Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52FB1DA69D3011F19AE71801CF1D38B0.roa
File:                     52FB1DA69D3011F19AE71801CF1D38B0.roa (raw, json)
Hash identifier:          N+pmKqYHpgagqsxxrB0375QdKVnvOoRCgHY3mQN//iU=
Subject key identifier:   65:17:91:75:B3:B7:80:57:0F:89:53:B9:DE:25:F3:43:AE:49:6C:D1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52FB1DA69D3011F19AE71801CF1D38B0.roa
Signing time:             Fri 21 Aug 2026 07:17:10 +0000
ROA not before:           Fri 21 Aug 2026 07:17:06 +0000
ROA not after:            Sat 19 Sep 2026 07:17:06 +0000
asID:                     55020
IP address blocks:        156.241.128.0/18 maxlen: 24
                          156.241.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118623 (0x1cf5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 07:17:06 2026 GMT
            Not After : Sep 19 07:17:06 2026 GMT
        Subject: CN=6a87fb76-3622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:50:19:83:e7:9e:8e:1c:39:95:f2:a4:16:
                    a5:9d:39:be:28:6f:97:e4:4d:35:fc:1d:33:3f:2e:
                    dc:de:d1:38:73:92:c4:63:d9:01:24:b2:db:d5:0a:
                    38:ca:b3:31:85:13:4e:a2:2a:fd:32:95:dd:b3:e6:
                    77:bd:57:9d:b0:5a:0f:3a:4c:08:eb:22:5c:73:1b:
                    5f:10:7f:90:db:e3:85:f4:41:96:22:b5:63:1a:52:
                    b7:98:32:d9:0d:1d:ff:86:77:d6:6a:9f:a3:d3:1d:
                    dd:8d:ef:a6:05:31:dc:89:82:92:55:31:41:37:a7:
                    a5:e4:c1:06:bf:a3:6e:e6:03:05:b9:1f:df:af:d2:
                    fc:48:99:7d:d8:24:c4:d2:8e:2d:94:9e:3a:6b:49:
                    d3:5d:9f:2b:77:0e:26:3a:13:e1:c3:91:3b:59:8c:
                    04:a2:64:de:7a:b6:1c:14:69:14:45:03:79:b8:c4:
                    69:4c:e1:0e:68:9a:6a:25:4d:d7:13:2a:ac:ad:92:
                    5d:be:71:f7:35:3f:7b:f5:e9:af:c4:9d:dc:99:9a:
                    06:3a:19:44:25:09:6b:1a:cf:b2:8b:cf:b5:36:7c:
                    d4:1d:a8:c8:8d:39:3c:12:5a:72:02:85:0d:5c:d8:
                    8b:55:40:e9:e9:f3:68:35:52:11:59:e9:91:9c:70:
                    e0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:17:91:75:B3:B7:80:57:0F:89:53:B9:DE:25:F3:43:AE:49:6C:D1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52FB1DA69D3011F19AE71801CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1e:24:95:8f:fc:44:aa:9c:3d:e2:e4:98:d7:cc:d3:f2:f2:c3:
         3e:dd:58:c6:ce:58:f3:13:30:11:21:25:c0:ca:a7:72:c2:a7:
         58:95:d8:a4:ad:4b:c0:13:74:3e:36:3e:70:5f:4c:3b:fd:bc:
         e2:cf:3e:4a:d0:b4:ce:71:0d:4a:ab:6c:86:4f:c0:31:ac:cd:
         30:9a:51:b4:ae:29:75:cf:9d:85:9d:ef:ce:ed:f6:6f:1e:d5:
         99:7a:5f:2a:d4:6d:2b:a1:96:c7:cb:30:86:7a:70:27:67:c9:
         2b:da:14:ba:0a:78:60:a1:0e:9f:d0:62:30:bf:e4:89:a6:2c:
         b9:db:d5:df:95:d1:14:d8:0c:b7:55:c7:0b:eb:b6:93:13:75:
         11:8f:76:63:79:03:ed:f5:47:31:45:58:7b:af:ba:ec:6e:fa:
         fd:38:4d:a9:f1:57:ea:13:32:97:32:2a:ca:9a:c1:d3:4d:8a:
         db:b2:df:64:1a:fa:74:32:12:a4:93:11:21:5e:57:48:59:4a:
         7b:98:a9:ca:c9:96:0b:5b:0d:62:19:41:d3:1c:a1:22:5f:fd:
         78:c0:ca:cf:04:22:f4:19:50:dc:cb:44:4c:42:bf:2f:75:0a:
         bc:08:0d:09:3b:67:a8:c7:12:bd:23:b2:b5:d5:b9:fc:ec:50:
         33:38:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----