE1D38B0.roa (raw, json)
Hash identifier:          ODRC99XSwJloMyc/XjGQr+SmrqA3zY928i7FOWsyB0o=
Subject key identifier:   A4:DB:C8:4E:43:E0:12:FC:8F:3E:92:5F:4D:89:E6:B4:D6:07:7D:C1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AB57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBEE8896341611F187AA81ADCE1D38B0.roa
Signing time:             Thu 09 Apr 2026 13:20:48 +0000
ROA not before:           Thu 09 Apr 2026 13:20:43 +0000
ROA not after:            Sun 19 Apr 2026 13:20:43 +0000
asID:                     9304
IP address blocks:        156.227.132.0/24 maxlen: 24
                          156.227.136.0/24 maxlen: 24
                          156.227.139.0/24 maxlen: 24
                          156.227.140.0/24 maxlen: 24
                          156.227.159.0/24 maxlen: 24
                          156.231.4.0/24 maxlen: 24
                          156.231.5.0/24 maxlen: 24
                          156.231.6.0/24 maxlen: 24
                          156.231.8.0/24 maxlen: 24
                          156.231.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 13:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109399 (0x1ab57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  9 13:20:43 2026 GMT
            Not After : Apr 19 13:20:43 2026 GMT
        Subject: CN=69d7a7b0-3beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:3c:80:b9:dd:31:ae:2a:5f:0e:47:1f:14:
                    f2:e1:7b:8c:5e:6f:de:47:d6:23:e1:06:3e:86:73:
                    fd:8d:df:9f:53:a1:b7:94:6a:61:07:3e:5f:8c:ae:
                    fe:8f:cb:0b:8f:d0:d5:a9:78:74:83:69:41:c2:ab:
                    3b:e9:b4:fb:c3:6c:38:5e:67:74:00:c5:af:e0:18:
                    aa:d2:3f:0e:a1:4e:f7:7e:a1:be:f4:ca:12:19:18:
                    e1:98:43:d5:e8:4f:c8:64:d1:93:04:71:3f:04:ba:
                    c2:1e:38:fc:75:05:38:e2:b6:2a:18:27:e1:ab:c2:
                    56:16:e1:ee:ff:2c:9a:aa:35:3d:ce:f9:31:5e:8d:
                    d5:b5:75:fe:86:5e:12:53:d5:fa:b9:36:53:9c:70:
                    ce:18:7f:65:1d:01:95:4a:9c:fb:31:d7:69:db:04:
                    58:4f:d9:5f:1a:d0:ac:34:16:24:7b:8c:fb:f3:f0:
                    42:be:b9:75:d4:c4:27:68:14:12:63:f4:6f:0c:67:
                    66:59:1b:1a:e3:8e:dc:b2:25:71:f5:8e:cc:c7:b7:
                    bf:d1:cc:a2:ab:05:f6:39:f3:cc:5c:91:23:53:36:
                    c4:a6:b4:36:f0:90:16:17:17:4d:7d:63:9b:71:5f:
                    f4:bf:68:f5:40:76:58:24:a1:e6:2c:90:69:58:a9:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DB:C8:4E:43:E0:12:FC:8F:3E:92:5F:4D:89:E6:B4:D6:07:7D:C1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBEE8896341611F187AA81ADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.132.0/24
                  156.227.136.0/24
                  156.227.139.0-156.227.140.255
                  156.227.159.0/24
                  156.231.4.0-156.231.6.255
                  156.231.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:86:4b:aa:6c:34:05:ce:04:57:fc:ac:1c:b4:51:d7:52:6a:
         b3:00:18:b7:36:69:21:ab:6c:5a:43:7c:87:5b:bc:0f:0b:44:
         8a:07:6e:e0:91:ab:1f:e5:1f:f8:1b:17:37:2e:ef:82:ca:92:
         69:4e:f4:c7:c4:38:00:1a:5f:bd:01:53:9f:66:b4:7b:f1:d8:
         76:56:19:c5:9a:d2:6b:47:a0:30:be:72:f6:af:09:9c:98:36:
         0e:96:7e:63:62:aa:e0:9d:59:b2:c8:c6:58:89:64:8b:c5:22:
         02:d4:00:21:34:e8:6a:69:14:0a:d2:13:36:aa:21:7b:1b:f5:
         31:fe:d8:4d:6e:8f:9d:a5:5c:1a:27:16:51:1f:54:cb:3b:f9:
         43:42:59:33:ff:80:d3:c7:ca:66:97:1c:7b:d8:87:6c:45:92:
         41:b5:63:b9:ad:d3:f2:1c:af:a0:5f:52:0b:0f:cb:98:9c:3b:
         98:2f:db:39:c8:3d:8d:e2:56:a9:30:c8:07:18:39:57:3f:00:
         a7:6d:4a:cb:7d:a2:7a:33:d7:b0:02:43:a8:35:e3:0a:91:79:
         5e:0a:1d:da:48:5c:78:15:33:24:73:77:ab:79:d4:c7:54:b3:
         2c:79:f8:17:52:e7:db:8c:4c:05:47:d2:d8:91:52:ab:d2:2f:
         db:4f:ef:24
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAatXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDA5MTMyMDQzWhcNMjYwNDE5MTMyMDQzWjAYMRYw
FAYDVQQDEw02OWQ3YTdiMC0zYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs3w8gLndMa4qXw5HHxTy4XuMXm/eR9Yj4QY+hnP9jd+fU6G3lGphBz5f
jK7+j8sLj9DVqXh0g2lBwqs76bT7w2w4Xmd0AMWv4Biq0j8OoU73fqG+9MoSGRjh
mEPV6E/IZNGTBHE/BLrCHjj8dQU44rYqGCfhq8JWFuHu/yyaqjU9zvkxXo3VtXX+
hl4SU9X6uTZTnHDOGH9lHQGVSpz7Mddp2wRYT9lfGtCsNBYke4z78/BCvrl11MQn
aBQSY/RvDGdmWRsa447csiVx9Y7Mx7e/0cyiqwX2OfPMXJEjUzbEprQ28JAWFxdN
fWObcV/0v2j1QHZYJKHmLJBpWKk4yQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFKTb
yE5D4BL8jz6SX02J5rTWB33BMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQkVFODg5NjM0MTYxMUYxODdBQTgxQURDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAnOOEAwQAnOOIMAwDBACc44sD
BACc44wDBACc458wDAMEApznBAMEAJznBgMEAZznCDANBgkqhkiG9w0BAQsFAAOC
AQEAF4ZLqmw0Bc4EV/ysHLRR11JqswAYtzZpIatsWkN8h1u8DwtEigdu4JGrH+Uf
+BsXNy7vgsqSaU70x8Q4ABpfvQFTn2a0e/HYdlYZxZrSa0egML5y9q8JnJg2DpZ+
Y2Kq4J1ZssjGWIlki8UiAtQAITToamkUCtITNqohexv1Mf7YTW6PnaVcGicWUR9U
yzv5Q0JZM/+A08fKZpcce9iHbEWSQbVjua3T8hyvoF9SCw/LmJw7mC/bOcg9jeJW
qTDIBxg5Vz8Ap21Ky32iejPXsAJDqDXjCpF5Xgod2khceBUzJHN3q3nUx1SzLHn4
F1Ln24xMBUfS2JFSq9Iv20/vJA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:47 2026 by rpki-client