Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/652E1BA0C95D11F18B01B1D0CE1D38B0.roa
File:                     652E1BA0C95D11F18B01B1D0CE1D38B0.roa (raw, json)
Hash identifier:          UcVhw+vIYEvQDA9bWVWC/omKfWHcyGTogyzNn4XNFkg=
Subject key identifier:   1B:E1:56:F9:4B:B6:A2:2F:E3:25:6C:F5:C8:3A:D1:F6:40:43:F7:47
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/652E1BA0C95D11F18B01B1D0CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 12:30:39 +0000
ROA not before:           Fri 16 Oct 2026 12:30:35 +0000
ROA not after:            Mon 16 Nov 2026 12:30:35 +0000
asID:                     134365
IP address blocks:        156.226.176.0/21 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
                          156.226.180.0/22 maxlen: 24
                          156.226.180.0/24 maxlen: 24
                          156.226.181.0/24 maxlen: 24
                          156.226.182.0/24 maxlen: 24
                          156.226.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122362 (0x1ddfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 12:30:35 2026 GMT
            Not After : Nov 16 12:30:35 2026 GMT
        Subject: CN=6ad218ef-2073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:1a:1e:7a:a9:8d:ce:a9:a5:a7:73:7d:45:
                    ff:1e:ae:c1:56:90:65:7e:3a:8b:3f:8a:c8:eb:0c:
                    08:f0:e7:61:81:6f:9c:09:40:f1:a9:3d:73:4a:0f:
                    f7:6b:8b:ce:b2:5f:3c:03:39:52:ec:a6:b1:f7:90:
                    c6:ae:22:a0:bd:22:43:46:32:c9:75:8c:8f:8c:87:
                    47:9d:93:8c:ed:96:cf:f6:1a:be:12:92:c4:dc:27:
                    c2:ad:ae:58:1a:3b:ea:bb:06:c5:ca:04:9f:28:58:
                    33:54:d4:1a:b2:3e:99:e4:4b:08:0b:8d:38:c3:22:
                    c3:5f:f9:60:d3:2a:de:f0:7f:e5:23:90:de:38:bf:
                    ce:7a:f1:bb:8e:68:99:74:b3:ae:d1:13:a6:1a:1f:
                    fd:81:ab:84:88:0c:80:ae:6a:66:bb:56:eb:d7:c5:
                    dc:91:65:76:ab:6f:f2:4e:7e:c8:8f:91:1f:28:3f:
                    71:8a:7a:c4:0a:38:3f:e8:85:34:03:11:d8:5b:20:
                    f8:4b:2f:ee:7f:eb:0a:d8:0b:a2:91:14:10:e8:46:
                    12:d2:ff:5d:8c:f9:01:fc:70:e0:d8:8f:e9:ac:c9:
                    84:ea:46:ea:f9:e8:77:c7:7d:61:0a:e4:e0:47:87:
                    33:88:c6:f0:f3:f3:5b:cc:f5:5d:ff:e1:35:94:d8:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E1:56:F9:4B:B6:A2:2F:E3:25:6C:F5:C8:3A:D1:F6:40:43:F7:47
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/652E1BA0C95D11F18B01B1D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:f8:2c:b1:13:90:c7:b0:f6:f6:23:ad:78:75:50:b8:98:
         55:11:82:10:a3:83:20:85:a2:00:84:5d:b9:29:31:32:5b:c5:
         1b:78:58:d1:4b:2e:20:11:58:0f:94:6f:6b:0f:f9:64:c3:1d:
         b4:e3:01:a4:0d:25:2b:c4:71:6e:b8:12:e3:5d:5a:b0:13:e2:
         af:56:10:6b:d9:0a:2f:52:7e:c6:e8:30:69:77:d2:c0:c5:02:
         bb:a7:a1:fe:a9:c8:ff:a5:7b:f1:f4:c5:76:ec:75:e3:da:78:
         ff:f9:83:79:59:ff:ca:bf:e3:6a:f6:19:81:af:3e:65:8a:54:
         09:95:d3:b9:76:03:0c:c9:3b:bc:40:da:d1:f5:74:ba:14:77:
         d5:de:43:f0:6d:81:2e:f6:58:24:23:36:12:56:9b:04:9e:28:
         a5:f6:65:68:1a:6f:69:e1:23:33:51:50:30:9d:e3:08:b5:3a:
         c4:01:a2:dd:24:67:bb:d7:f5:94:c0:51:a2:08:bc:48:49:9c:
         a4:6d:2f:0a:9f:ec:3d:67:6d:35:54:f5:0d:42:fe:2f:69:8c:
         89:3b:13:31:ba:f0:cd:be:14:3d:f5:26:38:13:46:2a:19:8b:
         7a:49:d8:ed:d5:93:2f:57:36:c3:f1:a7:06:2a:a1:bf:6c:b1:
         06:48:fa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----