Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2438FA76A76511F18712860DCF1D38B0.roa
File:                     2438FA76A76511F18712860DCF1D38B0.roa (raw, json)
Hash identifier:          ridEHzXZSl3ALtWBf/0R4ivByLP9VL1PpYAHxWi91+A=
Subject key identifier:   CC:34:D1:E6:D1:98:E0:C4:37:89:B1:99:F2:B6:30:82:7F:30:35:86
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2438FA76A76511F18712860DCF1D38B0.roa
Signing time:             Thu 03 Sep 2026 07:00:27 +0000
ROA not before:           Thu 03 Sep 2026 07:00:23 +0000
ROA not after:            Sat 10 Oct 2026 07:00:23 +0000
asID:                     138915
IP address blocks:        156.244.19.0/24 maxlen: 24
                          156.244.20.0/24 maxlen: 24
                          156.244.21.0/24 maxlen: 24
                          156.244.22.0/24 maxlen: 24
                          156.244.25.0/24 maxlen: 24
                          156.244.26.0/24 maxlen: 24
                          156.244.27.0/24 maxlen: 24
                          156.244.28.0/24 maxlen: 24
                          156.244.29.0/24 maxlen: 24
                          156.244.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119482 (0x1d2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 07:00:23 2026 GMT
            Not After : Oct 10 07:00:23 2026 GMT
        Subject: CN=6a991b0b-4697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a0:e1:5a:de:54:e3:34:d8:75:e3:07:8a:1b:
                    01:e8:a2:3d:5f:76:2d:a3:29:5b:72:90:4c:6c:72:
                    c1:c8:96:82:00:bd:f2:d8:66:36:ac:14:1d:fe:57:
                    3e:20:4e:f5:9f:40:da:13:07:e5:f1:98:6c:f5:3c:
                    d2:f9:db:6a:6c:64:45:9b:32:75:89:3b:ca:63:27:
                    b6:27:89:f5:9e:05:22:da:0e:89:09:c0:53:21:72:
                    62:e0:2b:19:ba:83:f4:1a:bb:1f:9f:13:3a:89:63:
                    c6:c1:d2:1f:65:f0:a3:2a:d9:5f:54:c4:c9:4e:aa:
                    a9:ec:b7:96:ba:34:92:10:e4:55:71:44:17:22:d2:
                    c1:76:d3:da:e7:5d:3c:c6:b8:85:11:69:b4:bc:f3:
                    f0:bf:f0:8c:7f:c7:b6:74:31:7f:8b:0e:51:5b:55:
                    ca:41:cd:38:1d:f7:1b:c8:85:f0:37:a3:43:cc:67:
                    4c:dd:8c:2e:22:e0:f8:0d:9f:5b:75:f7:5a:62:f9:
                    0f:50:ea:42:2d:06:c2:c6:60:18:ba:c6:16:5a:89:
                    70:14:e9:98:dc:33:a4:05:11:d3:96:08:8d:da:99:
                    4f:26:c7:4d:0d:96:ea:ae:53:ec:59:f4:10:f6:7a:
                    19:ff:93:95:15:df:2d:1a:4a:8e:34:2e:87:66:63:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:34:D1:E6:D1:98:E0:C4:37:89:B1:99:F2:B6:30:82:7F:30:35:86
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2438FA76A76511F18712860DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.19.0-156.244.22.255
                  156.244.25.0-156.244.30.255

    Signature Algorithm: sha256WithRSAEncryption
         94:49:14:4b:e6:d1:76:e7:47:15:58:69:44:db:22:f1:b7:6a:
         4e:39:62:5e:e8:73:58:97:bf:c2:42:af:8a:d4:78:8c:88:ea:
         fb:ba:9f:7b:f7:92:0d:56:b1:06:29:8c:f6:06:4b:db:2b:bc:
         02:b7:97:7b:49:4d:c6:82:0f:32:aa:cc:57:3f:82:b2:22:bc:
         7e:4e:e9:8d:d5:13:71:d9:bb:51:e2:fd:7e:f8:9a:67:19:da:
         13:d8:10:f9:5b:e1:f9:f4:e6:b5:25:c8:33:4f:5f:3f:f3:c6:
         69:ec:9c:30:df:5e:2c:73:55:8e:b8:af:96:c7:8d:6d:2c:97:
         1f:f4:c9:cc:b3:9d:10:f2:58:8e:b8:54:f8:d1:50:6b:66:4a:
         46:38:3c:a3:df:a8:4d:0d:35:77:e3:e2:41:7f:c2:5a:59:dd:
         5b:c1:f6:ad:b9:ea:a5:ee:f9:50:b7:cc:8f:2c:63:1a:76:20:
         dc:5b:ba:6b:df:47:71:c0:28:a0:6f:b8:c0:54:a8:3d:94:50:
         6a:df:a2:a9:f6:6d:d4:ac:65:cb:53:86:f0:c5:15:4d:9a:86:
         22:7a:c5:05:ef:fa:22:96:48:9c:28:49:e1:02:ec:42:dc:b6:
         3e:20:77:15:b0:8f:c0:de:a4:f5:e0:4e:2f:16:0b:84:86:ce:
         87:da:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----