Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B9249F2BD9811F1B7748BEDCE1D38B0.roa
File:                     5B9249F2BD9811F1B7748BEDCE1D38B0.roa (raw, json)
Hash identifier:          FjQa5S2D0e9yAXdx4NDC7th468q5PsJ0ZZRhZlJmZ9Y=
Subject key identifier:   D8:87:0E:5F:D6:0C:CD:5E:32:90:E6:A6:19:77:9D:B9:ED:03:5F:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B9249F2BD9811F1B7748BEDCE1D38B0.roa
Signing time:             Thu 01 Oct 2026 13:02:30 +0000
ROA not before:           Thu 01 Oct 2026 13:02:26 +0000
ROA not after:            Fri 08 Jan 2027 13:02:26 +0000
asID:                     272018
IP address blocks:        156.235.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121273 (0x1d9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  1 13:02:26 2026 GMT
            Not After : Jan  8 13:02:26 2027 GMT
        Subject: CN=6abe59e6-c6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:5b:7c:77:1c:90:57:50:39:eb:e6:d3:15:
                    57:e8:4c:fc:11:94:8d:3f:11:77:62:d7:9e:ba:dd:
                    be:d7:25:62:54:13:5e:65:68:38:65:2c:10:fc:d6:
                    d8:a4:3f:b5:79:01:3a:f4:66:78:7b:ad:bc:5e:be:
                    b9:e5:a3:cf:a5:a3:5c:c5:df:af:da:5b:74:f4:5a:
                    38:83:fd:88:2b:e2:c5:17:85:e3:11:bb:e7:79:83:
                    39:47:ad:90:5a:26:a2:84:01:51:43:24:8f:a4:69:
                    7d:56:8f:59:0a:7b:73:86:fb:73:17:09:cd:f1:62:
                    4b:1f:76:5f:12:93:80:ef:8c:99:fd:c5:00:bf:2a:
                    66:88:f7:50:1c:eb:de:1c:f2:94:db:34:ec:59:5f:
                    c7:61:fe:3c:2f:4b:f1:de:dc:f2:f9:a2:08:da:fb:
                    56:52:a2:01:30:5c:d9:cf:96:b9:92:7d:15:ca:c7:
                    c9:d0:17:70:b1:78:6b:b4:7d:38:b2:28:8b:ff:5c:
                    5e:33:d4:3e:37:4a:d4:1d:92:39:cc:ec:51:ab:50:
                    04:23:4f:7e:45:58:94:a3:d5:04:0d:e7:03:d1:18:
                    31:f9:86:c1:70:40:6c:db:b6:4e:b1:91:af:05:b5:
                    2e:45:3e:28:62:fc:3a:5c:27:b6:e8:59:c5:a0:a3:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:87:0E:5F:D6:0C:CD:5E:32:90:E6:A6:19:77:9D:B9:ED:03:5F:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B9249F2BD9811F1B7748BEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:2f:de:a4:e8:5e:60:4d:28:97:0f:12:2d:84:f7:e7:6c:89:
         9a:72:cb:6e:c8:a9:3a:20:1f:61:e4:58:84:1b:d7:86:12:76:
         7b:15:c3:ac:d5:6e:d7:36:2b:cd:b4:1c:3d:da:c4:91:a7:44:
         b8:44:bf:e6:73:8c:1d:c1:8b:2d:b8:95:06:0c:e7:22:38:bd:
         1c:e2:4f:2e:7e:90:49:39:57:e0:64:f5:24:1a:88:99:41:b9:
         e1:a6:77:77:08:bd:1f:33:b2:49:73:95:94:35:cd:39:92:1b:
         02:b5:09:50:b4:de:be:6d:22:2e:62:fa:53:60:9c:81:de:1e:
         3b:56:5b:fe:06:b4:4a:52:06:71:b9:70:55:65:eb:42:90:e5:
         04:eb:56:04:97:50:76:24:f2:99:60:84:f1:6c:33:93:fd:b5:
         d4:3a:24:78:3d:e0:ee:a4:5f:87:7c:9e:f5:e3:55:3a:2a:70:
         5a:c5:5a:4e:02:2c:37:3b:24:ee:46:e0:94:b9:c4:8f:7d:dc:
         39:b6:b3:ed:5f:ee:c0:00:5a:65:24:17:7b:36:49:48:a0:bf:
         d8:13:70:60:2e:44:70:09:ed:e1:05:af:26:ee:0b:37:26:3b:
         6b:dd:e9:aa:79:41:9c:62:b2:dc:d2:50:26:28:20:93:54:67:
         14:b7:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----