Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A32903AAD2B11F1A7E55DFBCE1D38B0.roa
File:                     0A32903AAD2B11F1A7E55DFBCE1D38B0.roa (raw, json)
Hash identifier:          n+NAscPQncFqIxXm18sM58RN0ULprnPSfAWqgSGMaOQ=
Subject key identifier:   D8:EB:27:9F:21:9C:72:DC:BB:55:1B:1B:7E:6F:B6:35:65:82:71:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D506
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A32903AAD2B11F1A7E55DFBCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 15:19:39 +0000
ROA not before:           Thu 10 Sep 2026 15:19:35 +0000
ROA not after:            Sat 10 Oct 2026 15:19:35 +0000
asID:                     44477
IP address blocks:        156.253.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120070 (0x1d506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 15:19:35 2026 GMT
            Not After : Oct 10 15:19:35 2026 GMT
        Subject: CN=6aa2ca8b-4e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4d:4e:c8:18:0e:eb:3a:0a:af:ca:7d:d1:9b:
                    4a:cd:46:55:e4:41:b5:a5:e9:be:c0:92:7b:ca:09:
                    66:a1:c4:06:90:c5:3f:df:32:c6:21:58:95:5f:f9:
                    37:38:09:1a:23:5a:f4:f8:23:03:9d:2a:37:4d:d0:
                    dd:32:b6:ab:3c:45:63:19:88:ca:b5:c8:51:7d:dd:
                    bf:7d:92:7b:eb:bf:14:cc:68:58:ca:16:ab:5d:60:
                    06:7d:4d:c4:b4:df:26:a5:86:81:1e:38:7f:14:89:
                    69:db:18:a3:bb:6f:9d:ee:01:50:53:65:04:1d:83:
                    ca:90:7a:87:bc:71:6e:03:6e:06:68:89:e6:d1:06:
                    fa:c4:21:42:3b:85:29:fd:15:46:d4:bd:1c:62:1d:
                    70:ea:a1:03:23:db:8a:35:53:73:51:4c:c1:c9:0a:
                    f8:0f:fd:a0:ae:d0:62:ad:61:6a:45:1c:6e:46:ca:
                    5d:82:45:c6:e8:ca:b0:1c:bc:d5:ff:82:32:64:a7:
                    c3:a6:37:c2:7a:6c:ee:7b:95:08:51:43:19:7b:88:
                    10:b0:39:8e:24:18:9d:61:6c:da:37:a6:0f:9d:f1:
                    04:7e:b1:3d:0d:40:15:22:4e:a5:d6:fd:26:8a:f9:
                    82:28:d8:54:83:65:f9:58:c2:55:d2:6f:22:3c:97:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EB:27:9F:21:9C:72:DC:BB:55:1B:1B:7E:6F:B6:35:65:82:71:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A32903AAD2B11F1A7E55DFBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:fd:13:34:73:a0:e3:08:99:cb:f5:4c:bf:b5:ac:4c:36:4d:
         f9:f5:b2:de:7b:ab:54:f0:ca:2b:96:95:1d:ee:e3:d2:82:69:
         ec:e5:e3:9c:fe:22:86:e1:83:4e:f7:0c:03:a0:c2:0f:31:56:
         be:ef:df:9c:28:bc:88:5e:70:41:75:93:39:17:97:df:61:84:
         b7:93:f8:23:45:a7:14:cb:21:e8:5a:14:19:0a:6e:fb:b9:af:
         c9:7c:30:f4:73:b2:a7:92:72:51:b6:0c:0d:63:48:ec:b1:7c:
         cf:33:6e:7f:f6:cd:bb:f0:d9:83:2b:9c:e9:70:46:41:0d:c6:
         77:53:36:44:f4:99:2e:da:de:48:1c:d2:cd:94:c7:04:3e:12:
         bb:1c:34:c6:f0:aa:85:f2:ca:d0:6c:c6:71:6b:5c:fe:d0:bb:
         6f:54:ab:83:b3:7b:fc:a3:61:ca:0f:22:eb:ab:dd:cc:79:86:
         19:03:6e:21:dc:4d:09:3e:4d:bf:f6:5a:9e:4f:32:23:d1:a7:
         ea:fd:3f:2f:b3:da:91:3d:19:95:40:19:95:57:a1:80:74:b6:
         4d:48:5f:9b:aa:66:29:14:32:09:23:28:cd:dd:f8:eb:83:50:
         5b:0c:20:cf:9d:65:d8:65:1d:a0:e5:e5:66:f3:a1:de:a7:21:
         ad:85:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----