Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F64B0E80A92E11F189E8CBDBCE1D38B0.roa
File:                     F64B0E80A92E11F189E8CBDBCE1D38B0.roa (raw, json)
Hash identifier:          oSR1lT/CBvlGzLXDiD+VXmCSQfwOSDs3W2YMkmbdEWE=
Subject key identifier:   2B:BB:0C:3E:4E:8F:AA:11:C9:E3:9E:27:8E:37:F4:4A:51:69:6C:DA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D37D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F64B0E80A92E11F189E8CBDBCE1D38B0.roa
Signing time:             Sat 05 Sep 2026 13:37:39 +0000
ROA not before:           Sat 05 Sep 2026 13:37:35 +0000
ROA not after:            Tue 13 Oct 2026 13:37:35 +0000
asID:                     152698
IP address blocks:        156.225.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119677 (0x1d37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  5 13:37:35 2026 GMT
            Not After : Oct 13 13:37:35 2026 GMT
        Subject: CN=6a9c1b23-1d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:b2:65:fe:b4:87:cf:1f:bd:55:ce:ca:35:
                    d7:50:4a:c1:fc:59:3c:9d:77:63:ed:c6:76:19:e5:
                    22:cc:17:ed:86:89:88:4e:08:56:59:89:8f:6b:e0:
                    57:43:90:3e:88:a4:51:0c:63:d1:d2:19:78:38:8b:
                    8c:b8:28:67:90:97:3e:bb:4d:68:fe:4a:aa:a0:38:
                    66:98:3c:e3:6b:09:5c:6b:13:20:d6:f4:6f:99:49:
                    36:d4:8a:fe:0a:6d:e8:88:23:88:fd:21:59:36:38:
                    97:71:f0:43:2f:63:dd:c7:02:d9:26:73:fa:4b:cd:
                    c8:2f:f5:ac:82:21:24:b3:66:ba:db:8b:e0:a2:ce:
                    d6:37:34:0f:58:7a:f5:c8:02:d3:cf:d9:f5:ca:5a:
                    b2:90:42:86:0c:31:56:a4:ee:25:f5:3d:d1:01:b3:
                    92:7a:ef:e9:eb:62:f7:c1:5b:3d:f1:2f:c2:ee:5a:
                    0a:03:84:66:33:b6:74:6a:cb:78:e5:1a:4d:19:cb:
                    7f:79:62:a5:a1:06:48:41:b7:3b:1a:f7:7d:a5:f0:
                    e6:8e:82:7d:c0:b5:a1:62:3a:d2:b1:ad:10:b5:5d:
                    c3:7d:cb:3f:7f:ac:2c:06:6f:eb:33:59:74:06:a3:
                    5a:5d:50:72:d3:b5:cc:88:41:e4:26:05:f6:53:9a:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BB:0C:3E:4E:8F:AA:11:C9:E3:9E:27:8E:37:F4:4A:51:69:6C:DA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F64B0E80A92E11F189E8CBDBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:0c:f5:2f:1d:b3:f7:c2:f2:ed:31:d6:bc:2a:65:58:74:fa:
         c8:c6:80:73:4d:df:d4:d7:4b:ac:06:b5:59:b7:f3:a5:a7:34:
         af:6d:0f:c8:d6:10:e6:74:58:65:3e:26:b2:10:9e:b5:39:89:
         23:b1:3c:dc:09:c2:b1:a4:a1:a2:9c:98:be:cf:e0:12:1d:63:
         ea:29:ac:12:6e:e6:d0:5e:8a:f5:f2:e7:39:df:31:f3:58:4d:
         e2:6e:3c:f5:59:01:74:dc:7b:a1:08:8b:a0:9c:1b:8e:9f:32:
         53:4a:30:28:19:32:11:de:18:83:15:0c:2a:53:37:6c:20:4c:
         a6:8a:11:1d:dd:a1:54:16:c8:0d:a2:16:73:be:47:3e:25:5c:
         a7:97:ab:07:4e:e7:cd:ce:77:27:8f:59:c6:b6:1c:52:48:33:
         62:d5:a6:7d:d5:ba:b7:43:4b:50:29:79:1a:45:9c:8b:2f:d1:
         7e:2e:f9:90:f1:88:3f:86:0b:37:4b:c5:e6:7e:1a:f7:7b:b7:
         d2:20:88:8a:4f:b1:ec:08:1c:b9:ea:56:68:06:7a:fa:0f:f3:
         b4:4f:a5:9d:6e:c4:9f:11:ce:67:cf:04:35:30:e7:d1:de:52:
         20:1c:0e:f6:b5:7f:5a:ce:4a:4d:d9:c3:ff:c2:56:61:7e:6a:
         56:ab:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----