Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/010F0178B66811F1BFF1F50BCF1D38B0.roa
File:                     010F0178B66811F1BFF1F50BCF1D38B0.roa (raw, json)
Hash identifier:          SuyxQI4kWaPlnGI9bhpJWTlRtBMdIRnV9ms56lgHnZ4=
Subject key identifier:   51:C9:74:69:58:C6:E8:3D:1E:0B:37:72:D1:6C:66:A2:B9:FD:22:75
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/010F0178B66811F1BFF1F50BCF1D38B0.roa
Signing time:             Tue 22 Sep 2026 09:28:44 +0000
ROA not before:           Tue 22 Sep 2026 09:28:40 +0000
ROA not after:            Sat 07 Nov 2026 09:28:40 +0000
asID:                     63099
IP address blocks:        156.227.136.0/24 maxlen: 24
                          156.231.6.0/24 maxlen: 24
                          156.231.8.0/24 maxlen: 24
                          156.231.9.0/24 maxlen: 24
                          156.231.63.0/24 maxlen: 24
                          156.231.106.0/24 maxlen: 24
                          156.231.128.0/24 maxlen: 24
                          156.231.129.0/24 maxlen: 24
                          156.231.133.0/24 maxlen: 24
                          156.233.66.0/24 maxlen: 24
                          156.249.133.0/24 maxlen: 24
                          156.249.162.0/24 maxlen: 24
                          156.249.166.0/24 maxlen: 24
                          156.249.167.0/24 maxlen: 24
                          156.249.170.0/24 maxlen: 24
                          156.249.180.0/24 maxlen: 24
                          156.249.187.0/24 maxlen: 24
                          156.249.190.0/24 maxlen: 24
                          156.253.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120820 (0x1d7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 09:28:40 2026 GMT
            Not After : Nov  7 09:28:40 2026 GMT
        Subject: CN=6ab24a4c-e349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:9f:e2:31:76:e8:21:91:52:5b:03:71:c8:
                    55:92:f4:13:7e:35:c0:d2:72:00:8b:ac:cb:06:5e:
                    6d:9b:ca:10:72:c9:85:cc:82:65:7d:c5:18:24:90:
                    eb:bb:36:a6:b3:81:f9:57:f2:40:0c:24:b4:1d:fd:
                    bb:23:5c:bb:9c:f5:1c:fd:3a:0e:2a:eb:9f:a2:d0:
                    9f:87:08:a6:40:5b:93:62:2d:81:32:02:3c:d5:5d:
                    89:96:4d:e0:c1:91:d0:ba:19:66:90:4d:f3:e6:50:
                    d5:d1:5f:3e:51:1f:88:b0:a9:16:04:05:55:5c:09:
                    c5:26:13:ee:e2:3d:ad:96:2f:f2:ec:50:13:ec:43:
                    0c:79:01:ce:66:d1:66:2a:4e:25:21:ae:ca:ef:14:
                    0e:ef:9b:c1:33:f6:eb:ba:c4:78:7f:07:b1:41:a2:
                    7b:fc:1f:04:4c:32:8e:98:f8:ff:41:e8:0e:dc:db:
                    28:ba:38:d6:f4:74:d8:63:05:19:b7:ab:db:82:e1:
                    63:39:14:0b:1b:69:d5:21:f5:f0:0f:15:24:1e:2b:
                    d2:99:7e:cf:e2:93:fd:8b:98:78:38:57:fa:4e:3f:
                    af:22:eb:98:bb:c8:06:39:4c:61:4b:c2:be:36:72:
                    45:42:b0:00:29:8c:ac:a2:c7:26:11:68:a3:a2:aa:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C9:74:69:58:C6:E8:3D:1E:0B:37:72:D1:6C:66:A2:B9:FD:22:75
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/010F0178B66811F1BFF1F50BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.136.0/24
                  156.231.6.0/24
                  156.231.8.0/23
                  156.231.63.0/24
                  156.231.106.0/24
                  156.231.128.0/23
                  156.231.133.0/24
                  156.233.66.0/24
                  156.249.133.0/24
                  156.249.162.0/24
                  156.249.166.0/23
                  156.249.170.0/24
                  156.249.180.0/24
                  156.249.187.0/24
                  156.249.190.0/24
                  156.253.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:01:9a:f9:92:f5:31:27:40:aa:4e:9c:7e:65:46:13:80:
         a6:63:13:a2:66:e8:af:fc:36:41:2e:cb:0e:e6:e6:85:07:24:
         c1:b8:dd:92:de:9c:41:53:53:90:c4:a7:98:80:66:78:d2:97:
         4e:7c:f8:d4:73:d0:c0:dc:58:29:41:ce:27:8f:dd:42:22:df:
         7a:79:c8:f2:fc:69:c3:05:e5:85:e2:60:d9:59:cb:3b:3f:fa:
         29:11:8e:0b:af:be:0b:dc:e1:d7:5c:5c:53:1a:b7:76:61:04:
         7b:1a:03:12:d7:17:ae:53:ce:cb:92:6d:68:e8:8f:e8:93:8e:
         c4:6b:d2:ec:24:79:57:7a:7f:2d:c9:e2:f8:e1:97:48:24:68:
         5f:69:3c:3c:4c:e4:2f:39:ac:bd:64:8f:58:05:d2:e0:ab:71:
         12:d2:63:2f:88:6f:e6:ae:67:fe:11:fa:e7:24:73:29:12:c8:
         22:98:77:c4:6f:9d:74:c9:94:64:4d:69:ea:8b:68:da:2c:32:
         e2:42:50:84:66:43:02:f1:99:53:64:5c:9c:65:47:1b:39:ec:
         41:1d:5d:89:bc:ff:da:c9:06:c2:2e:c6:e7:7b:9a:50:51:3d:
         04:d2:ac:69:97:64:be:16:51:2b:ae:16:a8:ae:cf:8b:93:fa:
         7b:da:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----