Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CA25DCA2AF11F1AACADF0FCF1D38B0.roa
File:                     48CA25DCA2AF11F1AACADF0FCF1D38B0.roa (raw, json)
Hash identifier:          vGEvPvmK412tPI7eWAJsNcmOOcLHwsC9nAJcdll6zpg=
Subject key identifier:   12:3B:30:63:CA:4E:A8:4C:96:0A:5E:03:F6:71:AC:55:39:F1:5B:04
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D189
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CA25DCA2AF11F1AACADF0FCF1D38B0.roa
Signing time:             Fri 28 Aug 2026 07:08:35 +0000
ROA not before:           Fri 28 Aug 2026 07:08:31 +0000
ROA not after:            Tue 29 Sep 2026 07:08:31 +0000
asID:                     61461
IP address blocks:        156.231.192.0/18 maxlen: 24
                          156.236.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119177 (0x1d189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 07:08:31 2026 GMT
            Not After : Sep 29 07:08:31 2026 GMT
        Subject: CN=6a9133f3-f42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:82:2b:53:e7:70:d2:bf:5f:e6:27:14:82:
                    dc:5e:88:dd:33:81:00:ec:c8:bf:3b:bc:90:16:86:
                    e2:85:c8:1a:d2:32:84:e6:e0:b6:a3:24:1b:2c:e8:
                    7f:f0:5e:9b:13:3e:43:19:52:a0:d3:c0:a6:8c:8e:
                    97:bb:68:ea:f4:68:5a:2d:e6:36:c8:9c:ce:b2:44:
                    ae:54:01:fe:85:c0:00:20:3f:8c:93:3c:06:44:23:
                    8a:3a:ed:2b:8e:3d:7d:42:79:cc:0f:ff:45:17:29:
                    4b:a7:2f:66:3b:cc:d2:7c:99:24:9b:f3:dd:1f:26:
                    f6:1d:72:ac:ec:bb:ca:26:c4:01:74:0e:22:8b:f5:
                    05:26:b5:79:ba:ff:45:ee:47:8d:71:68:54:2a:6b:
                    e8:a5:c6:e3:81:60:57:e4:cc:ac:ee:ff:58:a0:a9:
                    d8:30:87:e5:ca:7f:90:55:68:ce:c8:41:3b:da:29:
                    ea:03:03:52:70:f9:b2:40:42:d9:13:10:a2:95:65:
                    d3:c7:75:27:16:53:cf:28:a2:72:e4:28:46:c2:34:
                    40:bb:65:ce:88:e7:91:f6:b1:e6:d1:fc:cc:d0:d3:
                    e1:43:d7:f5:8b:d9:d8:18:c0:bb:81:ce:ad:5a:cd:
                    83:38:53:41:e4:69:ae:3b:90:51:12:83:97:e7:c9:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3B:30:63:CA:4E:A8:4C:96:0A:5E:03:F6:71:AC:55:39:F1:5B:04
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CA25DCA2AF11F1AACADF0FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.192.0/18
                  156.236.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:e6:b2:03:61:38:b8:02:62:d6:fe:6d:7a:b7:57:34:f2:
         df:cb:3c:cc:21:7c:58:8c:26:95:80:30:26:3d:9e:23:0a:68:
         62:bf:80:3e:8e:9a:e1:95:48:da:2d:f8:af:1d:7b:05:ef:51:
         0e:7b:1a:d2:7b:d0:8c:4b:66:2e:8a:c9:ba:70:23:9e:2f:c5:
         bb:39:d1:36:a7:bf:61:1a:e3:43:07:7a:1c:51:7e:c2:66:3e:
         76:8b:82:85:69:12:f8:ae:7a:87:c7:3e:f4:79:5e:0e:f5:e8:
         f2:14:96:22:c9:0d:83:e2:fb:07:c3:94:22:87:b1:9d:ae:2f:
         5e:3b:4e:1c:2f:76:2f:84:6f:51:69:30:cf:a9:32:96:d9:4d:
         43:c5:c1:04:bb:64:1d:dd:68:87:77:a3:97:ab:1c:85:5c:a4:
         5c:b9:30:7c:bb:42:13:88:ee:08:3b:ae:c0:e2:4b:17:9b:8e:
         5e:06:1b:a0:a3:6d:ce:eb:24:00:02:d4:ec:e9:b0:50:1b:6d:
         d4:1e:a4:4f:56:06:a7:de:ce:d0:d4:a9:fd:cd:e5:45:cf:6b:
         dd:fa:69:54:e3:ca:ee:b0:8a:24:72:b8:63:b2:a2:86:63:da:
         30:e8:e1:e0:5c:f2:97:5b:18:31:ff:6f:5e:b1:ae:28:4c:12:
         17:2a:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----