Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38B0B894B5BC11F183C271A7CE1D38B0.roa
File:                     38B0B894B5BC11F183C271A7CE1D38B0.roa (raw, json)
Hash identifier:          R8PxQtUpqVAU29qXq3FTA6MjpAW3V1ktqzGHCcziNFI=
Subject key identifier:   97:23:21:AF:E4:7F:F9:A0:C2:16:ED:B7:5F:F2:94:40:2D:1B:F0:18
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38B0B894B5BC11F183C271A7CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 12:59:04 +0000
ROA not before:           Mon 21 Sep 2026 12:59:00 +0000
ROA not after:            Thu 20 Sep 2029 12:59:00 +0000
asID:                     17561
IP address blocks:        156.241.154.0/24 maxlen: 24
                          156.241.155.0/24 maxlen: 24
                          156.241.156.0/24 maxlen: 24
                          156.241.157.0/24 maxlen: 24
                          156.241.158.0/24 maxlen: 24
                          156.241.159.0/24 maxlen: 24
                          156.241.160.0/24 maxlen: 24
                          156.241.161.0/24 maxlen: 24
                          156.241.162.0/24 maxlen: 24
                          156.241.163.0/24 maxlen: 24
                          156.241.184.0/24 maxlen: 24
                          156.241.185.0/24 maxlen: 24
                          156.241.186.0/24 maxlen: 24
                          156.241.187.0/24 maxlen: 24
                          156.241.188.0/24 maxlen: 24
                          156.241.189.0/24 maxlen: 24
                          156.241.190.0/24 maxlen: 24
                          156.241.191.0/24 maxlen: 24
                          156.245.64.0/24 maxlen: 24
                          156.245.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120738 (0x1d7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 12:59:00 2026 GMT
            Not After : Sep 20 12:59:00 2029 GMT
        Subject: CN=6ab12a18-3759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:33:17:01:a2:b4:14:9c:2c:61:4a:40:96:
                    d8:87:7b:1c:a2:8f:0b:d4:08:5e:bb:0b:b8:9b:4a:
                    71:1a:b8:30:44:42:53:3c:6f:78:50:2c:7c:53:6d:
                    f8:30:05:c5:27:fd:cb:30:d9:e5:8a:08:39:bc:9e:
                    65:86:bb:30:c4:8b:1d:4d:ea:3c:de:8c:96:6e:5a:
                    7b:02:6d:ed:cb:94:76:73:3b:03:ab:89:5a:45:26:
                    14:d7:25:4f:99:5a:4f:52:53:73:15:4b:fd:96:ba:
                    4a:9d:4a:ed:8e:fd:a9:eb:48:7d:48:f2:4e:13:a2:
                    83:84:d1:5d:77:76:0b:85:fa:9b:4f:f8:54:d7:f3:
                    f5:08:e5:85:87:90:68:08:2b:49:97:5b:75:3c:7e:
                    e6:de:ce:43:27:6c:93:66:9b:2a:7c:0b:cc:d6:e5:
                    a4:31:ce:d5:6c:d0:66:fe:0e:fb:39:c7:28:65:16:
                    1e:09:c0:03:c8:8c:3d:59:45:af:e0:1f:22:14:07:
                    14:ab:0a:5f:a5:e7:62:68:7c:6e:90:47:ef:fd:d0:
                    c4:85:7c:f0:4e:91:a3:4b:cb:eb:6e:54:12:fb:45:
                    a6:2e:45:75:44:b2:a4:61:7e:70:c2:13:4b:cc:2f:
                    b8:23:91:8b:42:27:51:49:1e:53:13:62:7c:74:42:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:21:AF:E4:7F:F9:A0:C2:16:ED:B7:5F:F2:94:40:2D:1B:F0:18
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38B0B894B5BC11F183C271A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.154.0-156.241.163.255
                  156.241.184.0/21
                  156.245.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:98:56:79:4f:f8:dd:8e:dd:ed:13:ea:3e:e7:ef:8a:24:
         f5:03:b3:25:32:7a:be:dd:b9:8b:40:9f:1b:96:7b:27:85:f2:
         54:78:00:ed:19:0a:c3:13:1a:d5:75:be:a4:d7:db:f7:e2:ef:
         69:01:f6:96:c2:27:74:15:3f:6d:bd:8f:15:67:8d:8f:b7:32:
         02:d5:c0:7d:b1:5d:e3:e1:0e:76:28:bb:6d:b3:3e:6d:5f:62:
         8a:44:82:c0:ac:80:cb:66:9a:ab:3e:7d:a6:38:34:37:15:bc:
         ec:cc:ba:0f:d7:6b:c2:1f:60:f3:5f:29:a0:93:41:bf:7f:e8:
         5f:d6:61:a2:39:68:39:06:50:cb:42:b2:8b:d1:50:d1:b5:4f:
         4e:35:7f:25:05:0c:09:54:2a:34:07:ac:bf:a6:fa:96:c1:15:
         f9:ff:7c:3c:1d:f4:7d:7f:f1:b1:f5:71:9d:ae:42:af:e4:42:
         2d:9b:e5:8d:e6:c0:33:81:93:43:fd:ff:db:5f:70:dd:6e:5d:
         b5:e3:e7:66:95:f7:c3:a0:92:c8:6b:ef:37:f6:a9:d5:9e:4e:
         8e:69:5c:fb:e8:e9:63:cd:40:62:a6:0e:57:23:a2:23:40:67:
         7a:0e:3d:35:6f:a1:26:1f:f2:0f:23:fd:33:82:a5:86:4f:2e:
         73:ff:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----