Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA957FD4A6A011F18A89C1E8CE1D38B0.roa
File:                     EA957FD4A6A011F18A89C1E8CE1D38B0.roa (raw, json)
Hash identifier:          3I6SZODnbdvLcOXggrhL5hot69tqedQtmy8fWgk7SOE=
Subject key identifier:   DF:9C:03:7D:67:7C:C3:00:48:8D:8D:10:E6:1A:01:6D:2C:56:59:9E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D256
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA957FD4A6A011F18A89C1E8CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 07:35:49 +0000
ROA not before:           Wed 02 Sep 2026 07:35:45 +0000
ROA not after:            Sat 01 Sep 2029 07:35:45 +0000
asID:                     17561
IP address blocks:        156.251.35.0/24 maxlen: 24
                          156.251.36.0/24 maxlen: 24
                          156.251.37.0/24 maxlen: 24
                          156.251.38.0/24 maxlen: 24
                          156.251.39.0/24 maxlen: 24
                          156.251.40.0/24 maxlen: 24
                          156.251.41.0/24 maxlen: 24
                          156.251.42.0/24 maxlen: 24
                          156.251.43.0/24 maxlen: 24
                          156.251.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119382 (0x1d256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 07:35:45 2026 GMT
            Not After : Sep  1 07:35:45 2029 GMT
        Subject: CN=6a97d1d5-68e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:30:f8:e7:25:20:11:90:e4:3d:f2:24:1c:
                    f1:0b:9e:88:ab:e4:95:00:9b:b9:87:41:16:98:8e:
                    72:06:2a:ff:06:31:95:18:48:62:e2:ec:2d:78:a1:
                    35:37:88:ff:aa:55:40:78:c5:3d:16:2f:d4:88:b0:
                    31:eb:01:4a:41:73:c2:70:f4:53:99:5c:d0:f3:df:
                    dc:e7:3e:11:a9:77:47:18:c9:0d:30:cc:49:3a:de:
                    6d:6a:c0:1b:82:a6:d5:d3:ae:71:7f:30:41:b7:85:
                    00:90:53:fc:bc:46:c7:01:61:95:5d:f9:32:97:3c:
                    98:9e:a8:17:19:b5:34:bb:a1:96:72:26:2b:be:7b:
                    e2:35:3a:5c:03:a6:cd:5d:0e:5c:9b:2a:9c:1e:e3:
                    27:36:c1:63:0e:17:cc:0c:24:a6:6d:9b:2f:c6:ed:
                    f5:8c:91:81:8f:68:5d:43:47:28:ab:12:1b:a0:e0:
                    f5:7c:f5:21:7c:5f:cc:ac:48:7e:11:38:95:0d:ca:
                    7e:da:4a:12:c4:7b:0c:3f:bd:6f:d9:86:7f:0f:d2:
                    08:71:19:a6:d0:ff:f3:69:c3:88:ce:cb:f8:32:ab:
                    8e:9d:0e:97:06:5f:09:8d:46:af:f6:df:cd:4f:70:
                    43:e3:c2:47:37:b5:50:df:ff:4c:e9:c1:ca:09:40:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9C:03:7D:67:7C:C3:00:48:8D:8D:10:E6:1A:01:6D:2C:56:59:9E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA957FD4A6A011F18A89C1E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.35.0-156.251.44.255

    Signature Algorithm: sha256WithRSAEncryption
         3d:72:3e:aa:8d:32:38:95:f3:db:73:b4:88:c2:f2:00:d2:61:
         f5:ae:ed:40:d7:0d:aa:a0:c3:cd:71:4b:6a:be:9e:9b:80:33:
         03:23:85:b9:db:a4:81:17:2b:b4:e6:81:76:fe:49:9c:49:27:
         cf:31:60:64:b5:f9:3c:2d:11:55:56:1d:af:08:be:4a:f5:a8:
         46:c2:8d:80:f7:d7:7c:ef:26:16:da:92:c3:49:5a:7e:07:ff:
         bc:e8:a0:be:3f:4f:ab:62:7f:b8:c4:43:b1:a7:30:e2:f5:44:
         fe:b0:17:dd:e4:64:10:f2:5e:e1:41:3d:e1:c8:7c:bb:5c:14:
         d0:f2:ca:19:b5:f5:b0:56:33:26:29:93:43:68:12:6e:3a:da:
         7a:f8:57:a1:bf:3f:c7:0e:e3:aa:b2:d0:b4:98:49:09:14:31:
         23:63:57:9b:d3:22:90:1c:f4:88:d2:a6:d1:94:d1:ab:e7:31:
         62:55:08:6d:49:07:3f:fc:a5:76:0f:89:e4:22:b9:f3:a4:3b:
         20:95:ca:8a:9f:d5:00:ed:14:10:9d:af:74:b4:6f:27:36:dd:
         09:6c:c4:35:8f:18:f8:f6:57:6f:90:1c:f1:e6:af:e0:2e:6c:
         c3:4e:26:90:52:af:60:ae:6f:60:f3:92:6b:52:38:cf:68:c0:
         3a:6b:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----