Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F1CFE5EA6B011F19F722DC3CE1D38B0.roa
File:                     0F1CFE5EA6B011F19F722DC3CE1D38B0.roa (raw, json)
Hash identifier:          oHoGIP8w7lyDzBhhYGIfBNIMdalEkzpKv6xTdhWBku0=
Subject key identifier:   D4:A7:97:B8:20:AD:99:14:4E:4E:0F:D4:64:B0:EA:B4:94:EB:CB:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D272
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F1CFE5EA6B011F19F722DC3CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 09:24:13 +0000
ROA not before:           Wed 02 Sep 2026 09:24:08 +0000
ROA not after:            Thu 08 Oct 2026 09:24:08 +0000
asID:                     202437
IP address blocks:        156.228.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119410 (0x1d272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 09:24:08 2026 GMT
            Not After : Oct  8 09:24:08 2026 GMT
        Subject: CN=6a97eb3c-8b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:db:1d:1b:73:08:98:46:74:52:67:d4:2e:
                    dc:2d:8b:a3:7f:6b:31:9f:a3:dd:66:98:5e:29:d3:
                    4c:ae:b4:db:d2:3f:2f:b4:4b:cb:92:1a:13:67:5e:
                    9c:eb:81:44:1e:a4:3f:35:f7:7a:f8:af:df:cd:c3:
                    e3:15:4e:f8:56:7f:a2:fc:ad:73:21:7a:81:e3:c2:
                    90:52:91:0b:ef:69:89:24:10:01:a9:17:0d:5e:34:
                    bd:9d:b3:f4:f1:b8:8e:71:f4:5c:58:86:20:a2:12:
                    11:53:4d:8b:72:b0:f8:94:50:fd:8f:97:e0:ca:c4:
                    83:61:d2:e6:43:33:7f:5a:21:ff:e7:f1:83:49:8f:
                    0d:cc:59:8c:33:e6:c1:64:d6:13:9f:77:1b:35:b9:
                    ee:fe:30:4b:16:44:2a:81:36:c2:d7:46:27:3f:41:
                    01:26:dc:d1:4a:b8:b2:84:28:55:54:d1:32:fa:1f:
                    61:b6:67:e5:3e:9e:0f:c0:41:2c:01:b8:14:56:35:
                    9b:e9:08:b8:15:dc:fd:90:f1:26:a5:09:89:5d:0a:
                    aa:d1:de:16:cf:7a:44:a8:88:0b:08:0b:82:05:3f:
                    ad:af:bb:b5:9c:7a:0c:0a:fd:59:6c:83:84:53:59:
                    62:d0:b7:77:8d:29:4a:80:51:bf:ce:3d:c4:da:4f:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A7:97:B8:20:AD:99:14:4E:4E:0F:D4:64:B0:EA:B4:94:EB:CB:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F1CFE5EA6B011F19F722DC3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:c6:95:e8:58:2b:f9:13:cb:29:70:f9:9a:7f:e7:f1:76:
         ce:5e:93:86:e8:80:4d:46:db:c9:fb:a3:d0:17:93:cc:fb:c2:
         29:56:f0:9e:a6:c4:fd:66:bd:87:e8:c7:23:d1:69:a6:4d:0d:
         19:73:b1:0b:b8:07:bc:80:e8:46:90:84:14:44:38:92:fc:d1:
         59:cb:ef:31:ec:e3:a8:16:e9:7a:bf:5f:b9:be:12:d8:b6:34:
         b9:9c:5f:51:b5:f4:7c:12:94:13:56:02:4d:16:4d:28:0c:cb:
         e1:63:d8:aa:ff:d3:17:b2:74:96:9d:80:9a:e1:d9:b9:6f:2a:
         e7:99:85:45:d4:15:8f:56:1e:66:31:f0:86:df:ee:f6:57:2c:
         29:8b:59:97:84:b3:af:50:64:8c:09:f6:25:e1:ab:6f:27:78:
         de:8c:b5:5d:a5:8c:45:5d:0d:87:f2:b7:24:16:68:fe:68:e8:
         a2:b1:47:53:71:50:08:b8:c0:8e:81:86:bd:5a:d2:f0:b4:72:
         ab:0a:a7:c4:d5:27:18:35:f8:11:98:30:31:88:ea:c7:dc:b0:
         30:d0:1c:a1:70:3a:96:8d:d7:db:70:c0:5f:9e:c0:df:d5:cc:
         04:bd:9d:a3:2e:83:76:68:26:dd:b3:70:9f:5d:d9:1e:e4:8a:
         f2:be:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----