Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10DB09C6AC1D11F1A321DFA2CE1D38B0.roa
File:                     10DB09C6AC1D11F1A321DFA2CE1D38B0.roa (raw, json)
Hash identifier:          Nz/NZE8jCuPu1bQcWLCJbneIMYkQ0DM2konOqwUEtu0=
Subject key identifier:   ED:01:DE:A1:41:8F:13:91:09:7D:DA:05:81:06:13:77:EA:DA:A5:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D43D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10DB09C6AC1D11F1A321DFA2CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:07:06 +0000
ROA not before:           Wed 09 Sep 2026 07:07:03 +0000
ROA not after:            Fri 09 Oct 2026 07:07:03 +0000
asID:                     131471
IP address blocks:        156.238.64.0/24 maxlen: 24
                          156.238.65.0/24 maxlen: 24
                          156.238.66.0/24 maxlen: 24
                          156.238.67.0/24 maxlen: 24
                          156.238.68.0/24 maxlen: 24
                          156.238.69.0/24 maxlen: 24
                          156.238.70.0/24 maxlen: 24
                          156.238.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119869 (0x1d43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 07:07:03 2026 GMT
            Not After : Oct  9 07:07:03 2026 GMT
        Subject: CN=6aa1059a-a58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:cb:7f:97:a4:6d:b1:a1:3f:99:75:62:93:
                    da:51:37:b5:02:2e:79:7c:6d:8c:d5:d5:63:cc:75:
                    91:25:8c:cd:f8:d8:60:61:c2:a7:7a:11:92:69:07:
                    05:53:15:f1:e2:da:57:d0:f3:d6:7f:9e:81:2d:82:
                    a1:63:cb:4b:91:04:93:eb:c0:8c:c5:b8:65:c2:3a:
                    dc:88:16:f0:e7:6c:d3:3d:3a:54:d9:f7:c7:6c:e3:
                    7c:6e:07:a2:93:78:0b:ea:e9:e5:a7:92:56:b1:c8:
                    4a:bd:bd:8a:34:24:56:b2:c7:e8:f5:d4:98:e9:1e:
                    87:86:1b:65:8f:7d:29:ab:78:0f:da:3c:23:fb:bf:
                    bd:ad:38:92:04:50:8b:43:20:04:e3:4f:a3:5a:1f:
                    f1:75:11:fe:c1:e0:39:ad:8f:b4:05:fe:51:b3:9b:
                    18:48:ef:83:ce:c6:46:ea:76:41:1a:90:2d:0b:3c:
                    4f:75:92:8b:fe:37:65:45:59:ff:36:7e:29:e1:4e:
                    b0:d1:dc:27:f2:2a:da:1a:75:ea:e6:65:98:53:73:
                    8b:af:7c:f1:79:5b:5e:92:37:79:24:d1:36:93:53:
                    d6:43:95:5a:51:6c:24:89:e0:18:85:e5:36:b6:89:
                    ab:b6:5c:3f:59:aa:1c:75:bc:75:5b:37:fb:0c:89:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:01:DE:A1:41:8F:13:91:09:7D:DA:05:81:06:13:77:EA:DA:A5:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10DB09C6AC1D11F1A321DFA2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:52:9a:ee:65:5d:47:df:8a:66:df:eb:84:7c:5b:80:0d:
         ae:d5:dd:98:b1:3f:6c:51:2e:4f:a3:b6:9c:49:ec:ad:9b:13:
         8d:38:4b:56:47:34:2a:25:16:18:ad:ba:12:46:24:cc:72:26:
         69:44:40:cf:a1:61:91:89:15:b9:ee:00:d1:06:89:fa:28:b5:
         a8:c2:18:73:f8:cb:31:f3:57:3b:4a:68:a1:3a:d7:2d:22:17:
         74:31:1c:bf:96:d7:81:d5:0b:60:9d:10:fa:a9:32:04:8e:e1:
         c5:f9:ac:aa:1a:4c:cf:be:49:4c:2f:9f:05:f5:90:d4:23:14:
         d8:12:fa:74:44:f6:d0:57:ec:7a:e5:d4:b2:6d:5b:a2:c2:34:
         c9:cb:5b:e2:8c:33:30:63:10:15:5e:fc:7f:30:49:a4:19:a9:
         7e:76:69:b6:96:52:fd:cc:c0:af:a8:37:c1:71:d1:62:31:b9:
         7c:02:5c:c7:72:91:37:08:56:ad:6b:50:7d:c9:d7:6f:36:f5:
         fa:48:20:f2:9e:1c:cb:4c:9f:94:ff:f5:b0:b6:d6:a2:84:e9:
         4b:93:95:5a:ca:f2:0e:fc:0f:62:d7:5a:be:fb:47:44:91:73:
         04:54:0f:cf:3b:21:28:a1:06:8d:52:7a:41:eb:b1:08:18:49:
         c7:1a:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----