Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4EDF662B67E11F19BD94D1DCF1D38B0.roa
File:                     F4EDF662B67E11F19BD94D1DCF1D38B0.roa (raw, json)
Hash identifier:          KpAo84UlR9Ou0SsuYExRlWz7YZ7oUwdrFYWrew6fVu0=
Subject key identifier:   6E:49:DE:14:64:80:1E:89:89:2F:0A:29:78:C0:3A:69:B7:16:B6:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D830
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4EDF662B67E11F19BD94D1DCF1D38B0.roa
Signing time:             Tue 22 Sep 2026 12:13:02 +0000
ROA not before:           Tue 22 Sep 2026 12:12:58 +0000
ROA not after:            Sat 07 Nov 2026 12:12:58 +0000
asID:                     9304
IP address blocks:        156.249.167.0/24 maxlen: 24
                          156.249.170.0/24 maxlen: 24
                          156.249.180.0/24 maxlen: 24
                          156.249.183.0/24 maxlen: 24
                          156.249.185.0/24 maxlen: 24
                          156.249.187.0/24 maxlen: 24
                          156.249.190.0/24 maxlen: 24
                          156.249.191.0/24 maxlen: 24
                          156.253.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120880 (0x1d830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 12:12:58 2026 GMT
            Not After : Nov  7 12:12:58 2026 GMT
        Subject: CN=6ab270ce-d4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:f0:67:56:14:0e:39:e6:eb:16:fa:48:e9:
                    b9:c6:75:8e:4e:1c:f3:87:c9:ce:3b:87:fc:98:61:
                    48:1c:21:ef:2e:44:3b:4f:cc:ec:60:31:1d:ff:84:
                    3c:b4:f5:0f:7a:79:a4:79:71:65:da:f4:69:f9:c0:
                    77:c2:66:2f:42:e1:49:75:71:a1:b4:40:0b:a6:1d:
                    70:f3:d7:73:9f:b0:f5:af:8d:0c:7b:e4:5b:5f:05:
                    ee:b4:db:83:e5:ce:48:c6:e4:21:68:31:a3:f4:1b:
                    79:32:71:04:66:0d:45:33:2c:06:b4:d5:ca:ef:1d:
                    73:df:ad:ed:ec:fc:66:84:5d:84:e9:e3:bc:b9:e8:
                    a6:26:0e:b4:bc:07:ef:b1:44:b4:cc:0a:63:2f:6f:
                    91:de:5a:6f:44:e9:39:f1:41:92:63:33:f1:b9:49:
                    7f:dd:3a:8d:57:4b:05:a4:4a:4a:fc:3e:be:f7:16:
                    d7:90:35:5d:07:f9:d9:f3:cb:a0:c2:09:72:6d:cb:
                    ff:06:51:72:d7:74:f8:6b:ba:92:f0:26:6e:4b:26:
                    aa:72:b2:b4:b1:a4:fe:8e:8e:e9:f3:5f:ad:ba:0f:
                    2d:de:f3:63:99:01:6f:df:c1:9c:62:3c:e6:85:aa:
                    d8:df:7e:6a:56:8b:83:2c:05:bb:bc:76:52:b1:55:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:49:DE:14:64:80:1E:89:89:2F:0A:29:78:C0:3A:69:B7:16:B6:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4EDF662B67E11F19BD94D1DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.167.0/24
                  156.249.170.0/24
                  156.249.180.0/24
                  156.249.183.0/24
                  156.249.185.0/24
                  156.249.187.0/24
                  156.249.190.0/23
                  156.253.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:95:96:87:a2:cb:30:41:88:c8:27:6f:ef:ad:d4:0a:fd:ad:
         ca:23:28:2f:c1:4d:32:3f:5b:9c:f7:47:69:4f:1d:a0:bb:0b:
         e0:e1:cc:57:2c:02:d7:5b:b4:ca:ad:f1:02:22:73:68:e2:5f:
         80:c3:ef:4e:ba:d1:18:f4:62:33:1e:4a:4a:fa:2b:f2:80:f9:
         36:37:25:09:34:89:5b:df:d1:88:be:91:6b:a2:75:df:18:3f:
         d3:66:f6:ce:13:ff:bf:a9:48:b8:9d:69:fb:94:df:d3:9d:8a:
         84:d0:97:b7:9d:75:be:40:90:db:b2:96:da:a0:2e:be:47:b0:
         ae:e3:39:e7:9f:0d:53:ef:39:ed:19:18:d1:5b:fd:6b:8e:1e:
         23:4c:8a:23:89:6a:ee:ac:04:00:11:ca:f5:c3:66:5b:a4:48:
         e3:30:96:17:d8:bd:d6:f8:53:99:df:37:d0:83:a8:90:c3:a5:
         ee:64:df:87:14:54:56:d5:28:30:92:7c:cb:12:73:db:09:56:
         8b:6c:cd:77:f8:8f:bf:27:07:27:e5:4a:96:48:ac:a4:6e:ec:
         7f:50:5e:5d:da:b7:5a:0b:c1:55:e1:dd:bf:29:59:d2:17:27:
         07:1e:42:5e:63:c5:56:0e:0b:2e:ad:b1:8f:1a:3d:2a:07:c9:
         32:0b:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----