Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F4E248AC4A411F1B0378D01CF1D38B0.roa
File:                     6F4E248AC4A411F1B0378D01CF1D38B0.roa (raw, json)
Hash identifier:          MP/jwEYKuQ91gqkUp8uMTB/z4vri7GFTaXIwsBRNHY0=
Subject key identifier:   8E:5C:6D:16:C2:53:95:8C:66:D1:C4:3B:CE:E6:A1:5C:EB:9A:5F:9A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F4E248AC4A411F1B0378D01CF1D38B0.roa
Signing time:             Sat 10 Oct 2026 12:16:35 +0000
ROA not before:           Sat 10 Oct 2026 12:16:30 +0000
ROA not after:            Tue 17 Nov 2026 12:16:30 +0000
asID:                     22773
IP address blocks:        156.242.239.0/24 maxlen: 24
                          156.242.240.0/24 maxlen: 24
                          156.243.102.0/24 maxlen: 24
                          156.243.103.0/24 maxlen: 24
                          156.243.104.0/24 maxlen: 24
                          156.243.105.0/24 maxlen: 24
                          156.243.106.0/24 maxlen: 24
                          156.243.107.0/24 maxlen: 24
                          156.243.115.0/24 maxlen: 24
                          156.243.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121978 (0x1dc7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 12:16:30 2026 GMT
            Not After : Nov 17 12:16:30 2026 GMT
        Subject: CN=6aca2ca3-2ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:e7:f2:a6:9d:5a:bc:24:16:96:ed:a3:ee:
                    0d:10:94:56:a2:a3:7b:d0:ae:08:6e:55:31:f2:67:
                    20:eb:bd:97:ad:d4:ba:44:db:a6:dd:f3:1e:76:8d:
                    15:ec:24:02:3c:ac:49:5b:4b:ae:27:a9:62:71:9f:
                    e5:e7:38:f5:2c:c9:25:45:e5:26:ae:d6:94:ef:1a:
                    6f:c2:65:69:2c:00:df:82:44:9f:2b:12:2c:b8:ac:
                    42:62:21:64:3d:2d:05:28:c2:2a:bb:27:69:20:b8:
                    4c:f2:e6:58:8a:2c:10:69:dd:68:a0:59:da:3b:bc:
                    e8:b8:40:3a:2d:c9:61:80:c6:45:38:df:c2:71:7e:
                    54:52:8a:ee:1b:03:76:e1:44:14:20:b3:7a:14:a7:
                    17:1e:60:00:d9:80:7a:3c:a9:52:95:a2:53:2b:a8:
                    ce:ec:f4:14:9d:41:33:18:3b:35:d2:c4:a3:74:e4:
                    79:a4:44:40:90:bf:91:43:6d:ac:0e:4a:23:35:72:
                    97:69:be:c5:3d:1c:c1:ad:1e:fa:42:32:e1:53:8b:
                    c3:02:06:7f:39:bd:4c:20:6e:0d:47:82:10:ff:ad:
                    b9:0f:72:87:1a:6d:88:74:00:b2:c4:1c:f8:a9:10:
                    a4:51:01:c0:7e:f6:ca:b1:23:4d:8d:6c:5f:6a:37:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5C:6D:16:C2:53:95:8C:66:D1:C4:3B:CE:E6:A1:5C:EB:9A:5F:9A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F4E248AC4A411F1B0378D01CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.239.0-156.242.240.255
                  156.243.102.0-156.243.107.255
                  156.243.115.0/24
                  156.243.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:1c:99:e7:b9:27:67:bd:a5:01:8d:78:3b:20:e8:bd:ae:c9:
         8d:24:c5:ae:5f:e3:e1:b6:3c:aa:1a:6e:9f:69:aa:20:cd:32:
         eb:0b:c8:2b:21:3d:52:34:4e:59:ab:8b:7d:34:7e:43:32:97:
         20:16:d1:23:91:9a:23:6d:10:4c:d5:65:61:9b:3a:ad:ca:60:
         20:e0:2d:ad:1f:bb:6c:84:6c:dd:70:76:d2:05:44:45:4e:60:
         48:77:81:7d:bc:3b:f1:95:f9:91:a6:01:c7:74:6b:de:50:06:
         f7:ef:a4:99:e7:a9:24:e6:26:bf:2f:46:a5:1f:c6:71:de:78:
         d2:06:dc:96:8d:61:90:7b:db:0a:73:18:9f:f9:2e:6a:85:5b:
         80:80:a6:9d:ef:dd:41:9c:c6:43:51:a0:43:a2:8c:52:ef:7b:
         75:67:ce:53:0a:20:31:e7:4d:63:01:bd:d4:b4:c3:83:0d:73:
         a3:ed:bd:0e:9d:21:3f:ba:39:2b:7b:ba:9e:b5:f6:60:7e:61:
         00:cf:0c:6e:8f:e2:cc:ae:a2:9d:d7:b0:1b:37:b0:ad:a6:59:
         ce:20:45:c6:59:ac:69:70:e6:45:e0:a1:41:29:e0:a4:10:b4:
         93:d7:68:08:99:a2:cb:4c:e4:47:1b:66:77:5c:75:7e:71:da:
         56:95:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----