Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D32C9F2CAD2511F1A6CE3BDDCE1D38B0.roa
File:                     D32C9F2CAD2511F1A6CE3BDDCE1D38B0.roa (raw, json)
Hash identifier:          2pbMsU+hKZn65LIA7yodUrynjdJdr9NeeXk9yc65Tak=
Subject key identifier:   BD:63:70:4C:0E:C9:5C:28:86:E8:23:74:54:78:44:2A:0A:6E:62:7A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D32C9F2CAD2511F1A6CE3BDDCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 14:42:20 +0000
ROA not before:           Thu 10 Sep 2026 14:42:15 +0000
ROA not after:            Sat 10 Oct 2026 14:42:15 +0000
asID:                     139646
IP address blocks:        156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120060 (0x1d4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 14:42:15 2026 GMT
            Not After : Oct 10 14:42:15 2026 GMT
        Subject: CN=6aa2c1cb-413c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:d4:e7:df:68:fa:2d:63:77:f0:bd:70:f6:
                    dd:60:3d:c1:a1:59:c6:65:83:b8:9e:86:ee:b8:10:
                    aa:34:52:9a:3b:ae:41:31:cb:51:d1:7a:26:e1:e5:
                    f6:46:81:0b:61:19:c7:9e:c0:6b:1b:6b:4c:2c:1a:
                    06:76:a9:11:bf:e0:ea:12:65:7b:37:27:73:ec:6e:
                    c0:e7:b2:88:09:43:c5:d1:dc:63:ef:fc:97:d0:53:
                    f8:12:2d:24:4c:08:4a:5f:12:ff:0e:16:b7:31:66:
                    f1:bd:1e:9e:5a:c1:e0:5f:02:3f:c3:52:10:51:40:
                    dd:e0:c7:bb:ef:a9:b6:5e:45:96:57:a7:40:1d:17:
                    68:a9:be:3b:5d:29:a4:05:a4:88:c1:a0:2a:49:1e:
                    11:50:f3:a9:03:cf:47:74:5c:ea:5f:db:69:c8:dc:
                    d4:c2:8a:60:32:ab:f8:d3:bc:76:ad:c2:e5:8e:ff:
                    89:94:d4:81:11:e5:7d:fe:1d:0f:94:38:c9:64:05:
                    14:98:57:77:5d:8b:b5:92:01:db:d0:c8:5a:2c:f5:
                    77:52:fd:43:05:2c:ad:f4:6a:2a:75:a9:66:98:80:
                    29:a3:50:a2:1d:5d:ed:7c:1c:a2:66:9b:7c:9d:e8:
                    5a:dc:c2:1f:06:30:39:06:88:3c:87:52:6a:eb:7c:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:63:70:4C:0E:C9:5C:28:86:E8:23:74:54:78:44:2A:0A:6E:62:7A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D32C9F2CAD2511F1A6CE3BDDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:f2:6f:f2:cb:05:8f:20:0a:d4:3b:8d:92:c6:ed:d3:25:
         06:a8:72:db:54:09:b9:a0:a5:23:e9:5e:81:98:0f:0e:6e:93:
         23:dc:26:0d:69:df:39:15:c7:0c:8b:4d:62:2e:7e:84:b2:a9:
         38:ca:af:51:ff:6b:6a:e0:1e:7d:aa:0c:7a:64:0c:d0:1c:53:
         86:62:3b:2c:ad:ea:1c:ba:aa:9c:42:c1:04:40:4a:d6:d5:57:
         ce:ac:25:f5:ad:ec:a9:d0:3f:57:f4:18:cc:af:6c:27:ad:59:
         cb:76:17:49:24:66:bc:a7:fb:74:6c:53:49:00:22:33:4e:6d:
         07:06:b2:f0:b3:1c:5a:23:92:9a:ab:f8:a5:eb:33:32:a5:25:
         40:a4:a5:04:0e:63:a3:45:cf:9b:ae:95:34:e7:dd:98:5c:46:
         8f:8c:9d:08:b5:eb:8b:7a:56:5a:68:4c:9f:e2:b2:33:df:a9:
         5a:9b:03:6e:a0:a0:22:72:31:b5:34:77:d8:28:65:01:fb:cc:
         6b:62:b1:54:ef:49:87:fc:a7:d2:5b:48:1e:f3:a5:b6:ac:f1:
         e9:1d:fa:3f:fa:7d:37:aa:4f:c6:6f:42:1b:78:94:d3:74:d1:
         f3:a6:38:32:af:49:fe:c3:47:52:6c:8b:1d:81:85:73:18:c3:
         cf:d2:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----