Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F188FF7AB23D11F1A202F2AFCE1D38B0.roa
File:                     F188FF7AB23D11F1A202F2AFCE1D38B0.roa (raw, json)
Hash identifier:          YxWEQF4GtVMV0DQkCUrWpLYd5gPyBry8FL4n/n3iJdg=
Subject key identifier:   73:9B:2E:E0:D2:DF:4A:C5:81:B5:B8:CC:50:7D:57:D5:B9:76:47:EC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D69D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F188FF7AB23D11F1A202F2AFCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 02:17:34 +0000
ROA not before:           Thu 17 Sep 2026 02:17:30 +0000
ROA not after:            Thu 24 Sep 2026 02:17:30 +0000
asID:                     154321
IP address blocks:        156.226.176.0/22 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120477 (0x1d69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 02:17:30 2026 GMT
            Not After : Sep 24 02:17:30 2026 GMT
        Subject: CN=6aab4dbe-09ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:4f:ee:96:4b:c8:cf:e3:25:5a:54:11:39:
                    b9:88:f0:97:b3:0c:2d:14:23:56:3f:d2:09:5f:2d:
                    99:67:0d:8a:d7:c1:c6:20:69:46:34:ca:a6:32:cb:
                    8b:c7:e3:aa:01:dd:e8:2c:f8:0a:4c:2a:e7:6f:1e:
                    0e:c3:16:32:72:97:a4:17:f8:1e:14:7a:b3:e3:9d:
                    69:3a:0b:d2:36:f3:67:fe:9a:68:df:93:c2:d7:f9:
                    76:2f:3d:79:3a:57:ee:94:20:d2:69:b0:2c:7b:a5:
                    73:54:b7:f5:ec:4c:ce:c8:34:6e:dc:58:d4:de:3d:
                    bb:09:d5:02:c7:a5:b3:97:21:30:08:36:72:4d:59:
                    58:5f:9a:51:31:e7:72:ef:f4:07:f0:e4:14:d1:4c:
                    9f:5d:ff:3d:c5:b8:52:ef:81:15:8e:de:36:a0:ca:
                    c7:64:db:a0:c0:e0:e2:61:f7:e0:28:70:63:f9:00:
                    02:a8:b6:e3:f1:34:a8:ab:4a:31:dc:28:82:ad:c3:
                    0b:53:f4:83:2e:3b:0a:55:5a:ad:1c:fa:bf:49:e8:
                    41:a4:99:66:8c:04:b8:fa:71:92:c7:82:a7:85:11:
                    4c:8f:87:4f:44:fb:f7:f9:b2:af:7a:27:39:a7:3e:
                    79:4c:9d:9b:45:10:75:f8:5e:6f:93:da:63:eb:df:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:2E:E0:D2:DF:4A:C5:81:B5:B8:CC:50:7D:57:D5:B9:76:47:EC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F188FF7AB23D11F1A202F2AFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:43:54:9e:53:8f:04:1d:28:6d:5c:3e:c1:f6:49:91:d8:2c:
         58:95:33:02:58:5b:37:22:96:75:48:ea:2f:14:fe:82:5b:cf:
         80:4a:a2:a1:32:8f:92:ce:3e:eb:27:18:a4:3c:9d:33:08:73:
         79:98:87:95:86:ef:e1:8f:c9:e3:31:c9:9a:5d:05:6b:c5:e1:
         47:66:e6:35:48:c9:57:65:fa:08:31:0d:56:e9:8e:54:90:1a:
         9e:b3:7c:4e:da:69:45:24:96:69:1f:dd:7e:af:b9:2a:8a:5d:
         d9:90:24:2e:03:f3:d5:16:24:db:e6:03:5b:f6:e3:07:1e:de:
         d5:36:81:fa:c4:ff:f1:51:c0:65:92:61:05:ac:b7:84:05:f7:
         ea:61:c4:a1:09:78:d4:b4:53:3c:c1:46:ff:84:75:82:9b:02:
         0f:85:a5:e3:81:fa:74:d8:80:68:ee:72:4f:b5:25:14:65:72:
         76:1b:46:08:14:62:34:ee:e2:d3:e6:28:96:5a:1f:27:ce:82:
         6d:1d:d9:50:65:60:f8:aa:f9:b5:31:06:8c:93:df:f6:9b:60:
         ef:a5:78:a7:f1:37:77:ef:cd:ac:39:96:60:10:47:62:7a:e9:
         da:37:3b:2c:64:eb:aa:24:0e:95:99:d0:a7:97:c6:04:49:7d:
         d8:e5:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----