Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BF4F9DADFFB11F1A548CAC3CE1D38B0.roa
File:                     7BF4F9DADFFB11F1A548CAC3CE1D38B0.roa (raw, json)
Hash identifier:          HrZS+9FbbThXm1+rCVk5tKX812zekapkqLaUPuduQdE=
Subject key identifier:   F7:93:27:31:9D:C9:27:8C:07:F5:01:01:2D:2D:D9:91:EB:73:91:34
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E565
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BF4F9DADFFB11F1A548CAC3CE1D38B0.roa
Signing time:             Sat 14 Nov 2026 07:17:44 +0000
ROA not before:           Sat 14 Nov 2026 07:17:39 +0000
ROA not after:            Tue 24 Nov 2026 07:17:39 +0000
asID:                     136809
IP address blocks:        156.236.9.0/24 maxlen: 24 (superfluous maxlen)
                          156.236.24.0/23 maxlen: 24
                          156.236.26.0/23 maxlen: 24
                          156.249.171.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124261 (0x1e565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 14 07:17:39 2026 GMT
            Not After : Nov 24 07:17:39 2026 GMT
        Subject: CN=6af80b18-31a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:11:84:b2:1e:1c:cd:ba:00:11:1d:31:3e:
                    ad:1a:8d:b0:81:01:65:ae:7d:97:c0:2e:d3:9c:b0:
                    8c:e6:75:eb:a9:7f:36:9a:ca:b6:86:79:6f:7f:36:
                    9e:f8:8d:21:79:dd:a1:f9:c9:f2:e9:48:b8:16:72:
                    06:7e:fd:f8:0f:06:c4:ca:39:dd:e5:ff:07:ca:dd:
                    5b:e8:b4:1a:cd:f7:af:46:b0:74:b4:18:1d:6d:74:
                    f9:58:af:cc:df:59:ba:95:f3:b3:6d:32:b1:05:b0:
                    92:73:a1:19:94:0e:8c:2d:5e:9a:49:59:35:69:64:
                    3d:7a:15:d0:c1:b0:35:58:aa:bd:92:bf:d7:4b:1d:
                    55:31:e3:4f:cf:2c:2a:54:17:a4:dc:37:55:3a:08:
                    9c:d8:be:a7:cc:38:62:a8:aa:04:60:7d:26:74:f0:
                    b6:59:86:e8:66:83:01:2d:71:07:75:8d:2c:b7:4b:
                    4e:c6:bc:f1:5e:b1:26:0f:1e:e4:d0:cd:b3:66:27:
                    3b:ae:c1:f2:94:b0:d0:d5:86:40:0e:a2:01:aa:8e:
                    7e:7e:05:1f:5f:32:f2:4c:25:91:b9:88:6d:26:dd:
                    02:c9:30:63:fb:9a:bf:49:54:5a:19:1f:3b:3a:dc:
                    5f:84:d0:16:8b:a1:82:e9:97:0e:db:f4:16:d6:da:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:27:31:9D:C9:27:8C:07:F5:01:01:2D:2D:D9:91:EB:73:91:34
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BF4F9DADFFB11F1A548CAC3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.9.0/24
                  156.236.24.0/22
                  156.249.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:d8:2c:68:d4:00:a9:4a:58:19:f2:83:a6:87:3c:f3:b6:
         45:08:b8:24:43:ef:34:f0:e5:aa:23:29:af:4c:fd:db:86:68:
         15:41:30:1f:b5:2f:de:ca:dd:40:3b:53:29:a5:5b:93:e6:ce:
         90:eb:f2:14:65:bd:38:05:d2:0f:cd:99:35:6d:3b:27:a8:bc:
         7e:6b:74:d2:30:85:fb:22:23:00:06:14:f6:a4:07:09:fa:1d:
         ca:32:a6:f5:f9:bc:2f:51:96:21:44:ab:22:1b:94:9a:21:fb:
         0e:fa:d5:e3:2e:13:da:57:d7:bd:43:08:73:66:49:6a:85:18:
         ff:b9:42:3f:a7:e3:29:d9:cc:ab:b8:7a:ba:fa:8e:71:38:65:
         e2:21:ed:80:f1:d9:67:ff:c5:ea:42:25:5c:50:e4:a2:bc:ed:
         b0:89:61:e6:50:02:d8:a9:b3:e2:d0:de:b9:be:eb:c9:09:04:
         52:f4:bc:9e:f6:f1:90:cf:20:d9:34:d9:c0:2f:f5:17:3a:96:
         95:48:f5:a3:78:72:c6:90:88:85:c1:19:de:c0:ee:15:b5:b1:
         74:6d:b0:2d:eb:29:b3:4f:63:b4:a6:47:da:dc:a4:c1:43:76:
         eb:be:ab:b7:d7:6f:12:4a:11:fd:7f:12:0c:9c:82:19:3a:90:
         f5:3a:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----