Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D0CA83AB59E11F1860318E5CE1D38B0.roa
File:                     3D0CA83AB59E11F1860318E5CE1D38B0.roa (raw, json)
Hash identifier:          hI04Qqh/1cCg3uIUWbacHZeALqC1bwvdahUlabm2qms=
Subject key identifier:   C5:84:88:CC:39:08:D3:12:08:6A:1B:95:9E:FC:CB:1A:83:F6:EB:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D78E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D0CA83AB59E11F1860318E5CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 09:24:26 +0000
ROA not before:           Mon 21 Sep 2026 09:24:22 +0000
ROA not after:            Mon 26 Oct 2026 09:24:22 +0000
asID:                     141511
IP address blocks:        156.252.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 18:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120718 (0x1d78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 09:24:22 2026 GMT
            Not After : Oct 26 09:24:22 2026 GMT
        Subject: CN=6ab0f7ca-0131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:0e:a7:60:23:5f:07:10:d5:db:fd:8e:05:
                    9d:d2:69:1a:39:1a:b9:e1:85:3b:26:c6:f2:8f:87:
                    5f:ac:ac:05:8f:cb:69:3f:c4:58:85:55:e7:0a:3a:
                    7f:5c:24:f2:fb:d0:bc:d2:dd:c7:37:03:41:49:4d:
                    be:7b:ab:f7:a7:96:b4:aa:72:96:68:e2:d7:97:12:
                    16:c2:f6:68:6b:8d:0c:27:bf:9a:0a:2c:07:99:4d:
                    71:c6:33:a5:f8:76:39:d1:80:55:19:a0:34:f8:4a:
                    42:70:b2:0c:43:d3:6f:dc:83:ec:ca:c0:44:64:dd:
                    ee:1d:ce:8a:86:26:8b:01:c4:4b:63:fb:c6:d1:8f:
                    b2:aa:c4:b2:04:73:e0:c9:c5:a3:cb:5a:95:6b:73:
                    7c:09:33:96:cd:3c:f1:4e:ef:24:96:b7:0d:a0:be:
                    2c:36:57:18:52:ed:7e:11:7b:2e:6c:80:04:aa:48:
                    8d:a7:43:bc:34:6f:59:35:f3:c4:4e:a8:d7:91:bc:
                    df:f8:68:7f:5f:52:f6:3b:03:70:21:f0:3a:c7:16:
                    0c:75:99:c1:32:54:0a:26:8f:46:f2:94:f8:4c:b7:
                    49:11:47:42:18:f5:75:ae:a8:5b:3f:4b:29:fb:95:
                    6b:9c:5c:52:a4:89:81:b7:2a:d4:88:8c:7f:1a:bc:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:84:88:CC:39:08:D3:12:08:6A:1B:95:9E:FC:CB:1A:83:F6:EB:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D0CA83AB59E11F1860318E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:68:59:29:3b:74:df:6d:62:3b:14:d8:05:7e:f4:50:94:06:
         06:09:5e:c4:b5:e0:85:cb:e4:17:1d:45:ff:ef:f3:e0:40:f3:
         88:83:5e:0e:5c:20:43:49:33:32:86:9d:00:b7:72:5e:0f:5f:
         fc:c0:c2:21:85:6b:d2:b9:ac:ef:54:0a:f9:15:72:e7:56:00:
         10:ff:2b:9e:5e:7d:c3:4f:e1:78:f1:d4:48:b7:9b:3c:42:17:
         36:8d:35:89:38:cf:dc:98:29:94:eb:1a:72:3b:c5:81:84:6f:
         34:34:02:b7:d8:a3:f8:79:2c:f7:b1:05:d7:6d:47:be:ba:cb:
         f3:00:25:23:66:df:3b:ae:a0:ce:25:50:55:df:24:1f:16:7b:
         ba:50:81:d2:7b:b6:c9:7d:70:13:5c:fb:2c:14:f3:7f:94:b2:
         23:53:f3:e4:f6:b8:7f:3d:6c:3d:2f:65:21:25:70:0b:4a:e5:
         c8:73:e2:09:62:8f:bd:10:a6:af:b4:61:a2:12:41:57:8f:6a:
         7c:a5:0f:12:f6:02:0b:8f:35:34:ac:d0:df:64:2a:2b:e3:74:
         75:45:8f:57:41:59:ae:d2:a3:f1:46:6f:24:5b:2f:a7:79:5f:
         1f:81:20:a2:2d:76:c3:c8:9f:f8:b9:cc:a4:ed:67:15:ee:95:
         31:4c:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----