Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C2C1B1C9D5911F1AD25DAF4CE1D38B0.roa
File:                     6C2C1B1C9D5911F1AD25DAF4CE1D38B0.roa (raw, json)
Hash identifier:          IGVyI1fr9zyeSmIJ7Y3U5IpWoeVAp2Zr/1ZaKsHAkgU=
Subject key identifier:   74:62:CB:DE:9E:23:ED:D5:4C:95:A6:8A:4F:DB:E3:9F:3D:1B:4C:2D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C2C1B1C9D5911F1AD25DAF4CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 12:11:22 +0000
ROA not before:           Fri 21 Aug 2026 12:11:18 +0000
ROA not after:            Tue 29 Sep 2026 12:11:18 +0000
asID:                     44559
IP address blocks:        156.246.160.0/24 maxlen: 24
                          156.246.166.0/24 maxlen: 24
                          156.246.167.0/24 maxlen: 24
                          156.246.168.0/24 maxlen: 24
                          156.246.169.0/24 maxlen: 24
                          156.246.170.0/24 maxlen: 24
                          156.246.171.0/24 maxlen: 24
                          156.246.172.0/24 maxlen: 24
                          156.246.173.0/24 maxlen: 24
                          156.246.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118740 (0x1cfd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 12:11:18 2026 GMT
            Not After : Sep 29 12:11:18 2026 GMT
        Subject: CN=6a88406a-0b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:d9:b9:de:a4:b4:c1:e5:d7:6d:ce:f6:44:
                    e2:fd:a4:d9:62:74:7f:b8:66:c8:b4:25:15:0e:24:
                    87:ce:ab:25:4a:42:a0:10:70:7b:2f:8c:10:4b:a6:
                    94:9a:55:e4:54:f1:55:ed:18:ae:b8:3f:01:d8:37:
                    7d:d3:10:1d:da:21:1c:fe:2f:e4:5b:71:f1:13:b9:
                    b3:3f:af:94:43:29:25:43:bc:99:43:67:66:d0:aa:
                    f6:63:ba:8d:48:f9:94:3c:66:ec:f3:a6:c5:71:7d:
                    44:e9:41:b1:3f:d1:10:45:87:75:3f:b5:6f:b1:38:
                    2b:88:09:56:0e:d6:b8:87:ce:2d:fd:0c:8b:e0:98:
                    dc:28:1b:3f:d0:86:21:04:95:d1:9c:cc:22:a4:ee:
                    a7:63:57:a6:cb:2a:72:b7:cc:7b:4d:25:ce:6d:6a:
                    e9:e5:2a:3d:30:f5:33:c1:ba:18:4c:f9:c2:b9:d5:
                    f5:93:fc:8b:01:be:26:0d:38:de:60:db:3b:a3:41:
                    38:0d:5c:39:dc:06:0c:fd:b3:05:40:78:13:70:ce:
                    a2:d5:d2:5a:d7:be:fb:32:cc:2b:17:b5:67:4a:8b:
                    5a:29:ba:d9:55:cd:20:c4:df:48:ce:04:ae:ab:3b:
                    ba:f4:ab:bc:be:05:f3:d9:1e:37:40:1f:5b:94:90:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:62:CB:DE:9E:23:ED:D5:4C:95:A6:8A:4F:DB:E3:9F:3D:1B:4C:2D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C2C1B1C9D5911F1AD25DAF4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.160.0/24
                  156.246.166.0-156.246.173.255
                  156.246.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:6f:62:74:ac:c1:da:28:ae:da:43:f7:a8:c9:54:df:89:18:
         12:d8:58:58:26:1f:6f:72:18:b6:8c:43:43:07:b9:7d:c8:6f:
         6d:61:65:20:73:55:82:6f:43:f4:d7:54:5a:c0:eb:e1:78:4d:
         67:35:1b:82:2b:c3:91:1b:8e:56:86:e9:f0:35:0a:5e:4a:a8:
         8c:cb:97:73:5e:97:c0:06:5a:69:68:d6:a5:e0:37:9b:eb:25:
         f9:b0:48:d1:98:13:c6:d6:56:86:a6:85:8a:b4:d0:08:8f:86:
         67:3d:c9:c8:55:88:78:ef:0b:8a:cb:f5:04:68:46:17:7d:bb:
         f2:55:0f:3b:a1:a9:15:9a:da:8c:17:9a:10:42:ab:ca:17:40:
         aa:29:73:5c:34:72:45:77:e7:7c:78:5b:57:c9:99:b0:dc:ea:
         bd:ab:97:3e:04:f8:ae:70:ae:f9:ea:16:54:20:05:2f:ab:04:
         77:65:94:98:bf:7b:c3:a5:c8:70:c5:f3:52:39:7f:e9:6d:6f:
         1f:b0:d0:33:e3:96:e5:1e:d9:b1:fa:77:b8:43:fd:d7:68:ed:
         32:ed:80:42:10:3d:a8:42:ef:f9:27:47:84:16:04:05:62:6e:
         05:8d:e5:9a:b3:51:36:6d:2f:c5:b3:38:12:74:43:76:73:65:
         48:84:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----