Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E287944C4A611F1AAEE9C0ACF1D38B0.roa
File:                     3E287944C4A611F1AAEE9C0ACF1D38B0.roa (raw, json)
Hash identifier:          f1cO8JdohSEaJX6aUKfEp3IJ58UlfLRQekC9143v9HM=
Subject key identifier:   0F:C3:88:0F:A6:EC:21:BA:AC:7F:3F:73:59:40:19:B5:54:EA:18:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E287944C4A611F1AAEE9C0ACF1D38B0.roa
Signing time:             Sat 10 Oct 2026 12:29:31 +0000
ROA not before:           Sat 10 Oct 2026 12:29:26 +0000
ROA not after:            Tue 17 Nov 2026 12:29:26 +0000
asID:                     22773
IP address blocks:        156.238.154.0/24 maxlen: 24
                          156.238.155.0/24 maxlen: 24
                          156.238.156.0/24 maxlen: 24
                          156.238.157.0/24 maxlen: 24
                          156.238.158.0/24 maxlen: 24
                          156.238.159.0/24 maxlen: 24
                          156.238.160.0/24 maxlen: 24
                          156.242.17.0/24 maxlen: 24
                          156.242.18.0/24 maxlen: 24
                          156.243.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121982 (0x1dc7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 12:29:26 2026 GMT
            Not After : Nov 17 12:29:26 2026 GMT
        Subject: CN=6aca2fab-2652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:89:b6:63:ac:9c:df:f4:2c:36:83:dd:f9:
                    ab:fe:01:25:79:df:f2:7c:91:b2:eb:47:71:a5:c4:
                    42:f0:24:cc:6a:5a:1a:59:f1:23:9d:19:44:76:e3:
                    cb:a4:76:dd:de:16:fc:84:05:9b:1e:47:e5:c4:0f:
                    be:49:b5:10:6a:c4:98:b0:9d:f5:65:b6:d4:06:d3:
                    f9:c2:eb:e2:07:59:a4:82:f9:9a:d7:18:e6:5d:01:
                    ab:9d:60:de:f1:6d:20:2b:fe:8e:ff:32:bc:b9:f6:
                    18:c0:5e:f3:da:ef:5b:35:85:1a:57:df:2b:50:da:
                    ec:8f:07:ca:61:6d:3e:45:09:42:fc:f6:4b:89:4f:
                    60:e3:1d:2d:a9:6e:32:39:69:1c:ed:26:b8:6c:10:
                    f3:fc:7e:7d:68:3f:ed:23:e7:bf:be:a8:54:24:a1:
                    2c:5b:77:a2:6a:de:3a:d1:0b:c8:de:d7:5a:89:e2:
                    b8:3d:89:08:2f:9e:77:f0:a8:c0:2a:58:58:f1:4d:
                    8f:8a:6a:63:b7:eb:89:f0:30:d6:ba:2e:86:64:2f:
                    ac:3b:87:dc:06:85:5e:9a:c6:f4:63:9c:53:29:f8:
                    f0:78:e1:e0:c4:63:94:68:67:d6:dc:5b:2b:25:0e:
                    fa:9b:84:47:80:f0:19:ae:99:e1:12:f3:83:60:cb:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C3:88:0F:A6:EC:21:BA:AC:7F:3F:73:59:40:19:B5:54:EA:18:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E287944C4A611F1AAEE9C0ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.154.0-156.238.160.255
                  156.242.17.0-156.242.18.255
                  156.243.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:74:23:4e:8d:1a:32:e7:b2:f1:d2:e1:45:b3:e3:ba:a5:41:
         d1:b8:0f:25:4f:d0:92:02:36:3a:f3:62:92:f1:a6:ff:16:b7:
         65:5e:95:54:a0:b9:25:d1:a6:94:9c:2a:ac:4d:f3:17:59:0b:
         17:30:0e:80:82:54:09:60:e5:1f:aa:1b:cf:90:76:d5:5f:40:
         74:cb:e4:37:6e:6b:b2:f1:f0:78:d3:cf:6a:a8:be:b4:26:6d:
         73:13:60:dd:ce:65:45:46:c3:41:6a:cd:ce:6a:26:78:99:ba:
         f5:b4:25:3c:2a:26:89:ac:6d:e9:46:29:84:a3:24:fd:6f:de:
         6f:54:25:ec:fb:a1:7b:41:82:78:de:41:04:6a:d5:c2:c2:2c:
         d3:4d:40:bf:77:dc:d5:4a:42:a3:5a:c2:72:72:03:ba:3a:2f:
         ac:a4:6d:8a:f2:a9:a7:15:16:d0:26:08:72:a1:fa:a7:31:44:
         fe:c2:63:48:98:8d:fe:74:14:b5:57:4c:6b:6b:f0:83:a4:1c:
         dd:41:e6:9e:64:04:1c:e8:29:7e:51:f6:c3:af:e4:ce:70:ca:
         b3:21:fc:9f:01:b3:9b:71:e8:9b:b8:59:3a:f7:3c:9a:e8:25:
         20:be:a5:e3:0d:92:8a:ce:59:d5:69:c5:04:d1:ff:52:22:c0:
         4d:19:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----