Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10032EFAC86711F1BBA5700FCF1D38B0.roa
File:                     10032EFAC86711F1BBA5700FCF1D38B0.roa (raw, json)
Hash identifier:          NPwjJvKczt/KB7HRB91V7cilC8fahU8SkcNiTgp1HqM=
Subject key identifier:   F5:F8:ED:72:80:0B:F6:67:E2:3B:A9:DA:56:30:FF:53:56:FC:96:C4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10032EFAC86711F1BBA5700FCF1D38B0.roa
Signing time:             Thu 15 Oct 2026 07:07:20 +0000
ROA not before:           Thu 15 Oct 2026 07:07:16 +0000
ROA not after:            Tue 24 Nov 2026 07:07:16 +0000
asID:                     401783
IP address blocks:        156.230.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122238 (0x1dd7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 07:07:16 2026 GMT
            Not After : Nov 24 07:07:16 2026 GMT
        Subject: CN=6ad07ba8-65e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:33:52:90:0b:2e:98:f9:91:a2:92:2d:6b:
                    39:81:40:9a:1c:88:67:b4:79:42:fa:22:1b:dd:df:
                    82:39:c6:db:f4:2e:53:2b:67:60:f7:43:e8:88:e3:
                    00:2f:6a:14:8e:08:ed:c5:99:04:57:33:78:74:a4:
                    12:fe:5a:29:02:c3:bd:a8:3b:7a:35:38:09:80:21:
                    ed:70:45:6f:49:51:73:bd:a5:d8:4b:26:43:ae:df:
                    73:d2:06:27:7b:e5:b0:8c:9c:4a:1a:2d:d6:c1:52:
                    9e:7c:cc:9b:23:a3:fe:e1:6f:f6:31:d7:7d:bc:ca:
                    c4:65:99:93:2b:0d:9c:be:df:e5:b0:8d:9e:9a:35:
                    d0:b2:1b:47:29:3c:33:ba:f6:85:05:67:66:28:a6:
                    2f:b5:11:f6:0d:0d:fa:94:f4:de:02:1c:ab:c6:29:
                    cf:96:a7:a2:33:5c:8c:c5:91:f6:21:0b:53:3e:26:
                    25:45:7a:9f:48:0b:64:a5:4d:e0:97:09:7f:32:e6:
                    a4:bd:9c:16:21:35:b3:44:be:52:27:ce:25:34:9c:
                    75:5a:14:3d:cd:c8:e0:6e:d1:4f:56:b8:b4:47:60:
                    7f:3d:fe:30:13:40:98:3c:43:44:8c:1e:3f:95:61:
                    6a:a4:5e:17:70:2d:3d:9a:c6:7e:a6:d7:a1:ce:c6:
                    b2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F8:ED:72:80:0B:F6:67:E2:3B:A9:DA:56:30:FF:53:56:FC:96:C4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10032EFAC86711F1BBA5700FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c5:b4:4b:2f:fd:59:7c:f0:01:6e:f5:29:2a:7d:cc:51:4f:
         7f:d0:36:9a:e1:40:d7:bc:5d:3c:36:bb:32:a1:a8:3e:85:83:
         43:c0:07:e7:2e:03:32:3b:7f:d4:ed:df:c4:82:6f:03:11:af:
         06:2a:7e:5d:77:de:6e:18:0e:ba:dd:16:d7:14:8f:98:36:86:
         21:89:c6:31:1f:9b:26:91:9f:d6:04:49:6c:e7:40:89:4c:40:
         58:a9:7e:7c:2e:6e:e4:f1:39:48:b9:44:19:31:aa:3d:ec:bc:
         62:03:42:e2:dd:da:e2:fc:ff:42:79:6d:7b:9f:f8:65:f2:4a:
         6c:a6:b6:10:45:10:2e:78:0e:bc:e4:12:02:aa:3f:c6:ba:62:
         7a:ee:e5:c4:3b:de:de:32:b6:6e:bd:d6:bf:95:17:d2:45:4c:
         c4:8d:f0:5d:7d:42:98:33:a8:84:64:5e:22:e6:2b:f3:80:0b:
         8e:fb:aa:6a:f7:39:78:f6:d0:6f:20:42:ea:5d:46:8a:9a:7d:
         f8:37:56:b3:a6:20:85:43:bc:55:43:55:f7:2b:20:ca:16:95:
         0c:a2:86:30:8e:27:aa:e5:c8:a6:a1:11:01:56:2f:0e:9c:9d:
         75:c3:ee:3a:30:74:4e:83:a8:89:b9:54:52:f4:a7:63:fe:12:
         88:83:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----