Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31BCA02896E711F1B273C2E0CE1D38B0.roa
File:                     31BCA02896E711F1B273C2E0CE1D38B0.roa (raw, json)
Hash identifier:          NaBQOdWoaTz1unG7aY0GxJO8kelapEhsMv7huJlKpGg=
Subject key identifier:   49:D9:43:46:C2:04:3F:E5:41:07:9C:95:AA:48:8B:10:CC:CD:D7:26
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31BCA02896E711F1B273C2E0CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 07:18:34 +0000
ROA not before:           Thu 13 Aug 2026 07:18:30 +0000
ROA not after:            Thu 03 Sep 2026 07:18:30 +0000
asID:                     17497
IP address blocks:        156.255.22.0/24 maxlen: 24
                          156.255.23.0/24 maxlen: 24
                          156.255.24.0/24 maxlen: 24
                          156.255.25.0/24 maxlen: 24
                          156.255.26.0/24 maxlen: 24
                          156.255.27.0/24 maxlen: 24
                          156.255.28.0/24 maxlen: 24
                          156.255.29.0/24 maxlen: 24
                          156.255.30.0/24 maxlen: 24
                          156.255.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117851 (0x1cc5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 07:18:30 2026 GMT
            Not After : Sep  3 07:18:30 2026 GMT
        Subject: CN=6a7d6fca-accd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:cc:9e:6b:51:c5:3e:7c:d9:af:2b:4c:53:
                    29:3d:26:91:63:66:6b:1f:43:db:ef:d2:b1:86:b8:
                    0c:1f:6b:e8:a9:ed:e9:02:c5:e7:2a:51:c5:ae:da:
                    38:fe:9f:a5:e6:52:ea:da:16:a2:c8:56:83:f3:06:
                    57:d0:54:0e:28:f1:26:b0:31:34:19:a4:25:62:4c:
                    d2:80:4d:23:39:65:1d:20:4d:b6:c1:67:96:2e:1f:
                    cd:bd:bc:09:49:93:35:ad:2c:3d:68:94:98:e0:f5:
                    47:f5:5a:b6:92:75:55:00:b1:a3:da:de:d7:ef:1d:
                    5a:58:4c:62:c8:5a:12:3b:03:95:32:b8:c9:0e:31:
                    fd:26:5d:75:c7:f0:18:aa:3f:91:cb:50:84:b8:cb:
                    63:e5:34:06:be:ec:1d:ee:fb:fa:bf:7a:06:33:e2:
                    da:73:15:0f:1b:18:44:a0:13:31:c1:db:82:4a:84:
                    5a:c1:20:d4:91:50:74:ee:40:f2:5d:0c:5a:11:d5:
                    40:35:32:dc:e8:8a:f7:e0:d2:aa:e6:d5:69:d4:9e:
                    32:b9:23:5c:11:a3:e7:73:db:7a:d4:a9:bf:50:e7:
                    c2:de:5d:75:70:74:eb:41:5b:59:8b:ca:9e:74:03:
                    a1:8c:5a:f6:9b:d2:7e:34:3b:9c:25:2c:b2:4b:02:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D9:43:46:C2:04:3F:E5:41:07:9C:95:AA:48:8B:10:CC:CD:D7:26
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31BCA02896E711F1B273C2E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.22.0-156.255.31.255

    Signature Algorithm: sha256WithRSAEncryption
         6c:9d:75:55:67:fa:00:54:8c:60:0a:eb:7a:d4:33:17:01:e6:
         41:e2:fa:b9:f5:02:25:78:64:9a:f5:37:17:11:ac:3d:a9:36:
         55:2e:8d:44:e9:4a:76:0f:fa:4c:6d:e7:d0:fc:fa:d8:31:4b:
         3b:82:6e:a3:63:ea:5c:ab:42:3c:7f:ec:cb:48:81:16:40:69:
         03:70:66:9a:c5:ac:18:18:6e:0b:b7:09:b9:11:b5:3c:e3:d3:
         c0:24:ab:75:a8:12:03:23:17:3f:2c:19:eb:35:7d:f2:6c:90:
         7f:ec:fe:4c:fd:82:d6:a3:e1:ca:45:dc:67:b2:3b:be:c1:c2:
         4b:fc:b5:c8:fe:bb:44:df:2a:c9:e0:71:8d:86:20:28:7d:b9:
         14:a4:b9:ec:16:76:16:ec:c1:c7:98:f5:50:45:e7:16:68:e6:
         16:32:02:63:dc:14:53:c5:d2:04:04:e6:77:20:af:3e:b7:50:
         50:6f:9c:f8:1b:81:ca:63:a1:4b:fa:2c:f2:25:e9:2f:a6:6c:
         80:6a:f1:fb:55:cd:74:c3:94:8b:d9:02:9f:7c:b4:c0:39:8d:
         3b:d9:c8:90:1f:38:63:13:c4:38:c2:d3:93:6e:68:b8:65:2b:
         9a:f5:a8:39:e3:a4:dc:42:e3:e0:83:65:1c:14:ae:de:0a:72:
         3f:02:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----