Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12C1A4E2A12911F19A944ECFCE1D38B0.roa
File:                     12C1A4E2A12911F19A944ECFCE1D38B0.roa (raw, json)
Hash identifier:          VKTIPjJYTatoK7pdiOUm77oQGK5Cn3eMWx7YxgqxikM=
Subject key identifier:   71:21:2B:3F:B5:F7:0E:77:69:D3:7F:B2:19:B0:9D:6D:56:48:AB:9E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D103
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12C1A4E2A12911F19A944ECFCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 08:35:21 +0000
ROA not before:           Wed 26 Aug 2026 08:35:17 +0000
ROA not after:            Sat 25 Aug 2029 08:35:17 +0000
asID:                     17561
IP address blocks:        156.235.128.0/24 maxlen: 24
                          156.235.129.0/24 maxlen: 24
                          156.235.130.0/24 maxlen: 24
                          156.235.131.0/24 maxlen: 24
                          156.235.132.0/24 maxlen: 24
                          156.235.133.0/24 maxlen: 24
                          156.235.134.0/24 maxlen: 24
                          156.235.135.0/24 maxlen: 24
                          156.235.136.0/24 maxlen: 24
                          156.235.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119043 (0x1d103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 08:35:17 2026 GMT
            Not After : Aug 25 08:35:17 2029 GMT
        Subject: CN=6a8ea549-38d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5f:c8:9d:1b:52:89:18:79:30:f6:38:f8:de:
                    e4:21:5f:9f:b9:09:d1:4a:db:69:1b:e2:25:45:66:
                    55:3e:32:86:a0:84:36:6b:0d:01:f4:c7:60:c3:58:
                    8b:8a:5e:94:c8:78:fc:04:f6:18:d8:6f:44:20:7e:
                    33:1d:2c:ec:43:d6:e4:72:9c:35:91:b5:7a:20:11:
                    71:49:6f:5e:f2:94:6a:2a:5a:54:47:b9:20:8b:14:
                    56:dc:e6:f0:e4:98:1d:71:96:42:4f:f2:76:99:57:
                    50:63:5b:a8:5b:2f:cb:45:91:07:c1:57:12:40:b7:
                    36:98:08:b4:f1:79:c5:8a:57:00:22:2b:e0:02:3d:
                    f3:2f:d7:f5:7e:60:a0:c4:db:47:28:f7:17:51:6a:
                    48:23:a8:6e:4a:2a:2b:8e:b2:2c:9e:62:f0:4e:6e:
                    77:89:87:4f:fe:c5:7e:07:52:6e:45:7e:b0:2e:24:
                    60:b6:fc:e8:74:10:13:5e:db:df:db:e9:d9:6b:d5:
                    a5:e5:16:e3:44:0c:80:fb:78:43:05:35:f3:ba:12:
                    df:69:ff:85:c1:28:8e:df:45:69:5e:02:63:7e:e5:
                    08:39:18:c3:54:44:81:bf:51:4a:44:b2:d8:1c:52:
                    f5:69:a8:fb:2c:b2:d9:62:88:ac:5e:33:48:fe:80:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:21:2B:3F:B5:F7:0E:77:69:D3:7F:B2:19:B0:9D:6D:56:48:AB:9E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12C1A4E2A12911F19A944ECFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.128.0-156.235.137.255

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:17:3d:f4:95:9b:99:39:81:1d:2e:08:10:b8:79:78:e4:
         f0:8a:a9:ed:51:eb:43:b5:09:3d:6f:92:a4:90:df:f8:cb:96:
         41:62:72:de:a6:77:42:e7:a7:17:83:bb:42:71:e1:06:b5:a0:
         d1:ea:42:a9:ad:b0:17:06:23:3c:28:7c:13:c4:0f:19:df:3e:
         2f:fc:af:7e:55:0b:8c:77:57:26:51:82:a8:4f:67:c7:95:52:
         6d:64:b2:af:46:bb:a3:0a:e5:04:0a:9a:56:d3:a3:b3:36:c9:
         a7:24:c9:56:5b:94:3c:b2:cc:26:a6:20:10:52:d8:f9:b6:64:
         41:f0:c1:92:95:10:f3:da:e4:66:a7:7e:ae:cf:37:a9:6b:dc:
         b6:bb:e0:b6:2d:31:f2:ba:26:3a:78:47:65:dd:6c:4a:83:e1:
         96:6f:d5:13:c0:58:3b:ca:e4:ea:b2:ca:23:1e:cf:4d:fb:89:
         6a:fa:2a:2b:29:65:2a:13:90:de:bc:42:de:f8:b4:09:2f:4d:
         1a:a2:7f:3e:ea:a1:23:da:b4:97:ef:b0:b2:12:7a:40:d0:a3:
         aa:83:25:b6:70:89:68:01:30:08:ef:6b:a7:a1:ff:8c:aa:05:
         0d:49:cc:19:45:35:3b:e0:f8:e5:5c:90:37:cd:c3:3b:2a:b2:
         ce:1c:00:37
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdEDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI2MDgzNTE3WhcNMjkwODI1MDgzNTE3WjAYMRYw
FAYDVQQDEw02YThlYTU0OS0zOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3V/InRtSiRh5MPY4+N7kIV+fuQnRSttpG+IlRWZVPjKGoIQ2aw0B9Mdg
w1iLil6UyHj8BPYY2G9EIH4zHSzsQ9bkcpw1kbV6IBFxSW9e8pRqKlpUR7kgixRW
3Obw5JgdcZZCT/J2mVdQY1uoWy/LRZEHwVcSQLc2mAi08XnFilcAIivgAj3zL9f1
fmCgxNtHKPcXUWpII6huSiorjrIsnmLwTm53iYdP/sV+B1JuRX6wLiRgtvzodBAT
Xtvf2+nZa9Wl5RbjRAyA+3hDBTXzuhLfaf+FwSiO30VpXgJjfuUIORjDVESBv1FK
RLLYHFL1aaj7LLLZYoisXjNI/oABjwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHEh
Kz+19w53adN/shmwnW1WSKueMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMkMxQTRFMkExMjkxMUYxOUE5NDRFQ0ZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAec64ADBAGc64gwDQYJKoZI
hvcNAQELBQADggEBAG6ZFz30lZuZOYEdLggQuHl45PCKqe1R60O1CT1vkqSQ3/jL
lkFict6md0LnpxeDu0Jx4Qa1oNHqQqmtsBcGIzwofBPEDxnfPi/8r35VC4x3VyZR
gqhPZ8eVUm1ksq9Gu6MK5QQKmlbTo7M2yackyVZblDyyzCamIBBS2Pm2ZEHwwZKV
EPPa5Ganfq7PN6lr3La74LYtMfK6Jjp4R2XdbEqD4ZZv1RPAWDvK5OqyyiMez037
iWr6KispZSoTkN68Qt74tAkvTRqifz7qoSPatJfvsLISekDQo6qDJbZwiWgBMAjv
a6eh/4yqBQ1JzBlFNTvg+OVckDfNwzsqss4cADc=
-----END CERTIFICATE-----