Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47FBC61ABD9911F19267CCF3CE1D38B0.roa
File:                     47FBC61ABD9911F19267CCF3CE1D38B0.roa (raw, json)
Hash identifier:          VO4QphzYgFraV71R6cEraZwIXZCI6Y6AW0Jm151t5G4=
Subject key identifier:   50:AF:8F:06:86:5F:D9:4B:F5:B6:90:0C:84:F8:68:6E:87:BA:56:35
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47FBC61ABD9911F19267CCF3CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 13:09:06 +0000
ROA not before:           Thu 01 Oct 2026 13:09:02 +0000
ROA not after:            Sat 05 Dec 2026 13:09:02 +0000
asID:                     13335
IP address blocks:        156.224.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121277 (0x1d9bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  1 13:09:02 2026 GMT
            Not After : Dec  5 13:09:02 2026 GMT
        Subject: CN=6abe5b72-2d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:24:5d:67:e6:79:2e:40:b2:4b:7e:39:f5:
                    14:f0:d0:72:ba:87:84:8b:f3:89:df:f3:5c:53:b1:
                    0e:bf:c8:cd:5a:59:36:87:c6:fc:16:f3:42:10:56:
                    5a:e1:1c:43:2c:1e:5c:b5:4f:13:7c:60:82:94:cb:
                    a6:98:73:53:9b:a6:ba:0e:92:dd:8d:1a:0d:bb:9e:
                    77:1a:59:8e:af:67:e0:1c:8f:1c:09:c7:cc:c2:d3:
                    b2:0f:59:04:68:c4:39:56:ef:51:cf:1b:94:10:6c:
                    72:d8:56:e6:8d:a1:68:d9:20:10:80:f5:56:3b:7b:
                    17:fa:f8:b8:96:03:82:8c:7c:b2:8a:80:9d:17:49:
                    29:84:ae:aa:19:55:b7:7b:9f:c8:1b:63:20:f4:19:
                    70:2e:dd:70:32:e7:93:3b:6d:32:e9:80:03:ff:f1:
                    54:e2:04:be:45:37:0a:80:8a:c2:80:88:30:ad:b3:
                    74:06:0d:ef:b0:8d:14:78:1d:6f:c7:47:9a:4f:f7:
                    b1:90:ac:97:88:ef:c6:57:da:f3:5d:b5:e0:18:64:
                    cb:ce:a6:60:81:3e:c0:24:de:71:77:49:3b:c5:cd:
                    56:1b:0e:a5:22:a6:6b:64:bc:4a:70:98:56:e8:d6:
                    4e:3f:d1:6b:3c:c9:e0:3d:d5:cf:a6:47:83:46:d7:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AF:8F:06:86:5F:D9:4B:F5:B6:90:0C:84:F8:68:6E:87:BA:56:35
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47FBC61ABD9911F19267CCF3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:8e:1e:fa:6f:24:92:6c:68:c2:4e:a8:d3:1f:b9:2e:c4:ec:
         0e:98:23:69:8f:b7:a1:02:ef:c4:8c:44:a8:4d:a0:13:e6:5e:
         55:17:d3:02:9d:77:64:8c:41:51:0b:5b:2b:1b:e2:08:63:6f:
         23:22:49:2c:47:0e:af:dd:74:8a:cd:7b:8d:c3:c0:11:bc:0e:
         14:b1:e0:51:b3:46:d2:5f:03:21:e0:aa:a4:3e:92:35:3d:06:
         98:ac:99:60:8b:7f:bc:e9:3d:08:41:7a:d4:8e:da:b2:97:a8:
         7b:c1:59:74:29:88:b5:06:a3:b9:06:82:4a:c6:2f:2c:bc:be:
         a1:26:57:22:c5:59:ca:f3:97:c6:4e:5b:f6:57:1a:4d:32:7f:
         19:c6:48:59:c2:18:0f:df:f6:70:ee:bb:c1:a7:af:6b:31:a0:
         a2:d4:de:f9:65:27:da:76:d8:07:3c:ed:90:5b:ee:a1:0a:20:
         0e:8e:b3:36:51:b2:44:13:83:ed:2b:4c:4f:d5:02:43:15:6d:
         4d:22:0b:48:dc:d9:9b:d7:54:2f:97:93:53:3b:cd:68:ba:7a:
         41:5b:c8:a4:44:11:02:5e:aa:a6:91:e4:21:75:51:d0:7f:bf:
         3f:bd:86:b5:0a:53:00:9b:aa:03:74:43:57:83:fe:66:82:66:
         66:16:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----