Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A02B7B8AC1D11F19C3962A3CE1D38B0.roa
File:                     8A02B7B8AC1D11F19C3962A3CE1D38B0.roa (raw, json)
Hash identifier:          /C4XrH+XJStCXd1YvoKWTcIpHEQDFWh1B+W6JR3LB+Y=
Subject key identifier:   BA:B3:B2:62:B1:1C:56:3A:96:83:7B:5A:EA:27:88:C7:19:CD:77:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D43F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A02B7B8AC1D11F19C3962A3CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:10:30 +0000
ROA not before:           Wed 09 Sep 2026 07:10:26 +0000
ROA not after:            Thu 22 Apr 2027 07:10:26 +0000
asID:                     136222
IP address blocks:        156.226.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119871 (0x1d43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 07:10:26 2026 GMT
            Not After : Apr 22 07:10:26 2027 GMT
        Subject: CN=6aa10666-383b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:1b:ea:3f:ba:f3:48:77:60:40:a1:15:5f:
                    1d:22:0f:08:ed:92:7b:47:6a:d4:0f:45:ed:61:3e:
                    ca:20:51:37:a0:f7:3e:01:0c:21:12:c7:5d:a7:21:
                    4c:05:74:34:8c:4b:4b:5c:98:0c:bf:f4:d8:59:cb:
                    b2:a4:62:f8:69:ae:9d:13:04:8a:4c:a4:ad:e4:d6:
                    13:d5:c3:97:74:3c:56:ee:58:54:f5:ee:07:06:d6:
                    7e:e2:79:41:fb:0c:fa:b0:9d:19:5e:ab:de:8b:03:
                    b8:a4:41:47:f8:ca:47:50:94:7e:19:07:63:fd:cb:
                    06:c9:05:4b:a7:fd:e5:8f:ad:06:1d:10:cb:2c:5a:
                    bc:ef:5d:e7:87:03:6f:4e:2c:1b:4c:5f:bb:34:9f:
                    c0:28:00:a2:39:e8:6c:01:a7:99:47:58:66:2b:7f:
                    c0:14:5c:96:52:e3:e7:dc:d8:90:a2:a2:a1:0b:6f:
                    65:4b:a8:bf:12:50:49:9c:25:39:6a:f4:f2:26:aa:
                    70:77:34:5e:f9:b9:cf:02:c5:91:af:56:6e:5a:96:
                    c4:9a:99:b1:dc:04:a9:5f:5c:af:a6:8e:95:a1:36:
                    50:94:44:c2:3c:eb:3d:7b:db:2d:e7:7e:5f:d4:18:
                    ab:2f:99:75:3a:00:a3:e5:e9:99:c6:a2:08:3a:f2:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B3:B2:62:B1:1C:56:3A:96:83:7B:5A:EA:27:88:C7:19:CD:77:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A02B7B8AC1D11F19C3962A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:2e:68:c5:ea:f0:e5:2f:13:ce:1d:d6:4f:40:e8:98:26:95:
         21:c6:50:6a:bd:9e:5a:1c:d2:1f:26:c1:b9:6b:04:80:1d:55:
         85:c7:26:bd:e7:b0:ad:9b:74:51:6b:bc:16:f3:87:4f:b2:df:
         41:fb:0c:c8:31:5d:d4:e4:8b:fb:b8:d4:6e:bb:21:1b:44:af:
         a0:e2:1b:c6:87:a3:aa:d5:5c:97:c3:d2:ee:03:74:d3:dd:cf:
         5b:73:7a:b7:dc:9a:51:d0:9b:16:55:5f:c5:1b:42:bd:c4:10:
         a8:0a:8d:e6:4c:52:06:b1:0d:1f:bc:bd:66:82:95:82:1e:01:
         42:40:f0:c9:e7:d4:76:26:06:6f:2d:eb:a1:14:a9:49:85:3b:
         c4:ed:13:65:65:0f:6d:be:d5:b8:6a:93:d5:e5:e1:0d:cb:ae:
         37:1b:c4:05:4d:4a:f2:5f:13:14:d4:58:02:3f:d2:02:61:69:
         08:53:36:0a:fc:55:26:d4:97:23:6f:3d:db:0b:8b:b0:88:5a:
         33:30:0a:ac:df:60:e4:74:13:0f:29:c1:1d:a0:0b:3d:74:6f:
         89:6c:dc:41:09:ed:8e:90:4f:30:31:0e:01:9e:1d:9a:90:6c:
         a1:eb:41:99:d6:cf:7e:35:1a:d8:d1:7d:7e:97:d5:af:68:69:
         21:e7:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----