Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D365D9D6B59A11F19BAB61CFCE1D38B0.roa
File:                     D365D9D6B59A11F19BAB61CFCE1D38B0.roa (raw, json)
Hash identifier:          BSX5vo6eoC7kR7cug/Z8coCsPhsgDzQSCzMuBbUQ4Gg=
Subject key identifier:   52:71:8F:0C:68:95:15:26:91:2B:34:EC:81:ED:E4:F3:4C:A5:CF:1D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D786
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D365D9D6B59A11F19BAB61CFCE1D38B0.roa
Signing time:             Mon 21 Sep 2026 09:00:00 +0000
ROA not before:           Mon 21 Sep 2026 08:59:56 +0000
ROA not after:            Thu 12 Nov 2026 08:59:56 +0000
asID:                     140925
IP address blocks:        156.238.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120710 (0x1d786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 08:59:56 2026 GMT
            Not After : Nov 12 08:59:56 2026 GMT
        Subject: CN=6ab0f210-3431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:a4:d5:07:b1:73:2f:32:e4:91:e9:49:e9:
                    91:80:09:64:d9:3b:28:a9:9e:a1:7f:e6:c3:f0:d7:
                    99:d0:91:dd:ad:e6:ed:48:e7:6c:4e:c4:06:dc:48:
                    ec:fc:4b:ba:30:21:5e:b0:ba:11:29:c3:60:f7:58:
                    11:18:5a:30:67:6a:63:54:d1:5c:9b:63:ea:39:19:
                    e4:ec:61:bb:40:6e:16:68:18:02:5c:82:90:f3:d2:
                    e6:d2:4d:0f:a0:6b:66:db:3e:3e:4d:8e:a8:9f:e2:
                    17:24:89:7a:94:c8:ef:07:11:76:a4:e7:74:d3:05:
                    62:92:cd:3f:9a:73:dc:4e:0d:93:47:67:9f:a8:ef:
                    ee:92:31:ae:8e:e0:af:1b:60:1b:d7:03:3d:8f:b2:
                    24:c4:12:07:15:ec:c7:db:4b:9f:a5:91:99:27:e2:
                    89:25:83:66:a6:35:ea:ee:10:8b:73:b0:56:fa:64:
                    ab:b8:67:28:0f:ca:ce:46:64:1f:92:1d:47:72:a9:
                    6b:91:7e:07:c8:70:13:f7:ec:bd:26:c8:08:16:b3:
                    4d:64:00:e4:f3:dd:6f:20:1b:bb:88:25:91:24:d3:
                    d7:f4:fa:6c:3d:d5:d2:30:29:c5:bb:8f:a4:93:93:
                    3b:af:5b:ad:67:c0:70:a3:8e:be:65:6b:10:15:54:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:71:8F:0C:68:95:15:26:91:2B:34:EC:81:ED:E4:F3:4C:A5:CF:1D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D365D9D6B59A11F19BAB61CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:70:57:04:f6:cb:d2:2c:71:fc:f7:6a:47:a5:54:50:71:75:
         fe:a1:22:98:bf:2f:e6:19:b8:74:6c:e7:71:bb:08:88:7d:b8:
         13:1c:d9:a4:e1:84:75:22:8c:24:c1:49:c0:3c:93:60:36:50:
         86:cc:72:af:16:08:ab:78:59:7f:83:8c:bb:9c:60:e9:00:f6:
         9c:14:74:59:fa:d3:76:5e:28:e6:84:6d:7b:e8:5c:87:72:ae:
         78:eb:df:0a:92:db:7a:e9:5c:ca:92:9b:0d:65:27:34:49:f5:
         12:29:6a:15:5a:30:6b:df:51:f3:ec:12:55:d5:14:2a:1f:96:
         35:cc:35:c5:76:ec:44:79:3d:3a:71:34:63:69:97:c2:4f:0f:
         f7:d9:6d:0e:e8:77:1c:9f:05:25:6f:53:f4:b9:7a:b4:fd:33:
         86:0b:ce:90:2a:d9:b9:ed:ef:87:75:f8:15:9b:1a:42:ce:cd:
         6b:0c:cc:4c:c7:39:08:e1:c7:ed:d0:87:d6:d3:46:b6:a8:46:
         f8:f7:b3:69:b8:10:90:73:42:b3:84:58:2e:19:bd:5b:4b:b7:
         b7:96:8e:42:dd:2f:d9:94:dc:2b:04:16:ce:69:47:74:f9:f4:
         12:dd:93:fe:58:55:1b:4d:8e:e3:c2:d5:48:63:b6:56:73:b0:
         2c:3e:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----