Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F80AC450A69911F1BA810AC1CE1D38B0.roa
File:                     F80AC450A69911F1BA810AC1CE1D38B0.roa (raw, json)
Hash identifier:          5FPAFkI+IebxCB8kk3ZuVUMLEY82Wvov8vW4Vchzg1I=
Subject key identifier:   76:A5:01:28:6D:7B:DD:48:D5:09:3E:E8:6B:E0:F6:61:E4:66:D2:7A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D23A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F80AC450A69911F1BA810AC1CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 06:46:05 +0000
ROA not before:           Wed 02 Sep 2026 06:46:01 +0000
ROA not after:            Sat 01 Sep 2029 06:46:01 +0000
asID:                     17561
IP address blocks:        156.240.211.0/24 maxlen: 24
                          156.240.212.0/24 maxlen: 24
                          156.240.213.0/24 maxlen: 24
                          156.240.214.0/24 maxlen: 24
                          156.240.215.0/24 maxlen: 24
                          156.240.216.0/24 maxlen: 24
                          156.240.217.0/24 maxlen: 24
                          156.240.218.0/24 maxlen: 24
                          156.240.219.0/24 maxlen: 24
                          156.240.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119354 (0x1d23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 06:46:01 2026 GMT
            Not After : Sep  1 06:46:01 2029 GMT
        Subject: CN=6a97c62d-bbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:ed:8a:47:80:44:29:6c:2a:92:4f:f1:4f:
                    9f:b0:52:43:2f:df:44:57:a0:5f:e2:7f:01:a8:8f:
                    ee:26:18:d2:52:39:1a:65:29:bb:b2:90:41:38:01:
                    3d:8d:3d:14:f8:ec:69:bf:cc:76:87:27:85:04:36:
                    5d:76:8c:47:d1:6e:ce:d0:71:47:66:7d:cc:99:c5:
                    63:08:03:da:18:1c:de:e9:12:30:30:d0:b1:de:f0:
                    74:dc:95:9a:a7:24:e1:39:b8:b7:b4:a6:b0:80:17:
                    6f:fc:22:35:d6:38:44:4d:cc:bb:7a:8d:50:85:e8:
                    64:60:4f:3f:f8:ea:99:47:ac:3d:c2:2a:06:51:c2:
                    88:83:38:11:a7:ab:de:6a:06:2e:19:00:5e:e0:15:
                    b2:24:db:aa:3d:35:1e:a0:4b:36:cb:72:33:ab:69:
                    34:28:17:0c:b2:dc:a2:53:c6:71:2e:d7:13:fa:db:
                    5c:4a:91:be:bb:49:e8:ad:b4:f9:c5:5d:84:31:8a:
                    ee:66:f1:f6:25:e7:f4:3d:e7:21:2c:37:15:7a:05:
                    68:43:5c:a9:eb:db:73:ad:6a:82:dd:fd:67:aa:17:
                    2d:a2:77:c4:99:27:64:0e:a0:6c:eb:0f:9b:5f:bc:
                    ea:61:8c:ae:2d:4d:f8:07:f1:c7:fa:32:63:d6:ee:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A5:01:28:6D:7B:DD:48:D5:09:3E:E8:6B:E0:F6:61:E4:66:D2:7A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F80AC450A69911F1BA810AC1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.211.0-156.240.220.255

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:46:e5:86:03:62:20:66:22:23:ab:c4:11:7b:49:50:49:
         8a:a3:54:bc:34:08:6e:4e:6f:cd:bf:5e:ec:9f:6c:c7:7a:bd:
         4a:bb:cf:a1:2e:9e:25:c3:d1:b0:42:86:4e:0c:4a:ba:9f:47:
         27:20:dd:f0:d4:74:cf:a1:d9:dc:f1:82:36:ed:24:10:07:5f:
         89:ac:85:96:47:6c:b1:3d:4e:a5:44:89:10:56:b3:7c:e9:cd:
         1e:2d:c4:a8:c9:06:e9:19:87:cb:1f:80:e1:d5:c0:4c:1b:c9:
         14:e7:ec:4b:57:e1:68:4b:f3:9b:8f:af:ee:17:0e:68:02:6d:
         84:e8:f5:03:42:e2:ef:9f:df:85:eb:24:8c:51:5e:58:42:24:
         c4:81:e1:e2:8c:dc:f2:33:85:5b:2e:79:50:0d:96:63:e7:d4:
         ba:94:7b:53:99:50:1b:01:9b:62:e8:13:56:b8:14:d8:ed:a6:
         15:ed:b0:93:a1:a5:2e:30:8a:af:00:96:6b:3d:c2:d2:5a:1b:
         c1:cc:5e:a5:d8:62:8f:eb:d4:32:75:21:eb:c9:4b:40:3c:73:
         68:cf:73:56:46:0c:9a:8b:91:3d:df:96:0e:3a:da:9f:92:21:
         55:23:7b:8b:ce:7d:df:e4:06:6b:42:1f:cc:10:86:12:1e:8d:
         2e:11:6f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----