Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CC510FC9FA011F1B77B46FDCE1D38B0.roa
File:                     7CC510FC9FA011F1B77B46FDCE1D38B0.roa (raw, json)
Hash identifier:          jimReQPv95ZpkC89S4/lX+P87C/oXWGqukElRspUc78=
Subject key identifier:   17:7E:28:0A:C4:D3:A7:6D:62:1F:11:1D:37:6A:76:A5:B4:0E:8F:D8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D081
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CC510FC9FA011F1B77B46FDCE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:45:06 +0000
ROA not before:           Mon 24 Aug 2026 09:45:02 +0000
ROA not after:            Fri 02 Oct 2026 09:45:02 +0000
asID:                     62240
IP address blocks:        156.233.0.0/24 maxlen: 24
                          156.233.1.0/24 maxlen: 24
                          156.233.100.0/24 maxlen: 24
                          156.233.103.0/24 maxlen: 24
                          156.233.104.0/24 maxlen: 24
                          156.233.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118913 (0x1d081)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 09:45:02 2026 GMT
            Not After : Oct  2 09:45:02 2026 GMT
        Subject: CN=6a8c12a2-8108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:40:85:8f:b4:c7:72:b7:f7:70:10:a2:b0:
                    c9:6b:85:05:bd:59:7f:98:41:f9:48:64:ab:6d:3f:
                    64:04:69:ab:61:8d:4a:47:ad:f8:7c:0d:ca:1b:41:
                    64:28:8d:43:1e:d6:35:3e:f9:75:08:40:c0:c8:29:
                    73:5e:7b:fb:3f:ba:54:e4:64:7c:d0:ce:16:ce:d1:
                    e1:33:45:e3:9c:4d:ef:7a:22:54:d9:14:d3:f7:e9:
                    26:10:83:39:f2:c7:62:b5:ff:db:9a:86:40:d1:b0:
                    6e:8b:2b:6b:9a:af:e1:47:4a:83:6b:e7:02:d8:93:
                    40:c8:de:b2:4d:a6:e9:6a:2d:d2:c0:3a:85:52:c5:
                    f3:d8:49:29:41:22:fe:13:40:44:93:01:cc:63:a6:
                    05:3f:90:77:3e:e1:4e:eb:f9:85:89:19:2b:9b:4f:
                    bd:f9:d1:bf:e8:2d:81:44:10:1d:1b:bd:3c:46:e2:
                    de:60:8c:fb:75:b4:4c:a7:06:0b:c8:18:2f:c1:12:
                    eb:63:18:0d:3a:4f:77:36:d1:8a:40:9d:17:e2:0c:
                    a9:6c:59:86:ee:95:ce:ff:9d:09:2c:56:34:61:a1:
                    5c:6c:c6:c0:a1:1b:ab:50:d7:46:28:a1:a1:98:05:
                    67:5c:84:5c:d2:8f:89:a2:cb:66:6e:92:1e:66:49:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7E:28:0A:C4:D3:A7:6D:62:1F:11:1D:37:6A:76:A5:B4:0E:8F:D8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CC510FC9FA011F1B77B46FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.0.0/23
                  156.233.100.0/24
                  156.233.103.0-156.233.105.255

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:ea:21:30:a4:21:9a:36:c8:93:31:f6:cc:28:46:96:e7:
         62:c8:be:fb:c5:d9:20:f1:13:fc:13:1a:f8:79:40:e5:09:3f:
         13:b4:a4:73:19:37:12:a8:fc:50:15:63:22:1a:19:ee:92:2c:
         5a:03:85:83:31:31:29:62:16:81:5d:e1:86:44:f1:2e:9b:b2:
         da:09:14:17:ff:e4:79:68:56:92:7e:1b:3f:00:3d:0b:31:9d:
         f5:fa:77:e0:33:f9:eb:b5:96:96:27:d5:6c:a3:71:26:75:c9:
         0e:58:c2:70:b0:9b:07:d0:ca:b1:ae:f5:d8:9d:a4:34:53:8f:
         6e:2b:3c:ed:b0:4e:8c:5b:07:9c:32:57:c5:87:ec:3c:38:ae:
         da:29:14:42:e1:9e:c1:6e:22:15:47:b5:df:79:05:fe:31:26:
         52:37:61:5b:6f:70:b6:51:b3:94:37:6c:45:0e:67:eb:f2:72:
         70:ff:21:56:f4:53:f9:cc:ee:1b:fc:c9:7e:dc:f3:a1:01:fd:
         13:0a:ca:a2:14:ee:4d:bd:7b:f4:5a:2e:6f:e0:90:69:cf:94:
         fc:35:4e:8a:51:b1:86:45:12:dc:f0:6b:86:1a:3e:e9:a7:63:
         ac:b8:56:1a:57:e4:cb:28:f4:bd:73:14:39:35:f7:32:cb:4d:
         9c:f0:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----