Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E6818AB4CA11F183E6EF01CF1D38B0.roa
File:                     54E6818AB4CA11F183E6EF01CF1D38B0.roa (raw, json)
Hash identifier:          wyVgbFBSMH+v8JvAASwZUI5vVo/jw1pYy7DnuYVGPkc=
Subject key identifier:   A8:1B:43:9D:50:C2:08:76:C8:7D:AA:D2:18:E6:48:69:37:56:25:8A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D714
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E6818AB4CA11F183E6EF01CF1D38B0.roa
Signing time:             Sun 20 Sep 2026 08:07:33 +0000
ROA not before:           Sun 20 Sep 2026 08:07:29 +0000
ROA not after:            Sat 24 Oct 2026 08:07:29 +0000
asID:                     8796
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
                          156.239.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120596 (0x1d714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 08:07:29 2026 GMT
            Not After : Oct 24 08:07:29 2026 GMT
        Subject: CN=6aaf9445-752a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:b8:a6:30:5d:fc:ed:8c:da:48:7d:1f:a3:
                    11:24:4d:c1:5b:d2:7c:7a:40:b1:49:37:52:93:d4:
                    3f:72:7c:90:87:7a:7c:5e:7a:fd:69:6b:66:8b:5a:
                    b4:6a:24:8c:a1:71:34:3d:0f:ca:8e:2d:e4:65:37:
                    17:f8:5d:9f:80:00:51:31:82:0c:9d:52:cb:43:c2:
                    8f:b8:56:43:1d:09:98:be:93:bc:33:cc:d9:f7:ff:
                    c7:cf:f8:12:b6:9a:93:3d:57:69:40:07:b7:f4:08:
                    e6:36:37:9b:ff:8d:ba:ed:24:2c:b2:ee:b9:52:a5:
                    79:72:2c:0c:dd:0b:66:4d:fb:be:0e:1a:fd:68:f9:
                    c8:cc:91:dd:1e:09:4c:1c:fc:cc:95:e5:2a:4e:2b:
                    97:1c:8f:b5:66:70:01:d4:71:ad:6d:ad:71:fc:4e:
                    83:dd:14:fa:89:2d:c7:56:4f:86:18:77:ac:9c:c7:
                    1d:6e:84:ba:25:1a:0c:13:7d:75:08:07:4e:d6:dc:
                    d2:06:0c:cf:46:60:80:96:78:60:22:6b:6c:8b:25:
                    74:77:5e:8c:ff:6e:61:bf:10:92:d2:c0:3b:81:35:
                    e3:15:6c:3e:48:6f:ea:b0:f4:72:9f:86:a6:cf:2a:
                    35:f8:b7:ad:8e:42:43:d7:db:d4:2d:d6:9d:c6:e9:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1B:43:9D:50:C2:08:76:C8:7D:AA:D2:18:E6:48:69:37:56:25:8A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E6818AB4CA11F183E6EF01CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.53.255

    Signature Algorithm: sha256WithRSAEncryption
         0f:ae:94:a2:c9:f1:07:02:53:dc:1c:a7:5e:d0:59:b7:58:9f:
         d5:f7:7d:82:df:53:c7:5f:f9:bb:b7:84:57:1d:73:bd:47:48:
         fd:cb:59:36:e0:0e:e1:15:66:1a:e7:f7:56:1f:29:b9:f3:a9:
         87:68:2e:b5:72:f2:32:32:78:f2:0e:16:f1:f9:87:37:63:ed:
         cf:bd:07:8f:88:34:6a:a7:59:d3:c7:e2:07:69:6e:44:20:c2:
         fb:e7:72:1c:1e:31:f0:4e:95:e8:53:ce:e3:f6:af:c1:7c:de:
         f2:94:7f:cf:11:de:b1:78:fd:49:2e:7a:17:cf:1d:81:c5:5a:
         72:62:db:29:61:c3:14:07:1c:6a:02:0d:02:bd:b5:87:f9:7f:
         96:28:33:a5:05:47:ce:2c:4f:06:ac:f9:4d:c2:ce:98:11:4f:
         9a:de:eb:5c:66:52:7d:71:78:ee:49:15:3c:de:93:b2:90:10:
         af:21:61:0d:85:fb:4e:ba:02:8b:ba:66:23:09:d4:e7:c2:af:
         9c:73:12:a5:cc:eb:37:f4:9e:de:5e:cb:bd:e9:67:09:5f:51:
         db:9d:a2:bd:90:6b:bc:18:ff:f0:0e:18:35:db:2d:f4:05:05:
         ed:e7:49:14:e6:1e:e3:4e:c8:67:41:0d:28:c9:e5:eb:55:82:
         ea:a8:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----