Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D6E19C8B3F811F1936B9416CF1D38B0.roa
File:                     8D6E19C8B3F811F1936B9416CF1D38B0.roa (raw, json)
Hash identifier:          Bfkevb6zFEh50+gNiv98V0uH3RDjKBbsHN8qdEECUJQ=
Subject key identifier:   F5:F2:D5:C4:C3:30:34:2F:A9:2B:62:F9:7C:9D:12:47:C7:36:F5:87
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D6E19C8B3F811F1936B9416CF1D38B0.roa
Signing time:             Sat 19 Sep 2026 07:05:53 +0000
ROA not before:           Sat 19 Sep 2026 07:05:49 +0000
ROA not after:            Wed 28 Oct 2026 07:05:49 +0000
asID:                     63023
IP address blocks:        156.229.239.0/24 maxlen: 24
                          156.233.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120559 (0x1d6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 19 07:05:49 2026 GMT
            Not After : Oct 28 07:05:49 2026 GMT
        Subject: CN=6aae3451-ecd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:84:3d:f7:aa:88:58:49:6f:74:43:c8:93:
                    64:6a:a9:1c:5e:15:88:37:84:c9:5d:b2:1f:c7:7b:
                    4a:44:12:18:a8:e5:d9:ea:00:37:d1:6b:bb:67:91:
                    73:06:d4:2c:e9:85:bf:a3:e2:05:f8:52:7b:92:cb:
                    68:26:e9:d6:97:1a:65:5b:5f:57:4a:8f:8a:12:f5:
                    61:96:5a:cd:e0:da:5e:b6:f5:53:09:8e:ea:69:29:
                    eb:40:6c:2e:0a:1e:dc:4d:a1:78:e1:5b:d6:e5:0e:
                    b1:55:fe:e0:91:3b:fc:0f:eb:b7:50:e5:22:90:17:
                    cc:fc:33:fc:94:69:07:64:e3:9f:15:08:77:91:99:
                    72:ec:67:ee:14:f5:41:5f:08:86:05:10:fc:02:dd:
                    49:f9:7b:e0:0a:4a:88:a8:4c:b6:53:5a:2d:de:5d:
                    65:f7:42:00:ba:57:8a:3e:2a:95:ab:ed:1a:8f:a5:
                    8a:2d:eb:f9:2c:9a:3b:7b:7e:8c:a5:2c:ac:c4:75:
                    4c:b4:8c:93:3d:3d:f3:1b:3f:86:f7:cc:da:63:da:
                    55:ba:1d:7b:81:5d:66:2e:0a:5a:f3:63:bd:de:60:
                    1c:2b:11:e9:71:f1:9e:13:54:31:a1:8a:62:f5:36:
                    fc:d0:74:2b:50:86:1a:97:ae:ef:6a:87:5a:21:b5:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F2:D5:C4:C3:30:34:2F:A9:2B:62:F9:7C:9D:12:47:C7:36:F5:87
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D6E19C8B3F811F1936B9416CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.239.0/24
                  156.233.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:cb:21:8b:4d:27:48:d3:54:18:e7:64:94:01:5c:d5:31:f2:
         e0:4f:3d:f2:81:da:3d:c7:c0:39:b8:a9:60:4a:cf:dc:ed:b7:
         78:6e:e9:f0:00:88:c2:1c:79:f3:a5:27:94:d4:0e:3c:88:06:
         f5:7f:02:1a:9e:2c:e4:b7:9c:8d:1f:3d:79:f8:a4:82:ab:db:
         8a:df:be:e3:de:14:b4:6a:80:f9:b5:81:75:14:2e:5d:cc:37:
         42:25:4b:ac:78:7c:d7:de:09:80:c4:12:df:0a:6a:5c:f4:e3:
         cb:d2:c9:fa:0b:0d:b2:1a:a8:ba:37:b5:e3:ca:1f:61:13:98:
         71:7c:ce:e5:6d:8c:f3:d2:c5:49:ff:fa:af:22:16:b4:7e:c4:
         c4:b8:27:64:9e:e4:c2:b1:4c:80:3b:bf:25:a3:47:fe:cb:06:
         eb:8a:31:28:ce:98:59:08:50:a1:23:4b:87:66:ba:a7:4e:af:
         4c:74:3e:9b:c6:46:d9:26:c5:ad:22:b4:8b:1f:2f:ea:40:ca:
         e4:bf:01:f5:70:68:5d:bf:a0:db:95:f0:46:8f:de:e0:54:04:
         49:9b:d8:fe:25:d3:43:10:ef:2f:a5:4b:ab:30:17:8b:52:42:
         43:b1:4c:62:2e:b2:be:d9:d6:58:44:c8:a2:62:aa:19:c5:32:
         1c:59:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----