Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47906CE0ADB711F1855F62D7CE1D38B0.roa
File:                     47906CE0ADB711F1855F62D7CE1D38B0.roa (raw, json)
Hash identifier:          +S9TstiwYXyHGbySRsr49v7eBxwIJAXFSFBexy81tUk=
Subject key identifier:   ED:C5:02:EB:C9:53:E9:4A:F7:21:56:CE:E7:D0:D7:E6:BC:36:6D:45
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D52D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47906CE0ADB711F1855F62D7CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 08:03:32 +0000
ROA not before:           Fri 11 Sep 2026 08:03:28 +0000
ROA not after:            Fri 16 Oct 2026 08:03:28 +0000
asID:                     61112
IP address blocks:        156.231.139.0/24 maxlen: 24
                          156.246.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120109 (0x1d52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 08:03:28 2026 GMT
            Not After : Oct 16 08:03:28 2026 GMT
        Subject: CN=6aa3b5d4-1d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:be:ba:a6:21:88:32:93:97:e5:8b:8c:a6:
                    00:77:23:16:0d:43:1d:31:fb:8a:1f:31:ac:9f:ad:
                    e6:92:10:8e:96:3e:d0:7d:25:07:22:64:ff:50:3e:
                    2c:ec:bc:a5:80:64:38:f5:e5:79:89:0f:7f:dd:2c:
                    9f:df:d7:00:47:e2:a7:f8:b6:6c:a0:20:fa:d4:47:
                    24:23:26:1b:3a:ea:5a:8f:c0:3f:f0:37:35:1c:b0:
                    36:eb:4f:e7:33:99:5e:cc:62:2a:29:f1:c4:5b:3f:
                    9b:53:0f:ee:79:11:ca:2b:86:67:6a:f5:15:e7:7f:
                    d8:5f:2d:00:b3:b7:9d:eb:5e:67:e5:16:5a:99:2b:
                    2f:6c:81:ef:81:bc:91:8e:42:2d:c7:1d:78:51:90:
                    90:c7:c7:33:e1:62:1a:ed:4f:1c:6b:b2:af:a4:fc:
                    0a:21:b7:16:c5:00:4a:71:30:f9:3a:47:ab:f6:b8:
                    56:7c:ac:76:41:9c:37:45:5f:5d:bf:72:83:a5:92:
                    fb:85:49:60:2e:a8:01:52:08:ec:05:a1:7f:f9:a7:
                    f8:a5:f2:23:dc:4e:19:1f:17:5b:a3:f7:81:a4:cc:
                    2c:0c:2d:02:64:ee:af:fa:ca:f3:54:5c:4d:6d:b7:
                    f6:f5:e5:b0:2e:cb:13:11:aa:46:1e:52:cb:0d:2a:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C5:02:EB:C9:53:E9:4A:F7:21:56:CE:E7:D0:D7:E6:BC:36:6D:45
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47906CE0ADB711F1855F62D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.139.0/24
                  156.246.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:86:15:a7:7f:b0:db:08:6f:9c:c3:1b:e2:10:5e:c5:26:c5:
         a5:70:9a:75:c9:41:e7:b0:f0:a4:ba:00:fe:5a:0a:31:d3:c3:
         1e:e5:ad:cb:30:b4:7b:79:e1:50:8e:3b:32:65:9d:af:bf:c1:
         d2:24:ee:83:8c:46:05:e1:93:a1:56:02:13:e0:1d:3e:0b:4e:
         20:4d:bd:31:5c:ac:7c:12:c3:b5:09:cb:0b:7e:20:9c:13:af:
         45:27:1a:97:1d:66:bb:a8:51:25:19:69:de:f6:f7:b1:1e:18:
         44:07:bb:fa:5c:90:a3:a5:47:e8:a9:01:4c:9e:a2:8d:59:78:
         cb:27:ae:27:66:81:1b:f5:4f:de:f7:da:d6:be:e4:ca:34:1e:
         f3:ab:6e:bd:c7:15:21:10:a3:72:e1:6a:88:61:dc:ff:06:37:
         e0:e1:3f:fe:a2:ea:83:04:a9:5b:af:9f:4d:5b:4d:ff:b2:05:
         dd:8c:17:04:b3:97:99:ef:25:ae:1d:ce:de:40:6f:e1:c6:8c:
         3e:cb:84:3e:5f:69:4c:f3:b2:47:2f:a5:ae:d0:1c:67:72:d1:
         0f:6a:94:7a:94:61:fd:55:fb:fc:62:27:23:8a:9d:c7:07:77:
         91:89:a8:82:53:b5:e0:45:bf:e2:cb:5e:78:c3:27:ff:9c:05:
         91:1f:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----