Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C3B6BF89D2A11F1AE1C41DBCE1D38B0.roa
File:                     3C3B6BF89D2A11F1AE1C41DBCE1D38B0.roa (raw, json)
Hash identifier:          kAyV0NJegrlbyHUJipODCCG7+FGIS+8keC3flAY2Hh0=
Subject key identifier:   7F:2D:24:A2:20:AA:A9:EC:38:77:4E:1A:7E:A1:4D:B6:48:03:20:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C3B6BF89D2A11F1AE1C41DBCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 06:33:35 +0000
ROA not before:           Fri 21 Aug 2026 06:33:31 +0000
ROA not after:            Sat 19 Sep 2026 06:33:31 +0000
asID:                     398993
IP address blocks:        156.245.64.0/18 maxlen: 24
                          156.245.64.0/20 maxlen: 24
                          156.245.80.0/20 maxlen: 24
                          156.245.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118602 (0x1cf4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 06:33:31 2026 GMT
            Not After : Sep 19 06:33:31 2026 GMT
        Subject: CN=6a87f13f-9291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:74:ec:a7:73:00:31:87:31:6f:f1:58:fc:
                    61:75:a6:de:65:35:13:e2:34:d7:dd:55:88:b8:62:
                    b4:32:97:9e:1c:dd:13:5a:a1:00:d0:64:cf:91:db:
                    7d:93:a2:bf:4d:f7:57:0a:47:23:e7:d7:ab:fe:09:
                    d4:a4:d7:0a:18:26:d3:57:52:1d:fa:d7:74:20:4b:
                    1c:95:f2:80:85:c5:d8:d5:3f:b0:35:e7:44:2a:ae:
                    a3:11:c2:6f:62:4f:9f:4b:cf:2c:3b:34:3c:d3:9f:
                    5a:5e:12:d0:3d:ea:93:d3:58:02:56:9f:b6:e0:25:
                    98:2c:df:4e:4a:86:13:3e:01:a8:e1:d0:4d:ce:bf:
                    fd:5b:7e:6e:f7:05:b2:0a:ac:ee:ba:9f:77:71:3c:
                    9a:77:d6:23:f3:dd:69:73:bd:7f:59:7f:60:42:1a:
                    2a:0e:20:30:ad:16:a2:a0:45:c7:14:8d:a3:72:94:
                    23:d5:1c:f1:8a:ad:a0:02:0c:83:2b:10:be:aa:0d:
                    39:80:ac:9b:7b:8e:02:df:47:d1:27:ed:79:47:72:
                    65:06:d4:47:40:e4:42:a9:ae:41:b0:a9:7d:f7:fe:
                    87:36:b6:f0:61:e3:54:d0:2d:29:6c:f7:02:9c:47:
                    33:da:a6:59:f6:2d:ff:cb:aa:87:40:5a:70:61:a9:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2D:24:A2:20:AA:A9:EC:38:77:4E:1A:7E:A1:4D:B6:48:03:20:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C3B6BF89D2A11F1AE1C41DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:d6:ab:e9:3d:41:03:ac:64:54:fc:7d:fd:fc:90:94:ca:
         02:19:23:a9:17:2e:fc:0d:8f:9a:97:a0:ff:d6:a6:3f:02:6a:
         9f:8e:1c:79:8f:9c:50:04:6d:d7:47:82:69:80:c5:11:4b:2a:
         29:c5:71:bc:c5:a7:28:99:57:2c:76:cb:19:d5:e0:6c:6c:c3:
         95:76:8c:56:d1:b0:bc:35:96:08:b4:ce:6d:6f:8f:b1:29:66:
         73:67:04:f7:93:b2:28:90:71:51:b7:5b:09:ab:47:09:3a:24:
         8c:8a:24:56:91:c7:c6:e8:3f:d7:61:69:d0:dc:8b:11:04:64:
         7d:37:68:86:95:8e:84:79:ee:b3:34:7d:3d:90:3c:64:d5:66:
         59:c6:8a:ce:04:4e:5e:68:8c:78:02:83:2f:87:9f:d2:b0:c2:
         5b:d6:f5:63:b2:16:15:25:7e:02:fd:1c:59:e4:99:94:3f:1a:
         5a:fd:00:30:f4:91:e3:d6:a9:eb:ed:43:b0:c8:ad:d1:f0:f6:
         bc:9f:8e:65:d9:5a:74:7f:e5:4c:c2:5f:31:70:f2:fa:7d:41:
         b9:6e:29:81:2d:19:84:0f:ad:ba:d2:ca:dc:7e:fe:0e:67:68:
         6a:0f:0c:25:6b:d4:72:88:69:50:38:da:8a:0a:6a:a4:4f:23:
         89:82:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----