Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B1BA6C0ACF611F1A26EEDC4CE1D38B0.roa
File:                     9B1BA6C0ACF611F1A26EEDC4CE1D38B0.roa (raw, json)
Hash identifier:          nmejknsoBWIfAubndx+tdlXBHTOwoo8LmME4LPnoZNE=
Subject key identifier:   A6:41:97:CA:87:61:44:D1:14:99:E5:34:F1:22:91:9C:B8:F5:A3:48
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D49B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B1BA6C0ACF611F1A26EEDC4CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 09:04:19 +0000
ROA not before:           Thu 10 Sep 2026 09:04:15 +0000
ROA not after:            Sun 04 Oct 2026 09:04:15 +0000
asID:                     17497
IP address blocks:        156.255.25.0/24 maxlen: 24
                          156.255.26.0/24 maxlen: 24
                          156.255.27.0/24 maxlen: 24
                          156.255.28.0/24 maxlen: 24
                          156.255.29.0/24 maxlen: 24
                          156.255.30.0/24 maxlen: 24
                          156.255.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119963 (0x1d49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 09:04:15 2026 GMT
            Not After : Oct  4 09:04:15 2026 GMT
        Subject: CN=6aa27293-ee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:74:d4:73:85:d1:07:ea:32:d8:b6:7a:af:
                    89:68:21:b3:e3:11:8c:41:ff:83:33:b3:2d:5a:be:
                    6e:f8:c2:b8:89:5c:99:eb:fd:e6:c4:7a:8b:22:1a:
                    ed:ea:29:95:5f:d2:14:76:43:4f:e3:19:fd:e7:29:
                    a6:a1:ed:07:93:a5:c0:04:98:80:51:2a:d6:5e:dc:
                    08:dc:ca:fc:06:89:70:7f:1a:1c:88:77:bc:50:3d:
                    c4:80:36:a2:58:32:fe:19:69:6d:71:93:f3:83:ec:
                    44:ea:b3:b2:0f:5d:ec:f3:01:24:0b:81:53:bd:22:
                    49:9b:00:4e:be:43:86:65:d3:21:56:c7:67:32:e1:
                    e5:4c:e8:f9:e2:d1:3a:ff:ac:48:fe:84:05:24:1d:
                    e7:7a:fd:fc:4c:0c:e0:fd:db:77:97:f2:ec:d3:1b:
                    34:7e:9c:83:04:2b:10:94:4f:ce:ca:8e:bf:2e:33:
                    4c:e8:d6:fc:54:cd:ed:45:2f:95:53:35:f3:22:3b:
                    61:fd:8e:2d:64:59:9f:aa:66:13:1d:59:71:06:08:
                    e0:05:a4:eb:ce:fc:9e:c8:9a:f3:5f:30:36:5f:78:
                    84:8e:58:76:4f:51:3c:fd:b2:d4:19:41:58:d0:78:
                    99:5e:c1:e5:6d:24:01:2a:8f:91:09:b2:fc:ef:1b:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:41:97:CA:87:61:44:D1:14:99:E5:34:F1:22:91:9C:B8:F5:A3:48
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B1BA6C0ACF611F1A26EEDC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.25.0-156.255.31.255

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:44:fa:35:e7:5d:81:47:cd:de:94:b5:9d:b3:a5:f6:54:
         40:b9:58:1f:ba:3e:ec:76:ae:48:14:fb:9a:28:4e:bf:72:70:
         0e:af:53:b9:3c:5d:34:82:06:41:fc:f2:e6:f1:8a:76:5e:8e:
         38:3c:3d:81:2c:67:51:ec:e9:04:97:a3:a3:9e:d8:d1:ce:db:
         8b:33:4e:f7:b0:3f:cc:e1:ed:a1:04:8b:62:8a:61:9b:da:d9:
         c1:2a:9f:72:90:28:d2:41:3d:60:45:76:eb:99:13:2c:d3:e8:
         13:96:1c:49:f3:af:61:f5:02:2b:16:a7:3c:02:8e:a0:9d:37:
         cf:d1:2e:60:7c:43:ea:c6:0d:11:4e:bd:e3:c6:7d:68:c5:19:
         1a:8f:de:df:2b:a7:f4:0d:f7:86:31:ed:fe:6e:56:51:29:7f:
         ef:ae:4f:48:54:89:01:1e:d0:6d:16:2d:37:90:bc:7b:57:4c:
         6b:f5:5b:57:41:ad:36:f5:dd:00:ce:5c:b3:70:37:ed:6d:f1:
         1d:14:82:e0:4e:1e:38:f9:ac:96:d5:da:a4:cd:33:11:e2:b3:
         f6:4a:fa:7f:6d:98:d3:60:4c:c8:71:ff:60:2c:ea:e4:29:00:
         a2:7c:a4:e8:3d:24:29:cc:c8:6d:4e:63:80:b0:5c:45:1b:61:
         d2:44:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----