Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2FA2309C7511F1A6C97F0DCF1D38B0.roa
File:                     7B2FA2309C7511F1A6C97F0DCF1D38B0.roa (raw, json)
Hash identifier:          LkrYoqVRwyVoQ1mhdKFVK7FREy/nuXhTRGJut29RxRg=
Subject key identifier:   2A:C2:BC:DC:9E:A6:7F:89:D3:AC:53:C8:FB:86:B7:81:4C:8D:1E:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2FA2309C7511F1A6C97F0DCF1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:59:42 +0000
ROA not before:           Thu 20 Aug 2026 08:59:38 +0000
ROA not after:            Thu 24 Sep 2026 08:59:38 +0000
asID:                     400619
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.254.16.0/24 maxlen: 24
                          156.254.17.0/24 maxlen: 24
                          156.254.18.0/24 maxlen: 24
                          156.254.19.0/24 maxlen: 24
                          156.254.20.0/24 maxlen: 24
                          156.254.21.0/24 maxlen: 24
                          156.254.22.0/24 maxlen: 24
                          156.254.23.0/24 maxlen: 24
                          156.254.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118430 (0x1ce9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 08:59:38 2026 GMT
            Not After : Sep 24 08:59:38 2026 GMT
        Subject: CN=6a86c1fe-003a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:c3:bb:0c:db:c0:c1:fb:f5:6a:38:90:1d:
                    a9:b3:dc:3d:88:5d:8d:d6:14:52:ea:35:79:33:c7:
                    6c:4d:fb:77:2b:f8:19:94:2d:4d:70:39:06:91:f3:
                    52:fe:4e:ca:82:08:ac:4b:f8:a7:00:1b:b5:1c:bd:
                    4e:fa:a1:6a:19:a2:22:b4:ad:55:cd:19:fd:39:51:
                    99:a8:91:13:a7:1d:56:bc:78:56:69:ea:20:f0:90:
                    7a:64:8b:3d:3f:d6:ed:4b:a5:f1:71:d9:58:3b:93:
                    2f:41:16:b4:6b:be:b6:e0:ca:d2:b9:da:79:f0:a6:
                    3c:3a:48:5e:68:f1:2b:44:e4:12:44:25:ac:fc:86:
                    85:b5:cf:55:29:88:e0:6d:54:70:a4:5a:a5:0b:77:
                    a0:e8:3d:8a:8f:c5:f2:9e:91:a2:28:a3:fd:a7:34:
                    46:d3:2b:8c:62:44:19:65:81:60:3a:39:35:84:bb:
                    bc:49:e2:57:9d:19:83:ea:92:92:2c:3d:a1:20:cb:
                    77:a4:64:99:46:c4:d5:de:d3:ca:30:16:a7:fa:06:
                    df:75:82:44:1e:f5:65:cf:c3:5b:de:a6:6c:94:5e:
                    eb:9f:26:44:cb:5b:df:96:5a:35:39:36:59:68:27:
                    2b:e0:b4:d5:16:24:09:aa:9d:e1:75:5b:30:e4:54:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C2:BC:DC:9E:A6:7F:89:D3:AC:53:C8:FB:86:B7:81:4C:8D:1E:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2FA2309C7511F1A6C97F0DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0/21
                  156.254.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:5e:67:55:93:70:38:9b:9b:80:e4:35:fe:db:29:bb:d1:f7:
         2d:99:f6:66:74:d3:0f:d0:e9:f0:77:41:9a:f9:9d:18:7c:36:
         35:d1:42:47:56:9c:12:a2:14:c5:f6:ac:73:b4:16:53:2c:9d:
         26:30:e1:a6:de:7b:36:af:61:4b:c5:dd:21:96:72:75:64:0e:
         cc:b1:78:20:d3:08:16:a1:40:75:58:98:d8:88:9b:b9:2c:d0:
         29:b3:eb:94:11:92:16:d1:bf:cb:d0:6a:df:a7:88:dd:11:f9:
         92:d7:25:11:b0:b7:b9:c0:bd:4d:0a:f9:2d:3f:e3:30:55:82:
         28:50:73:34:01:e6:0b:06:df:5d:4e:dc:96:9c:0c:b1:b7:8b:
         1e:cd:d0:0b:1e:cb:39:f2:24:20:0c:c9:df:50:43:54:57:66:
         ce:d3:13:7a:7a:32:1e:ef:ee:db:00:b0:7d:49:03:07:2b:ee:
         9d:0a:67:cc:e9:fd:c8:09:ff:bb:c7:ba:85:31:92:6f:ca:b9:
         4c:eb:00:83:dc:01:46:0a:36:20:99:09:89:a9:35:ba:1a:ad:
         df:58:a6:10:2d:ff:5c:26:31:35:7a:81:a3:d4:8f:e6:63:8e:
         3e:ca:d2:a8:65:02:17:90:74:62:cb:d4:0e:69:cd:1a:87:d5:
         ec:ad:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----