Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67115B2EB0DC11F1B26654E1CE1D38B0.roa
File:                     67115B2EB0DC11F1B26654E1CE1D38B0.roa (raw, json)
Hash identifier:          lQ0xpMh8d3SeYhlUPGnveAcdWkFd881VOV0VVIEE0ao=
Subject key identifier:   3B:B7:F5:6E:14:D3:8B:A2:B7:D8:F4:61:91:A1:F4:1F:14:8B:C3:BF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D62B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67115B2EB0DC11F1B26654E1CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:06:50 +0000
ROA not before:           Tue 15 Sep 2026 08:06:46 +0000
ROA not after:            Thu 22 Oct 2026 08:06:46 +0000
asID:                     11404
IP address blocks:        156.235.16.0/21 maxlen: 24
                          156.235.24.0/22 maxlen: 24
                          156.235.36.0/22 maxlen: 24
                          156.235.40.0/21 maxlen: 24
                          156.235.52.0/22 maxlen: 24
                          156.235.56.0/21 maxlen: 24
                          156.235.64.0/21 maxlen: 24
                          156.235.80.0/21 maxlen: 24
                          156.235.92.0/22 maxlen: 24
                          156.235.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120363 (0x1d62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 08:06:46 2026 GMT
            Not After : Oct 22 08:06:46 2026 GMT
        Subject: CN=6aa8fc9a-d4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ac:6d:06:28:eb:61:d5:ac:dc:8d:48:c1:e2:
                    06:f6:aa:df:aa:bb:ef:dd:f4:ae:f9:04:b8:ad:e6:
                    84:77:dc:86:09:d1:1f:af:d7:26:85:66:fb:7a:2f:
                    4e:45:b5:85:b6:5f:f6:51:a8:ef:74:02:07:74:06:
                    94:f0:4a:c1:4e:f8:76:8b:ad:19:26:b7:61:08:01:
                    87:be:34:fb:c9:61:ad:4f:86:56:2b:e7:d6:33:cb:
                    ec:d8:eb:37:29:6f:9a:ce:06:2e:0b:16:d4:d1:ea:
                    b6:42:1b:de:9e:ed:1c:50:0d:d9:e7:74:a3:3e:01:
                    6c:06:80:2a:92:b5:63:12:72:4a:44:0a:61:82:09:
                    1e:7c:05:58:8c:d9:37:eb:75:9b:5c:0b:db:72:59:
                    c1:8a:2f:ad:19:7b:b3:e5:99:94:fc:4f:f1:3c:f4:
                    f2:5a:6e:eb:cf:9f:2a:41:66:19:86:a0:38:f8:4d:
                    c7:31:95:54:51:c8:06:c1:11:b4:7e:30:7f:8e:0c:
                    b9:e1:d4:d0:f3:e8:64:a2:33:38:1b:41:f3:14:c6:
                    f2:78:57:31:a4:1a:96:c4:69:99:cf:42:c5:80:ea:
                    4a:51:dc:d5:ad:44:39:4c:7e:05:15:32:ca:51:2d:
                    9e:3e:c0:3e:4d:1a:6f:51:8a:e7:26:8c:a9:86:97:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B7:F5:6E:14:D3:8B:A2:B7:D8:F4:61:91:A1:F4:1F:14:8B:C3:BF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67115B2EB0DC11F1B26654E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.16.0-156.235.27.255
                  156.235.36.0-156.235.47.255
                  156.235.52.0-156.235.71.255
                  156.235.80.0/21
                  156.235.92.0/22
                  156.235.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:f6:36:0c:41:39:0d:91:de:ca:10:c6:0d:39:0b:5a:32:
         bf:61:3b:e6:fb:b5:3f:f1:7d:39:be:76:43:71:1f:56:9a:c8:
         1e:6c:d6:5c:00:01:8a:ca:6b:ef:51:83:fc:89:2c:21:18:a3:
         a0:b0:48:7c:50:f3:29:9b:f4:83:a8:98:3c:7a:77:41:62:f8:
         18:bd:57:24:8a:18:7a:bc:b1:68:c4:18:6b:88:ce:47:05:03:
         3e:f9:41:d3:75:55:fd:48:58:e6:67:38:e1:ea:d3:a1:4a:ab:
         07:18:58:88:61:40:90:32:be:08:2a:94:21:64:b7:05:28:1b:
         61:ce:17:8b:36:3d:59:3e:85:1b:47:bf:2b:fe:fc:cc:10:05:
         f0:5d:73:c9:4a:b0:51:43:88:ea:c7:c4:9a:8c:72:f5:0e:30:
         45:1c:f0:60:60:c0:5f:4a:69:19:cf:91:07:18:38:82:d2:68:
         1c:89:1d:c4:8d:cc:9a:e6:65:5c:8f:3a:91:3b:be:9b:ce:f9:
         0c:cf:b0:b8:cf:a2:f1:04:e7:df:7a:c8:84:53:e4:df:c6:67:
         99:b0:2c:c9:14:fb:34:d4:ee:57:6b:4b:19:47:f8:63:f9:93:
         0e:dd:c6:22:02:29:90:7d:b7:76:43:9c:9f:f8:c6:1f:1e:3d:
         15:05:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----