Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/410054D8A8F011F197A102E9CE1D38B0.roa
File:                     410054D8A8F011F197A102E9CE1D38B0.roa (raw, json)
Hash identifier:          o4T48mttYhxUhUoDQkYdHyJYzGn+BM6FSFSUCjEFJw8=
Subject key identifier:   19:FA:A3:75:14:3E:3D:0E:FA:29:AA:86:3E:63:5F:05:FC:DE:FF:42
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D365
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/410054D8A8F011F197A102E9CE1D38B0.roa
Signing time:             Sat 05 Sep 2026 06:08:46 +0000
ROA not before:           Sat 05 Sep 2026 06:08:42 +0000
ROA not after:            Mon 12 Oct 2026 06:08:42 +0000
asID:                     213796
IP address blocks:        156.233.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119653 (0x1d365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  5 06:08:42 2026 GMT
            Not After : Oct 12 06:08:42 2026 GMT
        Subject: CN=6a9bb1ee-a9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:af:3e:4f:a5:4b:8c:d2:38:f6:e6:40:4a:
                    4d:3f:ad:1f:59:70:df:48:26:4c:cc:50:ad:63:2a:
                    ae:67:ca:41:46:30:cb:81:ef:b8:91:0e:2c:ee:8f:
                    08:55:57:fc:72:67:ea:c0:8f:92:96:c7:8f:d8:50:
                    9e:d6:59:fd:14:b9:07:ff:d9:f0:34:05:62:cd:be:
                    fd:2d:3c:03:35:de:9c:29:93:e1:3a:fe:db:e3:11:
                    97:23:0b:82:6e:08:40:f6:4b:f0:b4:b6:cf:13:df:
                    9a:a4:e4:85:19:14:4c:26:27:2b:f6:25:c3:c3:9a:
                    17:bf:1c:29:ae:a2:8f:a3:e8:67:c0:85:ff:62:af:
                    5c:82:5f:72:db:8c:55:06:e1:19:10:77:8e:9a:fd:
                    7a:e7:f3:8e:3c:70:8a:c9:5e:df:45:7d:05:69:0a:
                    ec:1d:db:a4:f9:f6:29:34:ba:e4:8a:b8:c9:5d:1e:
                    ab:86:ef:6e:46:77:70:b7:5d:6f:13:24:a2:d6:01:
                    36:84:15:64:b3:ca:eb:93:30:f1:96:5e:0b:ec:50:
                    a7:b2:10:ca:5c:b0:93:21:85:b0:ef:67:8f:d5:bb:
                    bf:7b:e7:46:ea:ca:a1:64:41:53:65:50:a8:73:d7:
                    82:5c:9e:2c:c1:a7:81:dc:e0:4a:87:4f:39:11:eb:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FA:A3:75:14:3E:3D:0E:FA:29:AA:86:3E:63:5F:05:FC:DE:FF:42
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/410054D8A8F011F197A102E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:51:62:b7:f0:a9:3d:5c:27:02:3a:1d:8e:91:fa:33:03:1c:
         64:9a:de:ef:0f:33:1b:a8:fb:ed:2e:98:49:c1:ba:c9:dd:59:
         39:c5:99:8b:c7:d2:c9:e5:19:21:43:7a:07:38:7b:21:6c:1b:
         e8:75:40:6e:34:5f:de:25:be:55:60:00:1f:47:af:c5:76:9e:
         a7:62:8d:ee:6b:f0:c0:3e:ad:34:b1:31:e0:77:0a:63:ff:6a:
         23:67:e7:ea:0c:8c:34:48:81:f1:8e:44:af:79:8c:ed:15:5c:
         36:2a:f2:ee:f8:99:23:62:d9:15:77:d5:fd:8c:05:bf:21:5e:
         66:84:dc:84:4d:43:6a:ce:c3:d2:77:8b:a4:dc:bb:40:42:79:
         77:e4:2f:00:da:76:24:2e:df:9f:19:ae:08:e8:77:96:21:2b:
         ea:99:07:6d:49:0b:19:43:88:ec:8e:dc:3f:a5:20:7a:b0:90:
         f7:33:a4:56:ee:74:4e:f2:bd:84:1d:f2:1f:c4:66:4e:09:d9:
         37:60:31:a3:d3:e4:bb:94:c8:59:32:b1:7b:0a:f9:26:9f:d0:
         12:3b:82:43:70:1b:3f:7d:e1:60:3a:2d:07:40:40:c2:1f:9a:
         80:94:74:5b:e9:e5:1d:a8:d5:68:5b:ab:da:51:48:78:df:71:
         3a:73:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----