Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A7C0C8B0DB11F1BAFD46DBCE1D38B0.roa
File:                     81A7C0C8B0DB11F1BAFD46DBCE1D38B0.roa (raw, json)
Hash identifier:          5x8bCjBQEL+0QY0t53BwKPCkwY5mxDgt0pAs1o/46js=
Subject key identifier:   A3:86:5E:89:E5:6D:0F:B2:07:5B:CF:F9:04:20:83:6C:1E:D9:B0:D7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D629
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A7C0C8B0DB11F1BAFD46DBCE1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:00:25 +0000
ROA not before:           Tue 15 Sep 2026 08:00:21 +0000
ROA not after:            Thu 22 Oct 2026 08:00:21 +0000
asID:                     11404
IP address blocks:        156.237.96.0/21 maxlen: 24
                          156.237.108.0/22 maxlen: 24
                          156.237.112.0/20 maxlen: 24
                          156.239.196.0/22 maxlen: 24
                          156.239.200.0/21 maxlen: 24
                          156.239.208.0/20 maxlen: 24
                          156.242.32.0/20 maxlen: 24
                          156.245.20.0/22 maxlen: 24
                          156.245.24.0/22 maxlen: 24
                          156.245.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120361 (0x1d629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 08:00:21 2026 GMT
            Not After : Oct 22 08:00:21 2026 GMT
        Subject: CN=6aa8fb19-3ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:84:7a:9f:3c:dc:cc:22:af:f7:04:08:7e:
                    93:28:9e:50:b4:be:fe:67:2b:27:f7:45:d4:3e:ab:
                    56:96:20:3c:c7:fe:42:52:50:d0:b8:10:d1:c6:07:
                    09:99:63:7f:20:dc:46:9c:1c:33:9a:da:65:51:dd:
                    fe:50:50:81:0c:81:83:fd:78:95:3d:17:bf:70:84:
                    61:2b:2b:bc:fd:a7:46:fe:c1:91:81:77:91:82:85:
                    4d:da:2f:6e:30:c0:ee:40:85:26:5b:59:a1:8e:54:
                    8a:c2:8e:cf:be:e5:af:20:a8:a5:88:97:6d:d3:e6:
                    4a:82:c6:dd:4a:82:fb:ee:c8:a9:27:b5:36:2a:d1:
                    7a:ac:ae:67:f8:b2:6f:92:e2:bd:aa:49:19:34:b7:
                    2e:cd:31:91:5d:fb:df:e4:78:b9:a7:1c:60:9b:5e:
                    90:32:e2:ad:12:d3:57:df:66:4b:60:af:8c:37:5f:
                    5f:fa:0d:96:61:f2:82:fa:e0:2f:45:6a:a3:29:c8:
                    21:08:e8:a9:c3:d5:ad:32:5b:73:90:b0:bc:a1:ad:
                    0c:9a:38:e9:1e:34:66:61:4c:36:dd:af:81:1c:82:
                    d0:c8:56:d4:b4:b5:c5:f2:b0:dd:78:e8:a2:c5:bf:
                    c3:77:3e:18:63:02:9f:32:d8:34:93:22:c7:e6:e7:
                    7b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:86:5E:89:E5:6D:0F:B2:07:5B:CF:F9:04:20:83:6C:1E:D9:B0:D7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81A7C0C8B0DB11F1BAFD46DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.96.0/21
                  156.237.108.0-156.237.127.255
                  156.239.196.0-156.239.223.255
                  156.242.32.0/20
                  156.245.20.0-156.245.27.255
                  156.245.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:20:02:14:e8:08:bd:f3:e1:7e:e0:e8:a8:68:3e:08:f1:
         f4:5d:a6:c0:51:cb:30:4a:11:13:1c:c0:81:31:4c:c7:e2:9f:
         e8:5d:7c:b3:ac:52:b2:c4:bf:38:a2:aa:88:85:e6:ca:b2:3a:
         68:79:3d:ee:b6:f3:e2:80:1a:a3:4a:a2:9b:76:45:b0:a9:91:
         95:00:37:5d:b5:15:99:14:15:71:fa:dd:d4:49:66:18:11:fe:
         30:2e:90:4e:a5:a7:95:b3:c6:28:e1:ea:08:48:96:dd:fe:63:
         49:cf:f6:47:b4:29:c8:29:71:9b:7f:92:8e:98:6f:be:1a:06:
         3f:96:82:71:59:a3:28:27:a1:35:f6:06:ae:cb:ff:6c:c9:b5:
         76:98:bd:13:80:47:d6:fa:43:4e:6e:4a:7c:4f:47:03:35:0f:
         38:26:a7:30:cd:72:cd:9a:63:4f:7d:9a:b9:d7:f6:b5:8b:db:
         e7:d1:9f:41:68:ff:8a:23:1d:03:0b:cd:f1:e5:80:a4:16:f8:
         dc:ee:18:c0:80:46:15:68:97:98:96:ec:08:09:3c:0d:28:ab:
         05:23:bf:b9:61:73:7c:d8:88:6f:ea:c6:c0:4d:e0:4b:09:da:
         14:2c:ad:46:0f:e3:2c:57:9f:ba:b3:2d:f0:52:8c:a4:8f:b2:
         ea:d1:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----