Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B932224B3F811F08C9E6889DAE4EC9C.roa
File:                     9B932224B3F811F08C9E6889DAE4EC9C.roa (raw, json)
Hash identifier:          LEQhvDPzcVagiMN1zgGQ0KP/NNfArNshVhLIRXDdRII=
Subject key identifier:   8C:7A:E0:05:46:8B:69:3B:7A:AD:25:FB:CD:27:ED:F8:2B:4C:FC:6D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018378
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B932224B3F811F08C9E6889DAE4EC9C.roa
Signing time:             Tue 28 Oct 2025 12:21:20 +0000
ROA not before:           Tue 28 Oct 2025 12:21:13 +0000
ROA not after:            Wed 10 Dec 2025 12:21:13 +0000
asID:                     138915
IP address blocks:        156.244.16.0/24 maxlen: 24
                          156.244.17.0/24 maxlen: 24
                          156.244.18.0/24 maxlen: 24
                          156.244.19.0/24 maxlen: 24
                          156.244.20.0/24 maxlen: 24
                          156.244.21.0/24 maxlen: 24
                          156.244.22.0/24 maxlen: 24
                          156.244.25.0/24 maxlen: 24
                          156.244.26.0/24 maxlen: 24
                          156.244.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99192 (0x18378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 28 12:21:13 2025 GMT
            Not After : Dec 10 12:21:13 2025 GMT
        Subject: CN=6900b53f-298f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:9a:56:c6:2c:0c:25:4a:a5:53:00:db:34:
                    fe:5b:2a:aa:ee:df:62:d3:f6:30:23:cb:48:8e:a7:
                    17:be:43:4a:3c:52:ea:64:9b:e4:aa:a0:4b:90:e8:
                    f8:4f:85:2a:cd:af:21:34:ef:59:3e:67:13:61:cb:
                    95:9f:0b:e5:16:40:50:5e:62:87:db:61:71:fc:5d:
                    a8:24:3e:10:5d:4c:d2:f9:f0:ba:f2:84:ba:2c:d9:
                    49:bf:85:01:ae:39:2a:c4:4b:da:f8:fe:4d:ea:43:
                    cc:f7:bc:13:11:15:8d:7d:03:c0:f3:8d:79:f8:76:
                    4c:f5:df:a3:65:ec:15:88:a2:3b:76:b8:fd:19:76:
                    8b:df:ac:06:ad:ff:80:5e:f5:24:58:f8:37:96:f9:
                    0e:aa:8c:ba:16:b7:63:93:5b:81:09:17:19:db:2f:
                    54:0b:f7:31:32:73:b9:3c:fd:91:79:d1:97:aa:ee:
                    a2:fc:9a:aa:08:71:37:47:2e:53:72:17:0a:8f:0f:
                    38:35:20:e0:26:43:7b:ac:25:5b:e0:cf:5a:13:91:
                    9b:94:36:44:71:2b:46:95:7f:1a:f2:66:56:d3:a6:
                    4f:e0:3a:b1:9b:c3:b9:68:f1:e5:50:56:8a:a7:ef:
                    f2:12:8e:de:0c:4e:ce:77:df:8a:3b:03:6c:8b:d5:
                    96:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7A:E0:05:46:8B:69:3B:7A:AD:25:FB:CD:27:ED:F8:2B:4C:FC:6D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B932224B3F811F08C9E6889DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.16.0-156.244.22.255
                  156.244.25.0-156.244.27.255

    Signature Algorithm: sha256WithRSAEncryption
         76:69:9f:ba:a1:33:42:a9:30:8b:8d:3b:fe:65:97:80:e4:d7:
         90:4e:d9:bc:63:fc:f8:a6:56:90:d5:ae:6e:8a:f3:d6:e8:7e:
         e0:64:cb:91:19:91:a3:01:9b:6d:24:9a:5c:05:e9:23:cd:6d:
         86:b6:10:aa:73:ac:9d:54:66:34:90:ea:7e:6b:a6:b8:f8:c3:
         31:4e:0c:03:3c:dd:43:e5:b5:cb:d4:8a:11:4a:3e:f1:3b:be:
         4e:14:78:9d:74:36:27:2b:2f:a9:ed:a7:32:19:0b:b7:65:54:
         aa:14:ea:ea:4c:a1:9a:32:c9:d4:e1:d8:66:c8:b1:8f:2d:2f:
         1b:ca:9c:14:38:cd:f3:6b:6a:00:c9:98:9b:28:84:27:82:31:
         bd:56:20:46:fd:92:78:46:0d:c4:7f:70:a8:bc:fa:55:d7:2d:
         dd:c9:ce:e6:c0:12:c6:f7:73:2a:51:89:36:8b:74:3f:df:07:
         87:91:4c:ad:2e:02:69:6b:1e:2e:c0:9f:04:dd:29:f9:94:f9:
         eb:b2:69:c3:fc:8c:ad:c3:42:d3:d0:fe:57:a4:49:61:0c:56:
         28:1b:1b:fb:93:f7:09:ce:83:04:10:ac:ce:ad:34:02:05:94:
         33:fc:ad:e5:30:d3:bc:d9:c6:57:46:90:36:93:03:d8:5a:bc:
         0d:3d:26:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:33 2025 by rpki-client