Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CBAA0CA38111F199265905CF1D38B0.roa
File:                     29CBAA0CA38111F199265905CF1D38B0.roa (raw, json)
Hash identifier:          GiB9LTAuWq8p6YSHz4xyaofAtvh+GiFciQPVJkosSCE=
Subject key identifier:   57:CC:6A:57:F3:15:B7:9E:EE:79:46:BA:A4:16:7B:D0:D9:C9:48:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CBAA0CA38111F199265905CF1D38B0.roa
Signing time:             Sat 29 Aug 2026 08:10:57 +0000
ROA not before:           Sat 29 Aug 2026 08:10:54 +0000
ROA not after:            Mon 05 Oct 2026 08:10:54 +0000
asID:                     20326
IP address blocks:        156.246.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119260 (0x1d1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 29 08:10:54 2026 GMT
            Not After : Oct  5 08:10:54 2026 GMT
        Subject: CN=6a929411-5007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:49:19:cb:50:57:92:01:41:35:d6:ff:cc:
                    90:c2:b6:d7:12:cd:ea:41:48:f4:56:27:67:66:76:
                    2c:4e:dc:31:e2:9b:b8:06:ca:2f:43:a1:63:65:58:
                    55:87:99:f1:4a:6b:79:54:44:ff:aa:7b:3f:1e:69:
                    6d:3c:14:ca:fb:69:c2:6e:d9:c3:ea:6c:9f:73:b6:
                    7b:9c:a5:3e:4f:e9:bd:4a:69:60:97:02:36:c5:95:
                    1d:90:df:87:ff:32:b9:08:8b:cb:90:fa:b2:3f:1f:
                    1b:77:1f:74:ef:9b:15:96:96:fd:9c:62:87:55:e6:
                    5d:84:d5:3c:b3:46:eb:ab:23:8a:11:c6:d0:87:d7:
                    b1:9b:8a:34:0c:95:5f:33:b8:ed:49:42:c6:1d:da:
                    b3:a9:24:dc:1e:2f:70:ce:0d:8c:9b:a4:36:57:9d:
                    d6:49:96:14:0b:6c:ad:92:aa:42:8e:d3:f8:46:85:
                    0b:c4:71:68:0a:af:13:2c:2a:61:b4:32:6e:e3:62:
                    a5:88:48:9d:ec:51:d2:51:85:dd:40:8f:79:30:2c:
                    66:17:01:c9:55:5e:ac:fe:fb:b8:75:02:33:bb:64:
                    58:0e:0e:b0:d6:70:fa:89:80:45:17:f9:8e:12:a7:
                    8a:b2:d9:4e:64:99:da:89:0f:8c:1b:7c:36:27:4a:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CC:6A:57:F3:15:B7:9E:EE:79:46:BA:A4:16:7B:D0:D9:C9:48:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CBAA0CA38111F199265905CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:09:17:ea:11:f9:bf:99:3a:fc:ce:a9:4e:ee:5f:77:7c:
         38:7c:22:43:aa:f9:4a:06:89:c3:a4:75:eb:88:62:cb:0b:7a:
         2d:7b:9d:8c:f3:02:ea:18:32:76:d2:37:1e:45:0b:ee:1e:45:
         78:d5:b5:57:fa:f9:e6:c2:0d:f4:17:00:45:45:fb:f7:1a:23:
         4a:3e:10:73:a0:7a:8f:4e:51:1f:64:cd:6b:33:7f:e0:03:b5:
         3d:e8:0b:8d:d4:81:0a:51:ad:f2:ad:83:f4:57:c2:f8:63:d2:
         3c:5a:a9:49:c0:7b:71:27:97:e1:c7:b8:17:a6:72:3b:2b:46:
         1a:d1:7b:a9:96:2f:2e:32:d0:55:58:67:ed:22:4d:d9:fa:6a:
         d8:b7:9c:51:23:6c:ab:06:a6:52:73:c6:52:d1:37:1e:af:04:
         27:8e:e5:4f:e8:37:31:34:35:62:d1:49:3f:2e:f6:74:0f:bf:
         f8:fd:da:0f:1e:f8:43:4d:08:85:1a:5d:13:ab:fd:fc:85:01:
         b5:d7:40:03:b7:43:bc:e9:41:74:44:04:f8:4b:08:59:9c:cf:
         78:f9:ab:27:f0:59:33:fb:2c:e9:8a:6d:11:fc:04:15:0c:ea:
         fb:33:91:12:37:81:b6:92:0f:cf:1d:06:e3:7e:87:c4:bd:60:
         dc:6d:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----