Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/566378B6C4A511F1A5CC3906CF1D38B0.roa
File:                     566378B6C4A511F1A5CC3906CF1D38B0.roa (raw, json)
Hash identifier:          JMJanMLuXVcKcuTbwg7NkY1iEWUgC8aPvaw7pvKF5PU=
Subject key identifier:   1A:DD:2E:76:73:29:93:D0:BC:BE:E5:D2:75:A9:AF:43:D4:5A:F1:43
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/566378B6C4A511F1A5CC3906CF1D38B0.roa
Signing time:             Sat 10 Oct 2026 12:23:03 +0000
ROA not before:           Sat 10 Oct 2026 12:22:58 +0000
ROA not after:            Tue 17 Nov 2026 12:22:58 +0000
asID:                     22773
IP address blocks:        156.229.4.0/24 maxlen: 24
                          156.229.5.0/24 maxlen: 24
                          156.229.6.0/24 maxlen: 24
                          156.229.7.0/24 maxlen: 24
                          156.233.208.0/24 maxlen: 24
                          156.233.209.0/24 maxlen: 24
                          156.233.210.0/24 maxlen: 24
                          156.233.211.0/24 maxlen: 24
                          156.233.212.0/24 maxlen: 24
                          156.238.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121980 (0x1dc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 12:22:58 2026 GMT
            Not After : Nov 17 12:22:58 2026 GMT
        Subject: CN=6aca2e26-49b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:74:38:f5:51:19:39:68:35:9e:0a:0d:9b:54:
                    ab:8c:59:66:8b:91:5d:dc:f6:af:d9:d2:7f:5d:ff:
                    58:cf:f0:0a:4a:75:f8:00:c3:19:11:7e:5b:b6:38:
                    06:25:a3:fc:eb:0f:c9:98:67:dd:dc:8a:b0:ac:10:
                    64:cc:b8:95:85:8f:01:9f:7b:33:db:e2:de:57:c7:
                    6f:9a:40:bc:77:0b:8b:d5:08:fc:eb:f8:47:be:5a:
                    7f:21:f9:a6:0d:96:8e:69:04:64:7a:44:5f:f9:f0:
                    60:6f:c9:04:ae:ff:64:9f:15:37:3c:cf:7c:51:a4:
                    19:dd:05:10:6b:4e:20:3b:e3:82:88:06:4f:a3:6b:
                    3a:5f:e2:23:05:c3:b5:d5:57:0e:91:86:29:2c:96:
                    62:e1:3c:52:9a:0f:a4:5c:05:78:e5:7d:90:12:c3:
                    a0:72:2f:50:5c:b8:73:03:9f:18:16:72:d2:bb:a7:
                    7b:44:ea:41:fa:c1:f2:8d:09:3e:6a:f8:5e:af:27:
                    c2:f5:3d:ae:ee:da:26:ce:12:de:0e:b3:53:ec:44:
                    1c:0e:60:db:52:d7:24:ab:11:bd:16:fa:af:87:62:
                    23:e1:15:e1:4f:19:78:80:79:1f:9a:66:d8:0b:b8:
                    55:32:6e:d2:a0:9e:00:da:be:fc:33:f3:e1:fe:06:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DD:2E:76:73:29:93:D0:BC:BE:E5:D2:75:A9:AF:43:D4:5A:F1:43
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/566378B6C4A511F1A5CC3906CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.4.0/22
                  156.233.208.0-156.233.212.255
                  156.238.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:6c:5b:89:13:9f:9c:b0:17:07:89:0b:ab:64:f2:f9:0f:2e:
         3d:f1:97:ba:32:ff:8e:1a:79:c3:e1:e3:e9:03:06:b4:eb:a6:
         af:7b:c3:a5:ca:65:13:87:f2:ce:53:69:6c:c6:6d:bd:69:44:
         95:2f:a8:52:bb:75:eb:5e:bd:73:3a:d2:55:42:3f:ee:0a:7b:
         b0:f5:f0:55:6f:ba:5e:d4:42:e8:99:1b:79:d6:c9:40:f7:0a:
         c0:24:72:b0:d4:15:67:0a:83:9a:7f:82:f7:ba:32:bd:0a:1b:
         ac:d3:9d:86:af:44:e0:38:bc:a1:b1:45:8c:fe:d2:bb:d6:c2:
         4f:10:24:64:18:59:ba:25:83:32:bc:dc:7d:97:7a:f9:bd:6d:
         23:a4:0c:bb:98:2d:b9:14:4a:d2:0e:59:73:97:e5:54:8d:e9:
         97:32:dd:cb:a2:b0:03:21:4f:77:72:f1:8b:ed:a8:c0:8a:3e:
         47:6d:bf:ef:88:41:42:f6:d2:95:20:29:69:ca:96:77:4d:26:
         80:10:d9:47:3f:99:91:02:8a:25:bd:7b:a1:6d:6d:5b:33:1e:
         09:8f:f8:4e:62:e6:d8:7d:66:95:ef:22:57:8c:66:e6:7e:f9:
         7b:79:45:58:63:6d:b9:ba:aa:7a:a8:aa:aa:47:9d:dc:19:9b:
         18:26:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----