Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F69D54AB50511F1AB533AF7CE1D38B0.roa
File:                     5F69D54AB50511F1AB533AF7CE1D38B0.roa (raw, json)
Hash identifier:          qEMdhMp4gcBKvFPgQsvogekgmMM4eeveU+8554uXXVo=
Subject key identifier:   8B:B6:CE:DF:DB:B7:71:06:F6:24:A6:41:98:FF:B0:23:14:44:2F:CD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D732
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F69D54AB50511F1AB533AF7CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 15:10:11 +0000
ROA not before:           Sun 20 Sep 2026 15:10:07 +0000
ROA not after:            Tue 27 Oct 2026 15:10:07 +0000
asID:                     401362
IP address blocks:        156.252.93.0/24 maxlen: 24
                          156.252.94.0/24 maxlen: 24
                          156.252.95.0/24 maxlen: 24
                          156.252.144.0/24 maxlen: 24
                          156.252.145.0/24 maxlen: 24
                          156.252.146.0/24 maxlen: 24
                          156.252.147.0/24 maxlen: 24
                          156.252.148.0/24 maxlen: 24
                          156.252.149.0/24 maxlen: 24
                          156.252.150.0/24 maxlen: 24
                          156.252.151.0/24 maxlen: 24
                          156.252.152.0/24 maxlen: 24
                          156.252.153.0/24 maxlen: 24
                          156.252.154.0/24 maxlen: 24
                          156.252.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120626 (0x1d732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 15:10:07 2026 GMT
            Not After : Oct 27 15:10:07 2026 GMT
        Subject: CN=6aaff753-a3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:92:89:85:1d:70:21:1b:8f:25:82:2e:64:
                    e8:89:90:ec:58:05:2b:34:76:96:bc:a2:a9:2f:65:
                    39:43:93:5d:8d:0d:dd:6e:97:92:39:11:7d:04:00:
                    c4:18:41:f7:b2:1a:c8:20:b1:48:1e:96:95:f7:d1:
                    94:d2:29:0b:a3:d8:57:05:23:f1:1b:26:0a:d9:61:
                    b2:91:c3:b0:e4:91:e0:3c:68:52:0b:7e:23:41:e5:
                    77:48:82:10:0f:49:96:08:fe:3f:72:60:a7:27:a2:
                    45:b8:70:4f:fe:86:d7:d4:10:ba:45:4e:76:be:99:
                    9e:77:55:d8:b2:fb:20:94:bb:4f:a4:db:ae:58:7e:
                    3e:ba:89:f7:1d:ff:e5:1b:13:0c:c8:ee:43:30:97:
                    3a:44:9a:f9:ba:45:5f:87:62:69:77:ac:0f:8b:5d:
                    24:a5:4a:3b:7c:a4:a8:0f:eb:4c:f6:f4:99:03:3a:
                    68:4f:96:d7:89:76:fd:17:f1:f7:77:78:cb:c1:f3:
                    68:b7:5e:8f:bc:e0:5e:8e:e8:c4:ed:a3:5c:12:57:
                    6e:14:00:bb:62:05:a5:6a:c3:44:2a:c9:64:e0:56:
                    0f:26:97:51:84:9f:72:a5:2b:c8:37:72:3e:0c:55:
                    1f:ee:39:2c:81:6f:ca:cb:7a:74:1b:db:35:18:82:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B6:CE:DF:DB:B7:71:06:F6:24:A6:41:98:FF:B0:23:14:44:2F:CD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F69D54AB50511F1AB533AF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.93.0-156.252.95.255
                  156.252.144.0-156.252.155.255

    Signature Algorithm: sha256WithRSAEncryption
         98:40:d0:95:f5:3f:e2:f5:ec:b9:3f:00:78:4d:4a:d3:bb:45:
         a8:0a:33:0a:a4:f5:b4:ef:ac:6a:2c:0d:55:03:e4:ab:c9:1c:
         0d:51:bf:c9:72:1f:49:0a:0d:74:21:0a:e1:6b:14:7b:65:39:
         c8:c0:c0:7e:f3:f2:dd:96:c2:53:70:52:d2:8b:90:56:07:ad:
         3e:66:ed:ef:77:73:51:0e:b4:73:ce:15:37:b3:e5:e3:c8:34:
         43:d6:ed:f7:2f:10:dd:b6:6d:4f:8d:2a:64:4b:94:d6:d3:7b:
         49:2b:e6:27:84:ed:68:ec:c9:3c:56:60:e0:16:0f:fa:44:ca:
         f5:05:8d:58:33:0e:cb:26:55:08:ff:51:91:42:c8:2a:e0:8c:
         56:2d:ba:1d:ac:7a:c6:27:4d:a6:1f:fa:c1:f2:54:e6:c8:44:
         f9:ad:4a:c8:0d:86:81:1a:6e:d0:89:af:b7:69:f0:37:9e:7e:
         3d:34:c6:96:ca:54:e5:40:bb:7f:ee:f8:69:11:d4:9e:c2:9f:
         89:00:2c:b3:a7:0f:f0:44:a1:8e:76:aa:1b:76:f3:81:e0:13:
         83:f4:49:ab:c3:40:38:cf:d1:11:b1:1a:0d:cb:6a:70:fd:d2:
         0d:74:75:af:42:1d:9c:03:19:1c:2c:2e:62:c9:ef:78:3d:7e:
         20:19:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----