Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF3D6CD8B00411F1A69095C8CE1D38B0.roa
File:                     DF3D6CD8B00411F1A69095C8CE1D38B0.roa (raw, json)
Hash identifier:          iYuwSmymNDhSX9lQpwJrcLzBBh66SPzzirxD+3jzsQA=
Subject key identifier:   8E:9B:3A:26:13:51:54:CC:37:37:BE:EA:1D:22:A3:BC:18:68:BD:8A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF3D6CD8B00411F1A69095C8CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 06:24:00 +0000
ROA not before:           Mon 14 Sep 2026 06:23:56 +0000
ROA not after:            Thu 22 Oct 2026 06:23:56 +0000
asID:                     141159
IP address blocks:        156.233.230.0/24 maxlen: 24
                          156.233.231.0/24 maxlen: 24
                          156.233.236.0/22 maxlen: 24
                          156.233.236.0/24 maxlen: 24
                          156.233.237.0/24 maxlen: 24
                          156.233.238.0/24 maxlen: 24
                          156.233.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120274 (0x1d5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 14 06:23:56 2026 GMT
            Not After : Oct 22 06:23:56 2026 GMT
        Subject: CN=6aa79300-9369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:24:6a:c0:95:dc:c5:5e:bd:49:5b:08:d9:db:
                    69:d1:59:de:41:1f:53:ed:08:60:5e:48:41:03:92:
                    b9:b7:2d:e7:d3:ad:37:f8:bc:09:97:f1:93:7d:20:
                    bb:9c:c1:4b:e8:cb:61:33:b7:28:98:e0:65:a3:ab:
                    17:39:d7:93:95:27:d1:75:9f:23:46:09:59:95:f0:
                    7a:42:77:bd:b9:1d:d2:0e:81:fa:19:51:68:83:81:
                    f4:35:4a:a4:11:07:a2:39:30:4f:80:ab:c7:53:23:
                    cb:98:e9:4e:d6:48:17:e2:3e:09:d8:e5:ac:db:1d:
                    49:33:a6:5c:d0:f7:7b:37:5e:96:be:f9:bd:89:53:
                    46:73:a8:96:4a:29:7e:c1:08:00:47:cc:59:6c:dd:
                    d5:99:f2:be:1e:2b:9b:ab:86:d1:a7:0e:77:92:28:
                    e3:2f:90:6f:eb:51:be:7d:e2:6c:3e:be:e5:f3:7f:
                    f4:88:7f:24:8f:a7:a4:cd:53:ff:2c:57:1f:e5:f8:
                    42:0b:58:da:ce:0b:ee:3e:fb:38:95:df:f5:ed:2b:
                    f4:c8:16:66:45:ee:74:93:b4:b3:20:a9:73:ca:9f:
                    d6:fe:cb:fd:da:ef:70:cb:ef:e7:f0:b6:02:d9:f7:
                    e7:59:a5:1d:73:41:6c:3c:05:ca:12:77:17:87:bf:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9B:3A:26:13:51:54:CC:37:37:BE:EA:1D:22:A3:BC:18:68:BD:8A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF3D6CD8B00411F1A69095C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.230.0/23
                  156.233.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:55:c0:d4:d2:d8:ec:22:62:32:17:a5:b0:25:f0:b9:14:e9:
         15:23:66:ec:ca:ca:ee:39:d2:a6:75:f1:ee:c2:7a:79:55:4e:
         eb:8f:45:0c:67:32:cf:fe:4d:81:95:09:3e:d8:ea:97:9d:b2:
         31:b7:55:16:7c:13:d4:d9:24:1a:ca:4c:de:8d:35:04:2f:eb:
         15:bb:9f:59:a3:20:bd:f4:57:82:1d:53:8f:cf:67:ab:c2:0b:
         6b:6c:12:99:bc:e3:e9:b5:5b:7f:e6:f5:bd:72:2a:08:93:22:
         29:37:0c:26:a5:fa:75:dd:d9:e1:3e:d2:85:7e:a6:cb:32:16:
         72:e4:9c:97:83:47:89:cf:5a:dc:ef:51:cb:8b:34:96:ca:64:
         f0:0d:7e:8d:e8:b3:92:77:8e:43:04:bf:ac:f0:8e:4d:9d:69:
         b4:48:82:9a:c7:5c:a0:f6:7d:ec:93:04:48:36:95:aa:c8:f5:
         d4:72:82:6b:2b:b3:d1:30:fc:83:72:00:38:cf:0d:fd:b9:82:
         7b:e5:07:62:69:a5:69:a3:b9:38:a0:1b:13:68:c7:3c:36:8a:
         93:55:3c:68:a9:15:38:fe:d7:81:8b:b5:ce:4c:e0:de:dc:92:
         92:d2:f6:d1:80:3b:80:61:64:46:38:72:36:52:e5:24:68:99:
         b6:a4:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----