Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82DD4A74B4ED11F1A75B02E0CE1D38B0.roa
File:                     82DD4A74B4ED11F1A75B02E0CE1D38B0.roa (raw, json)
Hash identifier:          0JdVRC73S+ufPEO25za/JUc4fuMLyLVAFbQUhOOKltQ=
Subject key identifier:   A0:BF:C7:05:CE:39:78:D3:EF:91:EB:A8:A2:A2:03:E3:8F:A3:D6:41
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D728
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82DD4A74B4ED11F1A75B02E0CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 12:19:22 +0000
ROA not before:           Sun 20 Sep 2026 12:19:18 +0000
ROA not after:            Wed 28 Oct 2026 12:19:18 +0000
asID:                     401362
IP address blocks:        156.252.72.0/24 maxlen: 24
                          156.252.73.0/24 maxlen: 24
                          156.252.74.0/24 maxlen: 24
                          156.252.75.0/24 maxlen: 24
                          156.252.76.0/24 maxlen: 24
                          156.252.77.0/24 maxlen: 24
                          156.252.78.0/24 maxlen: 24
                          156.252.79.0/24 maxlen: 24
                          156.252.80.0/24 maxlen: 24
                          156.252.81.0/24 maxlen: 24
                          156.252.83.0/24 maxlen: 24
                          156.252.84.0/24 maxlen: 24
                          156.252.85.0/24 maxlen: 24
                          156.252.86.0/24 maxlen: 24
                          156.252.87.0/24 maxlen: 24
                          156.252.88.0/24 maxlen: 24
                          156.252.89.0/24 maxlen: 24
                          156.252.90.0/24 maxlen: 24
                          156.252.91.0/24 maxlen: 24
                          156.252.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120616 (0x1d728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 12:19:18 2026 GMT
            Not After : Oct 28 12:19:18 2026 GMT
        Subject: CN=6aafcf4a-845e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ec:c3:65:fc:93:a0:80:ff:73:e7:aa:cb:e9:
                    41:2f:50:22:18:9a:f0:c8:87:f9:27:19:76:93:04:
                    b4:9c:5b:c3:35:00:ab:50:27:4e:f7:38:04:7e:13:
                    bb:ea:18:a9:4e:05:1c:fe:f2:d5:78:3a:f8:e1:36:
                    c7:0f:8c:f4:27:67:bd:1f:76:62:42:1f:bc:a6:c7:
                    c5:4d:aa:6b:cc:05:9a:6e:68:04:59:04:01:a8:55:
                    5b:8a:21:ec:c7:81:9c:eb:d4:c9:23:80:07:f6:bb:
                    a9:ed:c3:bf:48:ba:ad:cc:dd:93:fe:53:15:f5:d0:
                    36:f7:de:8b:7d:6e:ba:db:bf:3d:50:e3:6f:73:f5:
                    f6:81:94:65:71:f7:2b:d3:bb:52:7b:d8:d5:7f:ea:
                    84:03:9d:fc:08:bf:71:e4:cd:3f:79:64:48:00:c7:
                    62:55:ec:0f:fd:61:1f:4b:4b:df:84:ac:64:52:b1:
                    47:d4:96:46:8f:2b:ce:f1:ab:34:2c:86:ee:28:09:
                    03:62:14:37:39:4d:26:cb:1a:99:3b:c5:f2:45:a7:
                    ff:f8:02:9e:13:88:aa:e1:25:82:7a:7b:7e:e0:94:
                    41:56:e5:8a:35:56:5c:54:12:25:6e:ca:6b:3b:43:
                    e2:6e:40:5f:56:8e:c8:ea:93:e4:0f:27:70:31:91:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BF:C7:05:CE:39:78:D3:EF:91:EB:A8:A2:A2:03:E3:8F:A3:D6:41
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82DD4A74B4ED11F1A75B02E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.72.0-156.252.81.255
                  156.252.83.0-156.252.92.255

    Signature Algorithm: sha256WithRSAEncryption
         b9:e3:97:cf:f9:82:0a:25:ee:f4:84:3b:03:4d:77:ad:d3:b3:
         96:38:87:4b:5f:69:20:bb:ee:48:c3:4d:fb:ea:14:69:38:37:
         e8:ba:13:0b:66:05:c6:1c:3f:0c:00:b9:93:83:2f:76:d8:90:
         8e:17:c8:54:34:ab:70:ba:72:88:4e:c1:5b:09:ee:a4:f8:2a:
         e1:c0:06:e9:df:35:28:b4:d9:8b:3d:36:91:e4:2e:b8:07:76:
         bb:ea:1d:5a:91:b5:3f:b5:d2:79:83:1c:86:06:7c:03:eb:42:
         cc:cd:23:ab:ee:09:b9:d0:7a:7b:21:d0:f0:3f:8c:0f:d8:2f:
         f5:86:f6:18:0c:c1:f9:68:3d:7e:dc:ec:b6:17:43:df:34:31:
         83:16:07:f3:4b:e2:aa:41:9e:9a:e1:59:af:2e:02:02:94:72:
         4c:9f:69:ea:fc:86:52:4a:2a:6e:b7:f0:f7:83:fa:70:a1:17:
         72:c1:ca:f7:f9:68:ad:3c:ac:05:5d:7f:7e:e1:60:80:ae:0d:
         ab:e2:85:b6:65:55:0d:e7:de:a3:1d:3d:4f:d6:4e:f3:ba:e8:
         a1:7d:07:41:10:02:5f:55:ca:bd:ce:37:49:45:e6:f5:9a:e4:
         cd:d9:34:e4:9f:55:ac:51:0a:51:47:f4:91:95:22:1e:bc:b9:
         a4:28:90:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----