Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129EB0CAA1DF11F193034CA4CE1D38B0.roa
File:                     129EB0CAA1DF11F193034CA4CE1D38B0.roa (raw, json)
Hash identifier:          vUaKx9vCVqsqp3iiK37GbtdFEtaTdPWbpG2LrlZPqog=
Subject key identifier:   A9:DC:BC:2C:36:17:F0:92:B3:15:A8:F8:9E:A8:72:A2:E6:88:F2:91
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D169
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129EB0CAA1DF11F193034CA4CE1D38B0.roa
Signing time:             Thu 27 Aug 2026 06:18:09 +0000
ROA not before:           Thu 27 Aug 2026 06:18:05 +0000
ROA not after:            Sun 04 Oct 2026 06:18:05 +0000
asID:                     16509
IP address blocks:        156.254.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119145 (0x1d169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 27 06:18:05 2026 GMT
            Not After : Oct  4 06:18:05 2026 GMT
        Subject: CN=6a8fd6a1-911c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:6b:37:cb:4c:48:40:8f:c4:7c:43:87:6d:
                    ef:b6:02:a4:a1:9a:6b:b4:89:39:40:bf:47:62:ac:
                    bd:33:90:aa:36:1f:b7:25:e2:26:ee:d8:34:24:4f:
                    e2:7e:40:5f:69:37:3a:8d:df:a6:67:42:ab:1c:2c:
                    6e:cd:99:96:93:13:5e:fc:06:09:81:ed:35:e0:62:
                    ff:0a:0a:c7:83:42:93:92:0f:06:bb:9e:78:e0:8f:
                    3a:53:21:7c:57:18:ad:a2:4c:ea:02:2f:ab:d0:ec:
                    8a:32:83:a4:8c:29:44:30:c1:c1:ea:f4:7a:3f:62:
                    23:1c:53:0b:46:92:d0:58:9a:2d:72:f2:13:8b:75:
                    4c:69:55:0b:9d:48:33:49:d5:b4:77:43:8f:20:97:
                    a7:1d:f4:c9:3b:9b:82:05:84:e1:49:66:2f:e3:08:
                    ef:e6:de:f6:2b:32:39:54:0d:8c:11:2b:d0:a8:02:
                    81:d3:e0:23:af:23:b3:dc:88:75:d2:6c:2f:50:7f:
                    31:45:14:82:c7:14:84:6c:3f:5f:cc:bb:10:28:32:
                    f8:dc:30:94:d3:0c:2d:61:5e:2c:db:e1:36:3c:01:
                    f1:f6:2b:87:a1:bf:b6:84:cb:df:a7:ed:e3:bc:3d:
                    4b:4e:75:29:a7:f7:c5:02:32:33:41:d2:2c:17:1b:
                    38:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DC:BC:2C:36:17:F0:92:B3:15:A8:F8:9E:A8:72:A2:E6:88:F2:91
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129EB0CAA1DF11F193034CA4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:75:84:ca:7c:2b:ab:81:c0:99:8d:93:28:65:81:04:28:bc:
         6b:b4:70:4d:0e:a6:a0:0f:d5:32:5e:8d:2b:a0:50:c1:23:f9:
         9f:aa:e2:0e:d0:d6:fe:e9:2e:11:0b:38:7f:02:21:b6:e9:f5:
         6e:8a:9b:74:5f:c2:f4:28:bf:b9:55:45:69:07:fe:19:9f:a9:
         a7:48:9a:15:ff:fa:32:54:d9:c9:e1:52:b2:f9:7e:66:3e:ad:
         03:e5:56:4a:20:2d:5b:63:5d:ce:bd:6c:76:67:4e:bd:4c:db:
         6d:51:6b:0c:ed:c8:e9:20:50:de:32:2d:15:4b:4d:8d:65:0f:
         8b:e4:7d:78:00:a9:84:dd:96:d2:e4:4e:8a:cd:72:72:92:17:
         56:65:98:92:83:10:c1:66:0c:32:cd:63:ef:d6:7d:c4:b1:ef:
         07:49:04:85:61:6d:d8:b3:4b:09:c7:06:72:88:20:7d:05:55:
         e7:29:09:7d:b7:51:6d:13:86:2e:9b:07:7c:9f:4b:36:53:a3:
         1e:3b:e4:d5:83:74:37:ca:4b:ab:a5:2f:20:e6:af:55:3f:eb:
         00:6e:e4:77:91:72:41:2a:89:86:81:b9:47:18:f7:7e:00:59:
         83:ff:a5:4c:cd:6c:96:cf:95:2f:58:bf:7f:bd:b8:bc:f1:c0:
         32:00:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----