Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F2BC546C53611F197ECDABCCE1D38B0.roa
File:                     2F2BC546C53611F197ECDABCCE1D38B0.roa (raw, json)
Hash identifier:          k7IB3Pr9Q7NRvwAhvk2gfINyFrPaEMlP8l1IjwIRioU=
Subject key identifier:   22:37:31:D6:67:5E:0E:64:82:30:99:0E:56:42:A3:1C:A3:8B:A5:B6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F2BC546C53611F197ECDABCCE1D38B0.roa
Signing time:             Sun 11 Oct 2026 05:39:54 +0000
ROA not before:           Sun 11 Oct 2026 05:39:49 +0000
ROA not after:            Tue 10 Nov 2026 05:39:49 +0000
asID:                     32167
IP address blocks:        156.226.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122013 (0x1dc9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 05:39:49 2026 GMT
            Not After : Nov 10 05:39:49 2026 GMT
        Subject: CN=6acb212a-245f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:e3:b8:ea:77:fc:5d:c6:39:28:46:15:f8:
                    80:33:b0:2a:18:fc:fa:e3:39:99:e9:c8:50:b8:bf:
                    c1:49:a1:41:1f:89:76:fc:a6:f3:56:4c:73:a7:64:
                    3a:bd:ec:f9:89:29:d2:8e:df:73:3c:0e:6a:e9:ac:
                    a3:35:fb:0e:f7:ed:c0:25:e2:6d:28:73:28:56:55:
                    bc:29:41:8b:0a:05:53:32:62:80:2d:19:bb:2c:a8:
                    1f:55:3a:0f:f8:db:97:a9:f6:86:5d:f3:a2:13:f7:
                    7b:29:71:f0:af:e5:24:a0:68:23:5c:75:a4:0c:3f:
                    5f:6e:37:1b:c6:a9:34:09:34:f1:2e:2b:80:d5:87:
                    05:f9:76:7b:a0:3e:40:d2:a0:f2:54:0f:22:c4:46:
                    28:ab:f0:5b:40:e0:c7:a8:87:60:44:c9:de:ef:97:
                    cb:c2:6c:f1:79:09:a4:77:d5:b3:c2:12:e1:17:4e:
                    df:2a:d0:fb:1c:09:b0:1e:77:c7:a9:57:c3:dc:dd:
                    07:6c:51:f1:f5:e1:b4:1b:70:2a:4c:49:2e:8f:46:
                    a1:dc:e9:4f:f8:1b:1a:13:d8:97:99:0a:78:f8:d4:
                    ab:af:59:e2:f8:8a:3e:29:11:89:13:d2:7b:a5:44:
                    38:ee:95:60:af:db:ef:bc:ef:b1:4c:d8:9d:ea:8e:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:31:D6:67:5E:0E:64:82:30:99:0E:56:42:A3:1C:A3:8B:A5:B6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F2BC546C53611F197ECDABCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:5b:af:6a:0e:21:b9:b0:25:2c:99:56:ca:6b:f4:fd:7c:12:
         df:ae:86:eb:1b:92:29:47:5e:91:15:14:3e:7b:61:8e:df:f2:
         aa:f4:3b:ed:03:af:52:98:f8:2e:f7:cb:a4:51:77:cf:87:db:
         ff:14:00:b5:75:c5:11:5b:5d:5c:20:a8:ed:07:65:3c:65:6f:
         ad:46:3a:95:f1:99:14:07:aa:66:57:17:11:ab:5b:b4:ef:c2:
         1c:ba:55:4b:4a:5f:50:27:65:6a:9e:73:f8:e7:3b:0e:0e:87:
         52:4b:9b:f8:c9:ec:16:9c:ed:fb:1f:6c:93:30:82:69:1a:d3:
         08:fc:a7:41:4e:20:d3:41:a9:26:37:31:03:6a:8b:37:eb:6f:
         b2:47:5e:c4:ad:5c:86:95:70:20:5a:01:f0:49:64:d3:87:07:
         2e:9a:54:fd:59:f7:d4:ab:e9:38:ba:61:f1:a3:0b:78:1b:fa:
         db:57:19:d6:76:b1:02:10:32:2c:e5:fe:c7:0a:7a:b4:b1:8f:
         72:26:c9:2a:bc:46:00:10:c6:23:a8:7a:5b:9f:3d:6f:fe:35:
         4a:f8:ad:95:49:ab:37:c3:5e:4d:a9:e5:94:ab:63:68:f1:91:
         ad:c4:cb:12:99:ab:6c:f2:98:05:37:0c:6f:32:35:d9:ed:7b:
         24:11:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----