Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D903D52CA77711F1803BC7FDCE1D38B0.roa
File:                     D903D52CA77711F1803BC7FDCE1D38B0.roa (raw, json)
Hash identifier:          iQ8jG53ep+/ndte4Wy5sEeF4zprXG95ixv3GXUMXoLk=
Subject key identifier:   01:13:B4:17:89:E2:40:33:3F:09:DC:8D:BE:97:CE:91:F1:54:E5:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D903D52CA77711F1803BC7FDCE1D38B0.roa
Signing time:             Thu 03 Sep 2026 09:14:21 +0000
ROA not before:           Thu 03 Sep 2026 09:14:17 +0000
ROA not after:            Sat 10 Oct 2026 09:14:17 +0000
asID:                     154177
IP address blocks:        156.244.7.0/24 maxlen: 24
                          156.244.9.0/24 maxlen: 24
                          156.244.18.0/24 maxlen: 24
                          156.244.25.0/24 maxlen: 24
                          156.244.27.0/24 maxlen: 24
                          156.244.49.0/24 maxlen: 24
                          156.244.55.0/24 maxlen: 24
                          156.244.56.0/23 maxlen: 24
                          156.244.58.0/23 maxlen: 24
                          156.244.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119520 (0x1d2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 09:14:17 2026 GMT
            Not After : Oct 10 09:14:17 2026 GMT
        Subject: CN=6a993a6d-02fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:68:70:ca:98:7f:3f:27:16:ab:47:e8:94:
                    ba:56:ab:35:92:02:2d:9f:38:ea:85:71:73:c1:0e:
                    7d:80:02:74:51:be:19:a4:38:79:5e:a0:2b:3e:5e:
                    af:f5:a4:35:af:97:92:eb:70:49:e8:05:d3:3e:e8:
                    17:39:2e:40:02:00:f6:8b:d1:03:66:a1:70:5b:ab:
                    d7:50:00:b8:e6:f0:43:34:ea:c1:1f:3a:56:95:50:
                    35:cc:46:bd:47:1e:09:79:0d:62:42:f1:bc:f4:00:
                    3c:d3:4f:dc:82:5b:28:ef:08:a1:47:91:71:a4:8b:
                    d3:41:46:0b:01:19:ec:7b:49:13:bf:f8:e1:b9:83:
                    34:85:4c:47:e4:f1:19:9a:fa:68:52:7b:89:b6:67:
                    f4:e5:c5:69:96:f6:05:67:0e:c3:65:13:b2:c0:68:
                    c6:0c:af:c3:10:16:5c:10:3b:ae:df:22:63:f0:37:
                    ff:b5:68:37:bf:63:19:62:15:1a:bc:20:25:ec:80:
                    8d:94:5c:89:e2:1c:c9:f8:41:d1:be:de:ed:5f:96:
                    25:b6:b7:cd:3b:3d:e8:b0:1a:0c:aa:5d:d4:6d:33:
                    53:4d:c1:ed:77:9b:b6:ad:43:ce:98:3b:db:4b:aa:
                    a7:79:09:63:cd:0f:34:84:87:e5:13:ba:32:4b:31:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:13:B4:17:89:E2:40:33:3F:09:DC:8D:BE:97:CE:91:F1:54:E5:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D903D52CA77711F1803BC7FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.7.0/24
                  156.244.9.0/24
                  156.244.18.0/24
                  156.244.25.0/24
                  156.244.27.0/24
                  156.244.49.0/24
                  156.244.55.0-156.244.59.255
                  156.244.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:8f:3f:43:2a:b5:ac:6b:dc:29:e1:61:05:92:c5:11:17:8b:
         8f:74:7a:1d:8a:23:9e:a3:42:d8:73:b6:fb:63:7b:e4:93:bf:
         0c:d3:8f:ed:c6:de:54:c2:d0:b0:81:62:72:75:48:9b:28:75:
         d5:d1:bb:90:40:48:24:fb:d6:f8:97:c3:76:eb:23:fe:4f:68:
         7f:e5:e3:d7:4b:9c:3c:28:03:26:54:7f:21:f6:0c:dc:85:58:
         d1:1e:89:e6:5e:1f:89:47:9c:ac:95:5f:4d:4e:93:11:4a:5f:
         90:82:0e:06:d6:fe:cc:22:1a:2e:73:c1:c9:27:24:53:0e:9e:
         f2:63:16:11:79:f9:f9:d4:0c:62:28:32:00:7b:9f:cf:29:78:
         70:26:f5:b8:64:22:73:63:18:a9:9b:44:b9:db:af:18:40:be:
         56:4c:35:91:f4:ef:ea:d0:c2:57:f8:08:e1:20:73:95:97:1a:
         91:ea:b2:f7:1e:9b:c7:30:fd:ce:e8:8c:9b:c9:76:c6:24:2d:
         8b:22:17:02:ec:c3:5f:d7:d1:f8:4b:96:cf:cf:7a:f7:97:ea:
         5b:e1:b7:30:62:35:2e:0a:a7:86:6e:87:fa:86:7f:33:03:d4:
         59:7a:0a:4b:ab:67:f3:5c:44:6f:d0:72:d9:04:e3:25:67:cb:
         9d:53:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----