Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F3826BABB1211F18918E6FBCE1D38B0.roa
File:                     3F3826BABB1211F18918E6FBCE1D38B0.roa (raw, json)
Hash identifier:          5fk3H6tg5E61/FX7a3YSLqJVv46oASHzUPhvXNfHbI8=
Subject key identifier:   B1:47:67:CC:A9:A5:04:66:4E:F1:4D:95:D2:87:3D:6C:26:F9:BB:53
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D94C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F3826BABB1211F18918E6FBCE1D38B0.roa
Signing time:             Mon 28 Sep 2026 07:57:27 +0000
ROA not before:           Mon 28 Sep 2026 07:57:23 +0000
ROA not after:            Wed 04 Nov 2026 07:57:23 +0000
asID:                     64013
IP address blocks:        156.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121164 (0x1d94c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 28 07:57:23 2026 GMT
            Not After : Nov  4 07:57:23 2026 GMT
        Subject: CN=6aba1de7-ac1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:4f:cd:62:9f:f4:21:75:46:f8:9e:16:1f:
                    d2:b4:f2:37:48:88:52:ab:8a:ee:a7:15:3d:3d:9c:
                    0f:6e:1a:38:b8:d0:bc:dc:46:da:ad:88:31:ea:4b:
                    7c:66:5c:82:2c:14:f8:1f:df:33:38:7b:5c:b8:1a:
                    a7:b7:5a:8c:ba:ef:f0:91:dd:72:e4:15:17:83:63:
                    06:64:2b:cd:f3:88:47:a4:b3:c3:5c:33:3d:8b:90:
                    42:4b:01:ff:ab:e9:f5:55:dc:0d:fc:76:69:19:4c:
                    d5:95:9e:55:63:2b:cc:14:22:55:a7:15:b8:f3:81:
                    08:5b:af:b8:bc:1c:08:50:f3:14:46:31:02:9c:b4:
                    ef:51:6a:25:e2:bc:6c:f8:6b:eb:ec:94:52:19:f6:
                    2b:9e:15:08:f3:68:28:26:f2:d6:68:2d:13:66:1b:
                    a7:69:00:d0:00:45:fe:b9:f7:5a:f0:7a:43:1d:49:
                    8d:c7:fc:c9:45:ca:d8:86:b5:cb:5b:0b:74:e8:9b:
                    1f:49:32:e7:72:b9:49:48:c7:47:44:71:18:15:02:
                    c4:a3:8b:30:f7:91:0f:12:a7:85:ea:31:cb:e4:fc:
                    da:7e:f7:9c:4b:cd:06:02:14:3e:f6:34:ab:b7:79:
                    fc:e9:2d:39:6a:ea:e3:ef:e6:a8:19:86:b0:88:8d:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:47:67:CC:A9:A5:04:66:4E:F1:4D:95:D2:87:3D:6C:26:F9:BB:53
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F3826BABB1211F18918E6FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:f9:e6:c2:5b:bc:53:d9:08:4f:5d:8d:38:b8:46:93:3c:f6:
         1a:33:21:21:ff:2d:d6:0b:60:33:2f:d8:07:91:63:24:d7:1d:
         78:76:cb:53:23:fb:85:5c:08:fc:a4:62:bc:7f:2d:6e:b4:f9:
         57:31:c7:53:15:26:af:bc:da:d1:5d:68:27:34:bd:5b:14:ec:
         e6:7e:6c:b7:af:57:f6:d1:57:7a:6d:6a:43:38:3a:40:45:6b:
         14:3e:2f:7c:d7:6d:2a:50:e1:89:09:0e:3c:05:89:a9:c8:24:
         c2:fa:57:76:6e:8b:67:35:0a:4e:86:ea:75:7c:22:df:8b:5a:
         49:ad:7f:85:5b:c6:f7:ad:ae:56:3c:c7:e8:b7:99:f4:9b:cc:
         1f:a5:cb:a5:b1:b3:e7:66:e4:28:2e:0b:aa:dd:9a:28:81:19:
         e0:a6:f4:2e:25:9e:d1:0d:53:d7:f0:e1:1d:49:af:7d:79:78:
         77:50:d3:a9:b8:13:1e:e3:c7:f3:5a:96:c1:cd:b4:60:c8:ea:
         d9:6b:2e:1b:bb:07:c6:13:96:64:78:5e:09:e5:32:f4:37:d8:
         b0:81:02:2d:08:ca:c5:38:b6:d5:b1:3d:28:47:3e:81:e9:f0:
         9f:f9:9a:df:f2:4e:9f:2d:ad:be:ed:7b:02:ed:ac:9f:d6:4b:
         2d:e6:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----