Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D153659AB4E211F1B429391DCF1D38B0.roa
File:                     D153659AB4E211F1B429391DCF1D38B0.roa (raw, json)
Hash identifier:          Qnv5AvXF1mjZlVOoRwwmfAjHEQjtYzxx0+ln+9vd6Ro=
Subject key identifier:   F3:66:59:20:CB:84:4E:2D:D5:EC:9E:5E:8B:C0:F6:75:71:53:C3:D4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D720
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D153659AB4E211F1B429391DCF1D38B0.roa
Signing time:             Sun 20 Sep 2026 11:02:49 +0000
ROA not before:           Sun 20 Sep 2026 11:02:45 +0000
ROA not after:            Tue 27 Oct 2026 11:02:45 +0000
asID:                     63139
IP address blocks:        156.225.115.0/24 maxlen: 24
                          156.225.121.0/24 maxlen: 24
                          156.225.122.0/24 maxlen: 24
                          156.225.123.0/24 maxlen: 24
                          156.225.124.0/24 maxlen: 24
                          156.225.125.0/24 maxlen: 24
                          156.225.126.0/24 maxlen: 24
                          156.225.127.0/24 maxlen: 24
                          156.227.9.0/24 maxlen: 24
                          156.227.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120608 (0x1d720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 11:02:45 2026 GMT
            Not After : Oct 27 11:02:45 2026 GMT
        Subject: CN=6aafbd59-0a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:d5:97:c1:88:67:12:b2:29:29:88:2b:bd:
                    fd:b9:3c:c8:7e:82:6b:9d:2e:62:69:25:6a:d1:78:
                    e0:5e:27:26:4e:98:1a:d0:aa:65:7b:36:5c:3c:d9:
                    a2:24:0b:25:f1:c2:a9:14:94:4b:20:27:5c:dc:bd:
                    1b:ec:6b:e3:02:95:f8:60:bd:72:cd:06:42:3c:3f:
                    87:10:31:27:e6:7a:3e:97:b0:36:f9:c9:eb:13:58:
                    fe:64:ba:7d:de:4a:43:15:5e:1a:26:6e:c2:ad:07:
                    da:61:ab:c8:28:d7:d4:97:2c:a0:b0:d9:0a:2c:26:
                    3c:72:fe:4e:14:a4:b0:56:c0:85:ab:12:f1:5c:96:
                    89:f0:c9:f4:61:67:c5:64:d0:95:27:53:d5:33:b7:
                    cd:ef:21:37:32:e1:be:8a:25:27:34:d9:1e:11:28:
                    7d:d1:9d:d8:7c:e1:ac:89:a3:6e:d9:e6:cd:8c:46:
                    8b:45:ae:19:4a:c6:1a:04:0d:4b:e1:08:ea:6f:d3:
                    40:23:82:6b:7b:36:3c:5a:e9:e8:b9:72:42:b2:31:
                    07:6e:ae:f0:5d:66:c6:d8:77:e0:eb:fb:d4:46:3e:
                    75:a0:79:74:2d:b3:e3:97:8f:13:c1:8b:85:00:a6:
                    07:20:ed:73:6b:59:b8:39:8f:74:c1:40:17:0b:ff:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:66:59:20:CB:84:4E:2D:D5:EC:9E:5E:8B:C0:F6:75:71:53:C3:D4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D153659AB4E211F1B429391DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.115.0/24
                  156.225.121.0-156.225.127.255
                  156.227.9.0/24
                  156.227.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:5e:58:0f:65:bb:1a:46:b0:af:3a:7b:3c:37:17:7b:7a:c7:
         a3:0b:f0:fe:1a:b4:f2:21:27:db:d7:12:75:40:c0:49:34:99:
         ea:85:da:68:72:d2:7b:a1:83:44:be:08:c9:3d:42:6c:5d:47:
         6b:5e:34:82:49:23:57:33:aa:24:64:f5:1d:87:b6:fc:72:d7:
         ea:8b:91:74:06:9c:f8:0c:45:1a:66:ea:2b:f1:a6:19:19:db:
         78:e7:3b:cf:68:30:74:0a:d9:ee:d7:72:9a:5e:b8:ed:98:16:
         d1:2a:83:71:da:be:41:93:59:46:f3:4c:12:13:7a:80:0d:69:
         7c:d4:be:90:56:ed:a9:22:f7:24:b9:69:63:28:db:25:7f:28:
         2a:4e:ef:cd:74:a3:a4:89:1e:62:82:06:fb:5f:19:8a:e1:0c:
         fc:2d:2e:af:5f:0b:07:9b:d9:71:79:57:b2:f0:72:35:6c:00:
         6e:28:ba:04:1d:d3:c6:36:fb:cc:1f:6a:e8:e6:b3:46:45:f6:
         d3:4e:19:ec:0f:0a:38:b7:75:70:a6:0b:8b:43:7f:8e:ad:38:
         ce:1a:ee:ea:cc:3d:e1:b2:53:dd:3c:5b:a0:d9:55:a7:19:75:
         06:93:83:06:dc:6a:3a:10:48:af:11:79:61:12:29:99:a5:42:
         cc:70:e2:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----