Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8699655AA13611F18ED1BFA1CE1D38B0.roa
File:                     8699655AA13611F18ED1BFA1CE1D38B0.roa (raw, json)
Hash identifier:          u7jixVIfLywoN3NK15/kQlkzP+TqN8Cuvv5ULMJY8So=
Subject key identifier:   67:03:64:D7:40:5B:3B:68:BB:3C:4A:F6:6F:DA:BB:51:FD:17:9C:E0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D129
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8699655AA13611F18ED1BFA1CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 10:11:39 +0000
ROA not before:           Wed 26 Aug 2026 10:11:34 +0000
ROA not after:            Sat 25 Aug 2029 10:11:34 +0000
asID:                     17561
IP address blocks:        156.237.150.0/24 maxlen: 24
                          156.237.151.0/24 maxlen: 24
                          156.237.152.0/24 maxlen: 24
                          156.237.153.0/24 maxlen: 24
                          156.237.154.0/24 maxlen: 24
                          156.237.155.0/24 maxlen: 24
                          156.237.156.0/24 maxlen: 24
                          156.237.157.0/24 maxlen: 24
                          156.237.158.0/24 maxlen: 24
                          156.237.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119081 (0x1d129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 10:11:34 2026 GMT
            Not After : Aug 25 10:11:34 2029 GMT
        Subject: CN=6a8ebbdb-1384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:2d:74:f3:55:db:99:dc:cd:8b:d7:8e:13:
                    ff:35:3f:b5:cd:a2:42:ab:7d:d7:49:5f:3a:1e:54:
                    d5:2c:d0:c8:2e:e8:40:75:2d:27:9f:63:fe:fd:0c:
                    92:9c:b6:45:7f:81:01:eb:c6:e5:16:26:dc:ac:69:
                    e8:0a:f9:3d:c8:a1:e6:21:06:7e:55:26:33:80:f2:
                    98:16:d7:9f:6a:80:a9:6d:1c:ef:7b:b6:bd:a7:f8:
                    91:cc:6d:ce:27:db:59:81:0b:e5:19:20:b9:e1:47:
                    ae:0f:be:6f:84:58:e5:2d:06:1b:8b:1e:57:12:5b:
                    18:81:80:49:b8:b1:a4:32:90:ed:fe:93:2e:ee:8b:
                    9b:1f:41:a1:e6:e1:23:9b:28:c1:e5:d2:f1:86:75:
                    42:61:8b:2a:18:a8:a4:22:f1:b6:05:07:52:12:f6:
                    58:55:fd:b9:59:ab:21:38:97:97:89:4c:09:77:ff:
                    a0:9e:57:72:8d:42:88:cf:db:43:c7:d5:33:ae:12:
                    26:09:79:74:a9:29:58:ce:73:47:e3:44:49:d4:2a:
                    25:9c:ff:e3:86:93:36:3b:da:3a:bd:13:37:c3:3c:
                    09:4c:89:08:31:20:d3:3e:96:84:85:93:39:5e:df:
                    dd:65:71:00:89:2d:c2:84:87:09:8a:52:f4:c2:ad:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:03:64:D7:40:5B:3B:68:BB:3C:4A:F6:6F:DA:BB:51:FD:17:9C:E0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8699655AA13611F18ED1BFA1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.150.0-156.237.159.255

    Signature Algorithm: sha256WithRSAEncryption
         b4:d7:2c:16:e3:51:ce:cb:33:ba:9a:94:62:ce:a3:7b:98:a2:
         e1:9e:04:95:e9:0c:0a:2a:07:cc:35:06:f8:c0:d9:96:a5:66:
         e6:15:3a:6b:f0:43:c2:20:59:f2:52:97:fa:01:b2:86:5e:22:
         45:5e:70:5c:ad:00:c5:ad:7f:5d:0b:20:b9:1e:c1:07:39:c4:
         52:e3:88:81:b1:72:58:7f:66:92:64:82:16:3a:6e:a2:07:4e:
         da:e5:7e:e0:9b:3e:1c:c9:75:5d:48:0f:d1:29:d2:96:0d:53:
         28:37:37:28:e4:1d:0b:5f:99:83:9f:c8:1a:13:6c:5a:3c:e7:
         65:34:a9:7a:c4:da:49:42:ad:87:fa:a1:b0:ff:60:35:ea:36:
         64:fc:6d:12:8d:27:c5:66:67:e9:7b:56:f3:40:65:79:aa:83:
         2d:ca:3c:fd:e8:d0:27:c2:9c:97:8e:df:5c:c0:3d:b2:7e:8e:
         04:7a:ad:f9:86:fe:10:74:eb:7d:f1:ca:14:f2:17:be:63:05:
         bf:9a:79:38:f1:c2:72:ab:bf:a7:db:88:4c:09:2f:b3:fb:9c:
         a6:14:64:41:1b:f7:ef:9f:ec:2f:89:ae:ee:10:f1:af:66:21:
         ee:31:4f:1d:4b:e0:06:b5:dc:0b:c1:3a:1c:d5:2f:bb:b1:63:
         01:5b:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----