Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C0529C4BC0E11F1ABA066E1CE1D38B0.roa
File:                     7C0529C4BC0E11F1ABA066E1CE1D38B0.roa (raw, json)
Hash identifier:          XriQF4IeFDnEK9BEfs+9wR9QAB4PylK91z92waWWKgc=
Subject key identifier:   7C:18:1E:95:A1:53:22:90:E8:50:DF:95:B9:4B:30:88:22:73:B2:AE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D987
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C0529C4BC0E11F1ABA066E1CE1D38B0.roa
Signing time:             Tue 29 Sep 2026 14:03:02 +0000
ROA not before:           Tue 29 Sep 2026 14:02:58 +0000
ROA not after:            Sat 19 Feb 2028 14:02:58 +0000
asID:                     17561
IP address blocks:        156.235.52.0/24 maxlen: 24
                          156.235.70.0/24 maxlen: 24
                          156.235.75.0/24 maxlen: 24
                          156.235.76.0/24 maxlen: 24
                          156.235.79.0/24 maxlen: 24
                          156.235.88.0/24 maxlen: 24
                          156.235.92.0/24 maxlen: 24
                          156.235.122.0/24 maxlen: 24
                          156.235.125.0/24 maxlen: 24
                          156.235.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121223 (0x1d987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 29 14:02:58 2026 GMT
            Not After : Feb 19 14:02:58 2028 GMT
        Subject: CN=6abbc516-ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:5c:a4:2e:56:bd:05:8d:5b:8f:8c:6c:46:
                    52:cd:03:6c:62:95:ed:8b:e3:4d:64:4d:21:d2:95:
                    8d:ba:67:26:51:43:db:2f:3c:9e:fa:db:0e:b3:17:
                    f7:d9:1e:7e:67:ea:60:3d:60:3e:41:f9:2f:51:73:
                    37:80:ff:90:55:6c:90:d6:d0:56:5d:d2:e7:1b:da:
                    00:ff:cd:41:3d:8e:73:de:06:cd:5f:fb:ca:83:cb:
                    e9:3f:63:b1:22:72:50:40:0e:2f:c3:1f:4f:9d:58:
                    c9:b3:51:1b:b6:73:47:49:c7:fc:0d:8d:2a:ab:4e:
                    99:09:05:a2:b0:5e:fa:16:45:cb:f4:4d:eb:24:8f:
                    fa:5d:12:e0:5a:d4:e7:89:1b:fd:ca:26:4e:d9:61:
                    95:0a:4d:dc:39:13:fd:d0:6a:e2:f8:1e:52:ec:ad:
                    33:c7:33:50:88:33:ff:74:c2:0c:05:d9:95:7c:84:
                    f7:84:8b:3a:07:a6:2e:da:45:9e:21:0c:fd:b4:d0:
                    59:ae:de:8a:7f:d8:00:73:c0:4c:b4:da:82:19:72:
                    fb:28:5c:4d:4a:2d:9c:08:f3:04:bc:90:3e:0c:a3:
                    bc:d1:07:70:64:6c:3e:23:63:d9:79:00:4b:7e:91:
                    de:50:77:13:a9:60:47:fa:16:75:d0:dd:2a:0b:f5:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:18:1E:95:A1:53:22:90:E8:50:DF:95:B9:4B:30:88:22:73:B2:AE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C0529C4BC0E11F1ABA066E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.52.0/24
                  156.235.70.0/24
                  156.235.75.0-156.235.76.255
                  156.235.79.0/24
                  156.235.88.0/24
                  156.235.92.0/24
                  156.235.122.0/24
                  156.235.125.0-156.235.126.255

    Signature Algorithm: sha256WithRSAEncryption
         3d:b3:73:61:a3:b6:69:d9:56:59:8e:5b:5a:d6:98:1e:d7:2c:
         a6:a8:90:e5:66:f7:a1:cb:23:89:2a:0e:eb:4b:1d:5c:39:4e:
         e4:d7:99:29:fc:76:d9:15:72:a3:a0:ff:33:10:90:65:37:76:
         a7:4d:de:d2:b5:80:40:2f:7d:88:35:91:65:fb:b1:0f:fd:f4:
         4d:0f:9c:07:30:cd:1b:4a:0b:77:8f:32:f3:2a:b1:78:c9:6b:
         ef:de:36:bb:d1:17:30:1a:00:2a:22:b1:b3:3c:a2:13:b6:60:
         18:d9:cf:5d:f2:94:0d:30:ce:41:8b:28:a0:da:8a:a3:1a:8b:
         aa:8c:2a:94:57:a0:39:cb:21:c1:14:2b:86:c7:d0:e6:77:8d:
         a8:5f:59:0b:a6:30:67:16:64:dd:75:00:7d:2f:a9:b4:69:c8:
         f8:9d:d9:53:ee:20:da:5f:62:77:43:b1:94:e3:ec:c5:9e:6e:
         43:0d:01:04:f3:20:86:69:0d:9a:6e:0f:01:25:e6:60:bf:34:
         dc:1b:2c:96:96:2f:f9:a6:93:da:f1:05:c6:6f:fa:0e:6a:12:
         60:47:2c:61:2a:0a:51:9a:6b:10:1a:41:53:b3:6e:61:22:53:
         05:34:d5:80:04:34:5d:80:6c:f8:4f:f8:0f:9b:4a:57:2d:ea:
         02:ae:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----