Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FC2FCC9BA911F1A54666B8CE1D38B0.roa
File:                     06FC2FCC9BA911F1A54666B8CE1D38B0.roa (raw, json)
Hash identifier:          ReIjumiKcMtUeDsZclhQ6hTuf2JyMHBSfOIHIomrBnI=
Subject key identifier:   46:F3:A3:A6:90:78:4B:C4:85:05:15:B3:BB:E8:0D:BB:A5:22:40:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FC2FCC9BA911F1A54666B8CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 08:36:10 +0000
ROA not before:           Wed 19 Aug 2026 08:36:06 +0000
ROA not after:            Thu 19 Nov 2026 08:36:06 +0000
asID:                     137951
IP address blocks:        156.224.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118347 (0x1ce4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 08:36:06 2026 GMT
            Not After : Nov 19 08:36:06 2026 GMT
        Subject: CN=6a856afa-1127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:9c:7a:a6:05:61:ea:ec:d4:70:0b:c1:23:
                    92:56:00:ea:51:1f:57:62:b4:fc:90:40:15:a7:ac:
                    7f:cc:34:09:66:71:ed:83:6e:c0:ce:f6:7a:51:8e:
                    6a:1e:78:63:09:1c:b9:de:62:32:c5:0a:fd:d3:88:
                    4c:f4:ed:e0:6c:a3:99:47:f8:ca:e8:5f:b3:63:81:
                    c9:83:b5:ea:4c:9e:f1:73:a5:58:96:59:71:ca:e5:
                    4e:46:e7:58:e7:00:45:1b:e0:4a:8d:6f:05:55:6d:
                    b5:72:66:66:1b:c4:da:ed:81:46:d8:e9:6a:69:3b:
                    83:cb:3e:cc:9a:8c:cb:96:84:5f:71:60:fb:a3:2d:
                    63:f4:f4:ed:98:c7:d7:4e:5a:62:62:6f:eb:d9:e2:
                    86:80:33:12:f4:3c:4a:47:7f:c4:94:f4:87:23:e2:
                    23:55:87:f1:69:83:70:04:d0:fb:08:dc:df:6a:3d:
                    0f:07:cd:3d:fc:1a:a0:29:b1:94:d7:60:4c:7f:ed:
                    eb:ae:6a:d0:51:39:f8:8e:63:4e:7c:10:22:55:7a:
                    c7:f0:be:b2:a7:a2:a8:af:30:e6:70:54:0f:3b:55:
                    78:8d:a4:19:7e:46:e5:de:85:7f:8c:b3:87:cf:8c:
                    13:e6:d1:e5:85:d0:27:88:3b:e0:85:9a:c1:ac:51:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F3:A3:A6:90:78:4B:C4:85:05:15:B3:BB:E8:0D:BB:A5:22:40:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FC2FCC9BA911F1A54666B8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:26:9f:9b:80:35:ba:df:89:6f:57:bf:b5:86:81:97:75:6d:
         f9:fe:fb:7e:01:a0:58:59:d0:bf:01:78:16:57:37:35:ed:c3:
         46:aa:78:e4:a4:a2:02:09:57:76:fd:9d:3c:8d:ef:13:26:c1:
         56:dc:cd:64:52:b8:89:69:4a:08:92:99:31:9e:8e:02:66:88:
         c2:83:82:37:68:8c:23:16:a7:69:d9:fb:76:16:96:8a:5c:65:
         95:86:1f:2f:92:e7:ab:08:ea:63:8a:46:e9:c6:4e:7b:37:ce:
         b6:ae:b8:99:a7:9b:2a:48:aa:f1:77:fb:89:e8:35:9c:80:82:
         d7:3d:6e:5f:3c:d8:c9:d7:f4:e7:a8:44:b9:49:1a:4f:b3:6f:
         74:13:a6:84:3f:93:1f:b2:c9:03:71:39:53:ae:6d:a6:68:da:
         73:1e:01:5a:a3:49:2c:d1:87:f5:df:d6:a2:af:a8:6b:8b:3d:
         f9:ee:12:e0:92:eb:3f:e4:f5:74:43:4a:02:04:02:a8:8b:68:
         3d:1a:9e:ef:0b:11:55:b4:5b:4f:3f:f6:d2:5f:2f:4e:7a:c6:
         a2:a7:10:b5:32:90:0e:a6:db:f7:6a:8a:6a:45:b7:5c:c3:8b:
         e8:8e:ae:cf:f7:8b:3b:7e:30:a2:a6:cd:81:91:24:db:ad:6c:
         b9:99:4b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----