Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DEEDF9E9B0611F1894716D8CE1D38B0.roa
File:                     0DEEDF9E9B0611F1894716D8CE1D38B0.roa (raw, json)
Hash identifier:          5XEfnlOs7oP06sNmWMHj1Q2xHkrNO33jRH+8Rp3F6Us=
Subject key identifier:   E0:C5:71:9E:4F:B0:E4:65:2C:12:11:2B:8D:03:A4:7F:63:C1:8C:57
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CDD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DEEDF9E9B0611F1894716D8CE1D38B0.roa
Signing time:             Tue 18 Aug 2026 13:09:33 +0000
ROA not before:           Tue 18 Aug 2026 13:09:29 +0000
ROA not after:            Fri 25 Sep 2026 13:09:29 +0000
asID:                     271355
IP address blocks:        156.236.224.0/24 maxlen: 24
                          156.236.230.0/24 maxlen: 24
                          156.236.231.0/24 maxlen: 24
                          156.236.232.0/24 maxlen: 24
                          156.236.233.0/24 maxlen: 24
                          156.236.234.0/24 maxlen: 24
                          156.236.235.0/24 maxlen: 24
                          156.236.236.0/24 maxlen: 24
                          156.236.237.0/24 maxlen: 24
                          156.236.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118229 (0x1cdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 13:09:29 2026 GMT
            Not After : Sep 25 13:09:29 2026 GMT
        Subject: CN=6a84598d-606e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:21:69:39:61:2d:3c:c9:c7:5a:b0:75:29:a5:
                    10:73:19:16:5e:a0:e5:19:d8:54:e0:f5:88:84:99:
                    2d:e0:a8:ca:dd:fd:51:d3:09:fa:49:36:27:a1:f8:
                    55:2c:e2:1a:a6:5c:3a:94:48:52:5d:47:db:23:ea:
                    5d:cb:ca:3f:fe:71:4d:8b:82:aa:a9:6e:a4:79:27:
                    5f:44:29:b2:d6:4b:0f:c9:c0:45:62:41:f1:43:d2:
                    44:cf:cd:fa:b7:6e:ce:6f:33:e7:0e:9b:80:76:9f:
                    4e:7c:91:83:59:0c:26:0e:c7:b2:75:1f:00:ba:8d:
                    32:4e:d7:1b:48:7d:42:e9:ae:ca:fd:9c:cd:dd:b4:
                    70:3a:f9:32:69:8e:f3:9b:8c:5d:61:8f:eb:51:8d:
                    79:f0:05:87:e3:16:91:6b:44:c9:93:14:ae:67:71:
                    1c:22:d9:5c:b8:df:a6:05:aa:c6:1b:c3:36:22:c7:
                    ee:d4:ed:a6:ac:51:47:27:d9:23:85:b5:60:af:0a:
                    2a:77:96:c8:95:92:e7:00:99:a8:eb:7a:65:4d:ac:
                    d4:d4:8f:72:aa:86:e4:2e:af:30:57:f4:f9:3f:41:
                    19:88:78:a2:84:2f:fa:31:71:f1:6c:2d:3e:17:36:
                    ab:ca:66:78:26:1e:0e:31:c1:dc:0b:ed:2d:68:c5:
                    4f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C5:71:9E:4F:B0:E4:65:2C:12:11:2B:8D:03:A4:7F:63:C1:8C:57
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DEEDF9E9B0611F1894716D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.224.0/24
                  156.236.230.0-156.236.238.255

    Signature Algorithm: sha256WithRSAEncryption
         b3:99:ee:aa:5f:cc:e9:38:8b:61:86:a0:5a:cc:d5:50:5b:f1:
         b2:11:66:d8:39:5c:c2:56:4e:40:a5:b9:63:b6:cd:43:a1:1a:
         79:c9:7a:fc:fd:fb:c3:f2:a3:5e:8d:02:32:0e:ef:67:86:bd:
         f4:8e:95:88:76:a1:59:4d:b6:1f:b5:2b:cd:57:b9:6b:a4:b7:
         73:9d:0f:a5:e4:e0:2b:87:64:b7:04:41:93:45:6b:49:a0:4d:
         53:04:6a:bf:05:bd:d6:4b:0a:84:6e:6f:69:09:51:df:53:e8:
         e8:c0:fc:12:cd:6d:92:df:a8:ff:31:ff:bb:b1:21:96:b4:c5:
         5e:ab:1e:4b:d1:95:77:b2:e5:17:93:22:04:56:61:df:74:31:
         c5:16:12:c1:84:ba:0e:db:fc:0c:ee:a7:0c:d2:38:51:a8:cc:
         3a:6b:94:2f:2a:4d:4f:41:cb:3b:44:b2:50:76:e3:8a:e5:64:
         aa:73:d4:13:e3:66:46:45:4d:12:ec:65:75:62:ba:a5:1c:d4:
         7c:d1:e3:88:ef:a6:ff:17:86:d2:29:e4:7e:0e:de:32:df:05:
         54:6a:0a:77:d5:92:9e:bf:48:5f:43:09:80:79:95:0c:68:d1:
         3d:0c:b8:38:14:a5:e0:b9:46:c4:3c:77:d5:3d:70:b3:8e:26:
         40:03:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----