Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/397BB8E6B0DA11F18E9A0BD2CE1D38B0.roa
File:                     397BB8E6B0DA11F18E9A0BD2CE1D38B0.roa (raw, json)
Hash identifier:          Kwfj9Tvo37Dix8gpFBkPQSSm+MnIXcZSJy9kz4EUII4=
Subject key identifier:   31:DF:DB:5E:95:94:8C:D4:6C:E7:B3:89:9E:9D:72:80:9D:99:8D:5B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D625
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/397BB8E6B0DA11F18E9A0BD2CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:51:14 +0000
ROA not before:           Tue 15 Sep 2026 07:51:10 +0000
ROA not after:            Sat 24 Oct 2026 07:51:10 +0000
asID:                     401783
IP address blocks:        156.230.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120357 (0x1d625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 07:51:10 2026 GMT
            Not After : Oct 24 07:51:10 2026 GMT
        Subject: CN=6aa8f8f2-85b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:4a:a5:f4:84:bc:e1:f9:23:75:2f:dd:59:
                    2e:f8:aa:b2:0c:0b:22:fe:60:f8:21:60:89:9f:64:
                    99:86:e3:aa:d6:1e:0d:30:4d:b3:7f:6f:86:f7:69:
                    0f:f7:da:0b:f2:2d:e8:65:60:91:7b:25:dd:49:c8:
                    51:24:11:64:df:32:11:5f:37:d2:6a:90:1a:fd:5a:
                    21:62:40:06:c7:eb:c0:df:0e:a6:65:29:84:00:23:
                    aa:96:b2:4c:5c:5a:a0:63:24:21:5f:d6:59:e0:3f:
                    15:15:5e:5a:87:e3:34:a4:54:6e:31:62:2e:e7:40:
                    1b:18:9c:96:7d:a7:bf:60:a7:22:d6:76:12:bd:42:
                    08:d2:88:be:e6:ce:70:b9:73:96:f1:c6:ee:2b:5f:
                    82:4d:20:a3:54:8b:40:23:6e:5e:00:4f:7e:e6:c3:
                    a6:05:c9:df:ea:de:93:17:5c:53:29:c5:ec:bd:51:
                    bd:4a:48:1a:48:7a:f3:53:a8:4e:49:37:02:52:73:
                    94:c4:6c:64:b4:6f:70:e9:66:56:47:09:63:10:37:
                    74:b7:f5:a1:8f:f5:b8:01:b0:ed:97:fc:31:0d:4d:
                    c1:d0:f9:0b:73:42:4e:32:1a:49:89:3d:bc:82:be:
                    b3:ed:3b:e3:f8:60:20:78:8f:38:30:0f:5f:21:50:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DF:DB:5E:95:94:8C:D4:6C:E7:B3:89:9E:9D:72:80:9D:99:8D:5B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/397BB8E6B0DA11F18E9A0BD2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b2:69:79:c6:14:35:51:b1:ba:c6:56:8c:c4:33:b7:c8:24:
         ff:7c:bd:ae:cb:b9:f7:4b:64:cc:0b:ab:eb:d1:b7:e5:82:15:
         5c:4a:a6:48:c4:5e:00:2e:88:d7:d3:38:5a:35:f5:a4:f0:d2:
         57:be:4c:ac:8f:b5:be:a9:9d:96:f3:31:37:ec:13:c1:d9:36:
         48:e0:b8:a5:ad:ab:08:15:ca:55:b9:98:8b:47:92:d2:2d:c4:
         2a:cf:e0:9a:18:13:9c:4b:cd:e7:ae:cb:f7:e4:e5:91:01:ae:
         c7:e2:dd:9e:00:93:df:a9:1f:e5:83:6f:f3:01:5d:e7:53:55:
         99:58:fc:fe:63:70:57:e9:f5:ab:79:df:e9:ba:2c:db:17:d6:
         ad:a8:08:0a:6e:42:eb:2f:b3:c2:1e:db:da:51:9d:5c:b9:02:
         e2:b9:14:48:80:f7:c7:fc:df:23:d4:eb:31:a5:0c:c4:49:03:
         cd:c0:28:c0:05:e9:b4:d5:66:af:9b:16:a3:b6:64:82:5b:71:
         7f:b2:1b:c9:14:fe:bb:92:1d:25:61:ea:64:07:3c:0f:01:a1:
         eb:6c:ad:97:75:fc:b2:dd:47:b6:28:34:03:58:3f:7d:10:96:
         e4:3a:bd:e6:8d:b2:af:cb:79:21:01:7a:fb:c3:04:54:93:64:
         7d:8b:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----