Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DDBEDC2BF2611F19DDF9F12CF1D38B0.roa
File:                     6DDBEDC2BF2611F19DDF9F12CF1D38B0.roa (raw, json)
Hash identifier:          OQwRJPlGXUvuCd9K04LNcaYTVhpf7IYi982oqVz2X1M=
Subject key identifier:   6B:2D:15:1F:1F:3C:00:9F:B7:C9:98:39:71:DF:DE:8D:85:CB:2B:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DDBEDC2BF2611F19DDF9F12CF1D38B0.roa
Signing time:             Sat 03 Oct 2026 12:32:00 +0000
ROA not before:           Sat 03 Oct 2026 12:31:56 +0000
ROA not after:            Sun 08 Nov 2026 12:31:56 +0000
asID:                     44477
IP address blocks:        156.253.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121457 (0x1da71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 12:31:56 2026 GMT
            Not After : Nov  8 12:31:56 2026 GMT
        Subject: CN=6ac0f5c0-fe5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:ee:79:3f:c2:7d:18:1f:49:4a:0d:97:72:
                    80:33:2d:26:43:cd:c4:f1:0e:5b:62:64:e0:7d:80:
                    5d:29:f1:56:a7:77:79:07:b5:d1:be:eb:84:7c:19:
                    d2:94:be:27:27:68:cc:f9:a5:20:6e:48:ab:ad:ce:
                    58:a5:d2:f9:ba:fc:2c:f4:c3:2f:d6:86:e8:d1:aa:
                    6f:85:3b:3b:45:cd:ad:e2:0f:5d:2d:4a:39:6f:cf:
                    b0:4c:d7:e8:7a:22:f2:05:ca:d7:db:41:0f:27:9d:
                    0d:45:f3:d3:5b:df:8a:0b:97:04:36:f9:0d:2e:d5:
                    1e:92:ac:0f:f1:4a:e5:cb:3f:bf:d0:fd:3b:ce:44:
                    d5:88:40:0c:9c:bf:f2:91:fb:cb:ba:b3:19:7c:f1:
                    2a:6d:7d:9d:e1:d1:be:cc:c9:ba:ff:d7:9c:4d:71:
                    f6:80:af:f7:74:27:3a:fa:5b:08:13:d9:91:4b:e5:
                    fb:0f:dc:cb:f0:83:3f:d5:f0:00:5a:7b:22:73:1a:
                    f9:5e:c9:79:c8:91:62:3a:c2:ff:3a:19:8f:51:1b:
                    6e:fe:90:38:5a:5f:2f:f1:ae:59:5b:f0:ea:16:04:
                    23:de:2c:e8:1e:72:27:ad:ad:53:f5:24:52:ff:d0:
                    f1:ac:37:f8:a4:2a:3f:ad:fd:49:bd:36:38:41:64:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2D:15:1F:1F:3C:00:9F:B7:C9:98:39:71:DF:DE:8D:85:CB:2B:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DDBEDC2BF2611F19DDF9F12CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:e1:f5:c6:63:25:cd:71:8b:fd:51:66:ec:fa:b8:cc:8d:
         0f:7f:e5:db:7d:21:37:5b:c8:61:ba:8a:f8:9b:4b:13:e2:dc:
         76:61:24:2a:7b:ac:a5:92:68:1a:1d:7e:b4:4e:6f:d7:47:b1:
         12:86:eb:41:7b:8c:d0:88:f1:29:b1:e2:53:24:b9:16:e3:1f:
         5b:71:12:fb:8e:15:6b:ed:65:b1:de:a7:05:9c:6d:fb:ed:2f:
         dc:3c:1b:c1:48:a4:26:66:1c:05:86:44:32:8b:93:bc:77:01:
         8d:b5:bd:61:b1:a2:db:6d:92:53:e9:5d:85:c2:93:65:92:6e:
         fc:bf:a1:ef:44:bd:77:dc:8d:76:89:03:b9:e3:8b:b8:cf:52:
         43:59:e8:f9:85:63:ef:60:1f:f9:d0:a7:70:e5:4e:7e:12:6c:
         47:8e:c9:b5:54:54:be:00:53:5f:a8:d4:e6:03:ae:ba:ab:51:
         36:e9:1d:4f:7a:9f:fb:b9:32:6f:74:88:07:25:04:4f:01:27:
         bd:eb:14:2d:be:4b:29:0f:02:30:00:ff:79:6a:d0:6c:ba:78:
         91:0d:3c:96:f0:9b:64:d9:c8:5f:01:01:7d:e9:0e:47:0c:9c:
         b0:cc:8a:5e:09:f3:73:5e:db:06:02:25:45:ce:bb:3d:b2:bf:
         a4:11:9f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----