Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA77664DF8A11F1A2F80ED1CE1D38B0.roa
File:                     9DA77664DF8A11F1A2F80ED1CE1D38B0.roa (raw, json)
Hash identifier:          Z1ly0HRH5j2RyjSEAgC08j3fdq3nXWJVVxnr3OHOcdM=
Subject key identifier:   12:D7:47:FE:7A:A9:D3:45:36:09:F7:C2:40:B2:D6:E3:D8:BE:DB:E4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E4F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA77664DF8A11F1A2F80ED1CE1D38B0.roa
Signing time:             Fri 13 Nov 2026 17:49:47 +0000
ROA not before:           Fri 13 Nov 2026 17:49:42 +0000
ROA not after:            Thu 17 Dec 2026 17:49:42 +0000
asID:                     22773
IP address blocks:        156.238.142.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.143.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.145.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.146.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.147.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.148.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.149.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.150.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.151.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.152.0/24 maxlen: 24 (superfluous maxlen)
                          156.238.189.0/24 maxlen: 24 (superfluous maxlen)
                          156.239.56.0/24 maxlen: 24 (superfluous maxlen)
                          156.242.0.0/24 maxlen: 24 (superfluous maxlen)
                          156.242.1.0/24 maxlen: 24 (superfluous maxlen)
                          156.242.23.0/24 maxlen: 24 (superfluous maxlen)
                          156.242.28.0/24 maxlen: 24 (superfluous maxlen)
                          156.242.29.0/24 maxlen: 24 (superfluous maxlen)
                          156.242.30.0/24 maxlen: 24 (superfluous maxlen)
                          156.242.31.0/24 maxlen: 24 (superfluous maxlen)
                          156.242.48.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124144 (0x1e4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 13 17:49:42 2026 GMT
            Not After : Dec 17 17:49:42 2026 GMT
        Subject: CN=6af74dbb-4934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:a1:3d:32:d0:64:28:71:12:e8:e2:75:32:
                    69:e7:fe:27:92:bf:e0:7c:20:e5:35:c4:de:45:b0:
                    7a:f4:62:5a:bf:68:0b:9a:66:9b:d4:a5:49:c6:d6:
                    d6:28:80:3f:20:4e:54:99:07:86:88:0e:4b:23:2a:
                    d4:4a:44:43:5a:06:6d:b6:a2:1a:91:04:b1:ae:4e:
                    11:51:fb:0b:c6:fa:83:b4:19:13:ca:8f:3b:0d:d5:
                    27:58:5f:67:c0:80:73:97:a8:48:f2:ef:7d:39:a3:
                    da:24:f9:a4:05:b7:ef:84:57:5c:97:55:d5:6d:dd:
                    2a:58:90:b0:a1:1a:df:6b:9e:48:df:76:60:3f:05:
                    5b:27:5f:8a:75:c3:88:59:5f:50:01:0b:95:b7:ca:
                    3d:82:f5:d0:e2:4b:f6:49:0b:1b:9f:61:12:41:28:
                    7e:4c:fe:c2:5f:6e:16:1a:63:1c:96:95:89:0d:56:
                    bb:9d:b5:e5:2b:20:07:15:68:e0:5c:bb:6f:48:5c:
                    5f:ec:ad:37:96:a2:60:65:bd:7c:92:33:94:76:8a:
                    0d:1e:f7:57:30:0a:94:7b:75:40:d0:71:9d:d2:ff:
                    8b:dd:78:6f:bb:1e:f4:41:1f:e4:4b:ac:ed:68:3b:
                    2c:fd:0a:a9:6e:c0:a7:37:73:36:a6:54:9c:43:af:
                    6c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D7:47:FE:7A:A9:D3:45:36:09:F7:C2:40:B2:D6:E3:D8:BE:DB:E4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA77664DF8A11F1A2F80ED1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.142.0/23
                  156.238.145.0-156.238.152.255
                  156.238.189.0/24
                  156.239.56.0/24
                  156.242.0.0/23
                  156.242.23.0/24
                  156.242.28.0/22
                  156.242.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:38:e2:00:e1:ed:5b:88:43:8d:9a:14:8b:a1:0f:01:8d:8e:
         16:3f:bc:07:55:71:f6:59:ae:98:d3:e1:a4:c8:d6:6b:ab:a3:
         78:6f:4c:ef:23:94:c3:81:b4:61:c0:f3:c5:c2:d5:bd:4f:71:
         6d:a9:c2:7b:ac:d4:73:72:ae:5c:c7:ab:04:30:a1:52:c1:22:
         fd:31:8d:54:ed:19:83:2a:af:57:27:1d:c8:e7:46:2b:24:6c:
         89:07:95:3e:6a:e8:40:7a:d2:2e:a2:d0:ec:8d:a1:c1:cc:d8:
         be:77:7c:2c:fe:af:1c:5c:e7:b3:6e:9f:1c:79:c8:ca:83:7b:
         f1:ff:83:54:e6:a5:a3:31:84:1a:f5:d8:52:91:2a:5a:eb:35:
         97:2a:bd:6c:36:c9:4d:03:08:78:35:52:31:0c:86:5f:69:02:
         52:f1:48:4e:2a:ab:1b:74:f9:48:77:28:6d:85:69:35:e0:04:
         f7:5b:2c:d6:b9:1e:07:20:ad:ff:c1:0d:8d:9b:bb:52:63:67:
         c0:ae:63:75:73:00:08:df:4b:f3:a9:b6:e8:8a:43:d8:0d:62:
         c9:17:e5:ed:48:26:f6:a7:84:69:dc:fe:d5:6a:ba:7f:43:dc:
         d0:b2:61:99:28:c5:ef:15:07:48:d1:45:0f:32:0b:6c:2b:b3:
         3f:29:97:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----