Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D32C1D29D4A11F1BCEE8E1ACF1D38B0.roa
File:                     1D32C1D29D4A11F1BCEE8E1ACF1D38B0.roa (raw, json)
Hash identifier:          oNMrZv9Bx+uKogGtk0x88Pmk6xo61r3ckzjF17ZaIOY=
Subject key identifier:   B8:DD:F2:72:B6:CE:48:D0:12:E6:88:88:06:31:6B:BB:C7:28:E0:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D32C1D29D4A11F1BCEE8E1ACF1D38B0.roa
Signing time:             Fri 21 Aug 2026 10:21:47 +0000
ROA not before:           Fri 21 Aug 2026 10:21:43 +0000
ROA not after:            Fri 09 Oct 2026 10:21:43 +0000
asID:                     214143
IP address blocks:        156.231.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118685 (0x1cf9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 10:21:43 2026 GMT
            Not After : Oct  9 10:21:43 2026 GMT
        Subject: CN=6a8826bb-0f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8f:10:bc:f0:96:eb:44:46:82:d4:3c:18:71:
                    30:0f:cc:63:df:04:06:5c:b5:76:aa:4a:2a:fa:16:
                    d0:7d:e5:c3:7c:6f:7f:d8:06:ec:f2:02:8b:75:72:
                    f6:51:d8:08:7b:52:a5:d3:3f:db:58:40:9c:2f:a2:
                    af:93:4e:aa:31:e0:95:56:76:de:0c:3a:4b:ec:10:
                    a6:3c:bf:7e:a5:ba:b7:8d:8f:e3:e5:2d:c9:a7:97:
                    29:bf:05:34:3d:d9:4f:c5:7f:51:ee:10:be:b5:58:
                    89:35:f8:00:db:8e:f2:d6:47:40:a2:06:0f:52:18:
                    f9:9a:5e:37:6a:35:29:76:c8:d4:c0:a5:9b:57:4d:
                    d4:9e:44:da:26:03:0e:3f:0c:86:bf:bd:97:1b:64:
                    4b:06:7a:b1:a9:58:27:ff:fe:8a:1f:a6:fe:5e:6b:
                    4d:5a:a1:4c:0f:c2:d6:bc:0d:b9:28:ff:0e:63:df:
                    f3:61:92:b5:60:1d:69:72:37:56:94:e4:33:3f:ac:
                    ca:ca:25:c3:7e:39:95:60:f0:e1:98:d3:8f:33:50:
                    9a:ff:d1:f8:b6:00:7d:a1:a9:55:df:86:4c:fe:f4:
                    c9:0b:ee:30:f8:76:d6:01:ed:e4:9d:08:3b:c4:01:
                    a0:8e:87:b7:b7:3e:d4:6b:77:b5:c5:03:aa:38:f8:
                    6f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DD:F2:72:B6:CE:48:D0:12:E6:88:88:06:31:6B:BB:C7:28:E0:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D32C1D29D4A11F1BCEE8E1ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:18:dd:32:58:36:02:59:96:ff:53:b3:1b:08:de:e0:3c:
         0e:06:9b:67:c9:b3:7c:0d:f0:43:b8:72:fe:c1:c5:4b:e6:64:
         a7:78:4d:52:f1:ee:de:f1:2b:f6:94:6e:14:94:e1:9e:e3:77:
         ce:df:93:af:55:36:0f:f1:dd:29:61:c9:77:2f:07:07:87:5f:
         dd:0c:b3:33:da:8d:e6:64:eb:70:36:21:29:df:af:f3:b3:96:
         25:49:d5:b3:e9:c3:d0:21:ef:1a:3f:ab:c2:21:f5:29:91:30:
         ce:1e:cd:52:e3:46:56:da:48:de:11:12:74:7f:a5:3a:a0:70:
         16:d8:c3:bc:76:55:e7:f5:0d:65:f7:64:3c:0b:f8:87:78:d5:
         6c:b2:22:82:d1:6f:99:39:e8:9e:58:58:2f:af:c7:86:0d:1f:
         63:f0:b8:48:dc:44:27:e4:ee:f1:29:3c:88:ee:a5:b6:db:80:
         d3:9c:6f:5f:8f:05:07:0c:da:f6:31:53:03:0f:14:64:92:6b:
         07:de:61:e0:43:88:88:e8:3f:97:4a:3f:27:99:99:b2:cd:d9:
         e3:9f:6d:6f:b7:b0:ed:2c:d3:e8:db:2c:d4:5a:f4:a6:a0:1a:
         74:5d:67:21:ef:6f:79:af:95:43:48:e8:a2:95:e3:06:f9:f4:
         a9:0e:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----