Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80FDBB74ADA111F1BA90B5D2CE1D38B0.roa
File:                     80FDBB74ADA111F1BA90B5D2CE1D38B0.roa (raw, json)
Hash identifier:          xpneiVo6L/YXFi+Ku6dY5GreaTWdRHLnGb5SQHL1ISA=
Subject key identifier:   E2:01:BF:16:2E:FF:9D:CC:E2:58:77:84:27:7F:B6:B2:78:0D:1E:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D50B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80FDBB74ADA111F1BA90B5D2CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 05:27:39 +0000
ROA not before:           Fri 11 Sep 2026 05:27:35 +0000
ROA not after:            Sat 10 Oct 2026 05:27:35 +0000
asID:                     139613
IP address blocks:        156.225.76.0/22 maxlen: 24
                          156.238.120.0/21 maxlen: 24
                          156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.245.144.0/22 maxlen: 24
                          156.245.204.0/22 maxlen: 24
                          156.245.232.0/21 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120075 (0x1d50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 05:27:35 2026 GMT
            Not After : Oct 10 05:27:35 2026 GMT
        Subject: CN=6aa3914b-3cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:b9:73:33:58:9d:65:39:a3:ec:ec:02:73:
                    f6:bc:15:64:ce:1c:cf:2d:17:2d:fa:20:76:3c:f0:
                    61:cf:27:02:30:a9:5b:ef:45:3e:c7:f1:93:75:75:
                    a8:2a:98:11:63:31:46:ab:49:f6:98:ea:1b:0a:a0:
                    bc:cd:83:2d:af:9c:79:1b:16:bb:fe:3e:b2:b9:1e:
                    f7:3c:22:90:e5:0d:79:35:08:25:26:d3:77:df:1f:
                    ce:5b:a6:fc:62:c3:96:72:16:c6:0f:31:1d:e2:88:
                    b5:18:c3:ad:06:7e:56:fb:ae:26:cb:8d:85:db:9c:
                    6f:eb:99:a7:79:44:97:fe:c2:6f:8c:f8:78:c9:7f:
                    29:8a:39:11:44:e4:f5:c8:7b:15:ff:5d:5d:42:3f:
                    a5:1f:e2:e6:3c:c8:95:8c:0d:98:2d:a8:ec:c9:99:
                    96:4f:aa:fd:34:6a:d8:11:2f:5f:b4:0b:f5:84:cd:
                    6c:e9:41:de:e2:ec:0b:f6:5a:69:a4:11:6f:69:80:
                    bd:fc:27:e7:36:03:7e:ea:3d:2c:32:e1:2d:aa:1e:
                    42:da:ba:9f:ae:5e:bd:9d:c0:a4:2c:80:30:30:7a:
                    86:d0:4c:65:0e:45:70:40:a8:04:80:ea:47:6b:e4:
                    29:6d:ed:08:fc:e9:6c:ab:8b:e9:b5:69:b8:98:89:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:01:BF:16:2E:FF:9D:CC:E2:58:77:84:27:7F:B6:B2:78:0D:1E:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80FDBB74ADA111F1BA90B5D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.76.0/22
                  156.238.120.0/21
                  156.240.0.0-156.240.55.255
                  156.245.144.0/22
                  156.245.204.0/22
                  156.245.232.0/21
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:99:ac:b7:62:4d:2a:2a:48:62:cd:e5:f4:6f:83:36:52:48:
         3c:90:db:2f:e2:10:7c:4d:2b:00:5d:24:2e:ec:88:8d:be:aa:
         7f:1b:5c:70:cf:c9:08:69:07:ff:f6:27:e1:4c:bc:09:d3:8f:
         f4:88:53:df:78:ee:51:60:ad:93:d6:a8:9b:b8:0b:41:28:d9:
         49:22:37:ba:0e:71:b1:36:2d:8d:2d:e9:61:15:41:f4:08:bb:
         80:99:7c:aa:b2:08:7d:d3:00:ad:7a:12:0f:de:3d:4d:f4:b9:
         1d:49:64:ab:f9:ec:27:69:fc:aa:97:63:2c:97:13:ef:6c:44:
         7a:f5:0a:90:76:d0:d9:3e:a9:cb:50:98:bf:34:08:20:97:b4:
         a2:8f:e1:fc:fd:3d:91:fe:9b:36:b5:91:c2:2c:aa:b3:22:32:
         b5:fe:e7:be:0a:c3:49:73:e8:0b:50:42:e3:9b:ce:7b:ea:18:
         8e:22:da:8d:d2:35:2a:2e:8f:b5:a4:ce:58:3a:9d:f4:b4:55:
         48:37:b8:d0:25:51:08:41:57:be:ed:b4:95:4d:55:9c:98:60:
         02:42:9e:9b:e0:0a:d4:92:25:8e:d3:bc:d8:e7:18:94:30:bd:
         af:d7:e6:e3:69:ec:ea:fa:ad:66:e3:75:f2:1c:29:e1:c6:d4:
         73:ae:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----