Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CB743C29D5011F193B321BFCE1D38B0.roa
File:                     5CB743C29D5011F193B321BFCE1D38B0.roa (raw, json)
Hash identifier:          A4PYsKjxOZWjpejp7hRKuPvIdnuGtClvkwPEN5anZ0k=
Subject key identifier:   85:A7:83:FC:5D:FB:0E:56:78:E5:6D:19:84:AA:B2:E6:6E:77:3C:F4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CB743C29D5011F193B321BFCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 11:06:31 +0000
ROA not before:           Fri 21 Aug 2026 11:06:27 +0000
ROA not after:            Thu 08 Oct 2026 11:06:27 +0000
asID:                     395793
IP address blocks:        156.230.16.0/22 maxlen: 24
                          156.230.52.0/22 maxlen: 24
                          156.230.134.0/23 maxlen: 24
                          156.232.2.0/23 maxlen: 24
                          156.232.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118708 (0x1cfb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 11:06:27 2026 GMT
            Not After : Oct  8 11:06:27 2026 GMT
        Subject: CN=6a883137-3dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:19:05:40:09:f2:32:30:fe:13:94:49:01:71:
                    c2:f5:2b:3a:e0:ac:4e:c7:38:03:ba:69:77:c0:72:
                    7e:05:2c:9e:fa:c6:10:e1:c3:cd:e2:3c:22:4f:35:
                    ed:f8:73:fb:d8:02:d5:f1:3d:f4:00:32:16:4e:a1:
                    a2:75:7f:ac:99:2d:23:de:de:9d:f8:03:53:95:2f:
                    84:3e:f5:8f:9f:fd:dc:01:8e:b4:d1:7b:48:d5:34:
                    15:29:de:2f:36:93:f9:f9:e1:a5:4c:d3:3a:90:0d:
                    9d:c6:bb:81:f3:0d:8c:6f:a7:b8:26:20:d1:02:43:
                    78:d0:d7:0b:1e:dc:9d:e5:17:f1:67:54:bf:82:2f:
                    6c:5c:22:82:50:94:eb:7c:2c:76:81:a6:9a:63:c6:
                    6c:f7:5e:1b:13:3d:14:8c:7a:b4:82:4a:65:75:eb:
                    90:73:50:ff:3a:46:c5:4e:c4:62:56:9b:3d:97:31:
                    48:fc:3a:32:7b:86:1c:8d:5e:bf:b5:1f:d4:ac:26:
                    13:a9:50:c7:c9:da:fc:81:ae:e0:92:a1:aa:fa:52:
                    90:c2:7b:33:63:e4:23:a0:08:d9:aa:e8:64:d1:7b:
                    99:1a:37:13:75:64:cc:ed:1c:f3:3e:1f:22:4d:5a:
                    4f:2e:62:23:9a:76:77:ea:d3:c8:22:90:4c:01:0b:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A7:83:FC:5D:FB:0E:56:78:E5:6D:19:84:AA:B2:E6:6E:77:3C:F4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CB743C29D5011F193B321BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.16.0/22
                  156.230.52.0/22
                  156.230.134.0/23
                  156.232.2.0/23
                  156.232.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:56:49:21:a7:49:2f:cb:5f:d9:34:cf:25:59:45:9d:26:e4:
         fb:37:82:66:75:22:aa:c0:42:01:20:19:41:86:b7:4d:1b:19:
         fa:5a:e9:b8:b5:54:6c:82:34:f6:cb:7f:7e:22:a3:11:14:91:
         9b:69:5c:42:25:b9:10:2f:15:d0:a1:60:67:db:c8:b8:ef:47:
         b3:39:5d:87:a4:51:89:47:f6:56:aa:27:ad:d9:8c:85:ad:74:
         7e:ae:73:47:c1:4b:d2:20:de:92:0c:50:bd:a4:18:ff:d8:72:
         10:db:c8:31:94:d0:0f:cd:39:f6:d0:aa:4c:5d:55:40:08:7e:
         47:6a:68:77:83:87:35:9c:ff:52:c0:8d:8c:58:9d:35:55:d0:
         f3:63:77:fc:aa:80:53:44:f3:da:1a:8f:40:95:63:60:f5:34:
         59:20:4a:0c:42:a2:db:64:2d:b2:30:dd:cf:a9:e3:21:ae:30:
         2d:d4:44:c5:66:01:06:80:a7:57:48:91:9a:91:b4:1c:4c:bb:
         ee:5a:02:f4:de:f4:a3:b0:58:0c:f5:03:15:ca:f2:fc:a9:17:
         e9:44:1e:61:2b:85:d8:be:9b:35:13:e8:46:ad:75:1e:e6:ac:
         42:09:7f:b7:a5:27:88:9e:6d:32:72:59:9f:e7:f5:a5:03:1a:
         ad:38:d1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----