Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F6EB21E988C11F184CA1FDBCE1D38B0.roa
File:                     3F6EB21E988C11F184CA1FDBCE1D38B0.roa (raw, json)
Hash identifier:          vEBdD4KqhzVvqhKrlzSeomAckkZqa9JUOODXWPSu2jg=
Subject key identifier:   C8:EF:9C:79:49:C6:E1:AD:14:54:BE:B6:4C:D5:E3:FB:94:30:FC:04
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F6EB21E988C11F184CA1FDBCE1D38B0.roa
Signing time:             Sat 15 Aug 2026 09:32:35 +0000
ROA not before:           Sat 15 Aug 2026 09:32:31 +0000
ROA not after:            Tue 22 Sep 2026 09:32:31 +0000
asID:                     17561
IP address blocks:        156.235.64.0/21 maxlen: 24
                          156.235.80.0/21 maxlen: 24
                          156.235.92.0/22 maxlen: 24
                          156.235.124.0/22 maxlen: 24
                          156.237.96.0/21 maxlen: 24
                          156.237.108.0/22 maxlen: 24
                          156.237.112.0/20 maxlen: 24
                          156.242.32.0/20 maxlen: 24
                          156.251.80.0/20 maxlen: 24
                          156.251.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117978 (0x1ccda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 09:32:31 2026 GMT
            Not After : Sep 22 09:32:31 2026 GMT
        Subject: CN=6a803233-42f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:f8:c9:98:c6:64:ce:2f:4a:de:29:03:3c:
                    3e:49:d2:6b:24:ba:1a:2f:9d:c7:58:0f:69:0f:7b:
                    11:c5:b9:bc:ea:0d:7f:3d:4a:5b:b3:f7:33:cb:b5:
                    44:60:50:42:9b:d4:43:1f:ff:f1:b8:11:0c:5a:06:
                    d0:99:bf:43:4c:07:88:56:cd:fb:f9:f0:dd:57:d3:
                    d6:83:4d:d5:d6:9b:20:5f:31:9c:59:be:08:a9:e7:
                    12:97:60:95:7d:94:48:be:88:31:37:55:57:81:02:
                    09:99:c0:58:37:cf:bf:34:95:65:70:c4:23:22:43:
                    d6:15:71:3d:72:33:0b:ed:c0:f4:e4:e2:eb:34:83:
                    00:21:50:3e:83:c9:5c:f4:83:0d:02:d3:7b:f9:dc:
                    b5:f5:35:09:68:bf:ad:12:8c:17:cd:bd:fd:bf:7a:
                    e5:9f:6a:10:13:14:70:c7:30:7b:40:5e:74:11:06:
                    b7:ee:d1:12:ae:19:01:9e:27:4f:44:be:33:42:a0:
                    05:c9:9b:d6:eb:c4:73:23:ec:3a:e3:66:a8:ac:64:
                    7e:e2:73:81:e5:86:84:47:bf:90:29:2c:06:80:95:
                    95:06:ae:dc:bf:8a:b4:c1:cb:27:55:8b:df:a7:dc:
                    02:d1:ca:69:3b:f6:9a:e1:ec:f0:67:7c:5e:9c:ec:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EF:9C:79:49:C6:E1:AD:14:54:BE:B6:4C:D5:E3:FB:94:30:FC:04
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F6EB21E988C11F184CA1FDBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.64.0/21
                  156.235.80.0/21
                  156.235.92.0/22
                  156.235.124.0/22
                  156.237.96.0/21
                  156.237.108.0-156.237.127.255
                  156.242.32.0/20
                  156.251.80.0-156.251.127.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:86:5f:3b:b2:a0:2e:92:5b:b8:17:13:0a:3f:af:5b:23:09:
         4b:7a:c8:11:bf:cf:f1:78:39:d4:3a:b2:56:74:91:81:f1:24:
         6b:2b:42:ae:b2:f2:80:1e:b2:f8:bc:ad:21:8d:ce:a8:6b:70:
         5f:e5:e4:0d:07:fb:ae:37:0b:55:ca:14:7b:53:65:bc:a1:d5:
         0b:92:ae:76:a6:63:9c:37:0f:08:71:df:53:74:47:27:89:a2:
         f8:6b:33:48:ce:16:1d:0c:4c:30:13:03:fe:21:99:f7:16:91:
         ac:8c:65:90:7d:b2:80:45:0c:46:25:12:f8:cb:50:d9:28:c9:
         d3:b2:89:fe:50:e3:47:a1:37:8f:5e:34:aa:06:ab:d3:d6:85:
         90:90:59:32:f5:c3:6d:c0:0f:3e:e4:97:52:55:29:33:ed:8d:
         0e:82:56:6a:ba:2c:f5:02:32:f1:1d:f6:dc:e7:33:6b:d3:ea:
         61:d3:d8:d8:dd:0a:0e:93:92:46:4a:49:2c:99:56:c6:f6:ae:
         15:8f:fe:2d:a5:a0:16:67:2f:95:f1:b4:9c:ee:05:d8:9a:09:
         43:82:98:10:32:88:fb:d3:e3:7a:32:df:c8:31:a6:22:e4:38:
         6a:da:77:ff:aa:98:2a:73:58:c0:ec:4b:5b:7c:ac:a8:15:2c:
         72:a5:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----