Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/896D3002CC6211F1B55B6E07CF1D38B0.roa
File:                     896D3002CC6211F1B55B6E07CF1D38B0.roa (raw, json)
Hash identifier:          zwAgaahnELx+FWw8pZau1ODhGJ2BiSrIhvI30Udi2NU=
Subject key identifier:   8E:A0:5B:7A:73:A6:87:92:6E:EB:C0:63:71:0A:05:C6:A4:F8:CF:36
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DEDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/896D3002CC6211F1B55B6E07CF1D38B0.roa
Signing time:             Tue 20 Oct 2026 08:45:01 +0000
ROA not before:           Tue 20 Oct 2026 08:44:57 +0000
ROA not after:            Fri 05 Nov 2027 08:44:57 +0000
asID:                     150706
IP address blocks:        156.254.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Oct 2026 13:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122586 (0x1deda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 20 08:44:57 2026 GMT
            Not After : Nov  5 08:44:57 2027 GMT
        Subject: CN=6ad72a0d-8581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:b4:f4:bb:8e:4d:c0:d2:f7:6a:ae:f8:3f:
                    fa:b8:57:18:d8:58:45:c9:af:88:6f:18:d8:62:d3:
                    d1:b9:93:d5:18:b3:03:f7:36:06:28:8f:c9:31:a3:
                    90:00:18:70:a4:0c:3a:d6:5e:4f:27:25:52:fe:66:
                    50:0d:bd:94:59:c6:fc:c1:23:be:ba:18:ff:d9:27:
                    7b:ef:aa:4d:53:68:fc:5c:55:1b:3c:aa:7e:76:53:
                    1f:5c:ad:e3:60:70:66:dc:01:39:18:59:80:75:5b:
                    f3:9f:2e:f7:f1:59:15:05:c8:bd:20:f7:c3:aa:7f:
                    f3:ab:5a:3a:5a:c7:84:0e:92:f9:c3:39:8d:fa:e0:
                    e0:37:ca:df:5a:8f:92:fb:70:db:87:80:e1:9e:e3:
                    3c:8e:5e:2f:84:0d:11:2e:7b:b9:4e:64:01:54:92:
                    0b:7a:98:3a:6c:f8:c5:39:2e:c0:6e:29:1b:d8:26:
                    9c:3a:20:29:67:fd:50:6f:7d:55:30:3a:93:e3:76:
                    aa:b5:71:59:7c:de:d9:8b:b4:dc:87:d1:3f:ba:10:
                    02:4c:22:2a:f2:ff:ce:e9:84:f1:14:dd:38:d6:c5:
                    e6:0c:07:08:8f:b3:7d:c5:82:4c:0f:ce:fb:97:80:
                    da:1d:39:c5:a0:08:3f:76:e4:0c:b8:ba:82:6e:43:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A0:5B:7A:73:A6:87:92:6E:EB:C0:63:71:0A:05:C6:A4:F8:CF:36
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/896D3002CC6211F1B55B6E07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:39:f1:26:15:bb:bc:ac:a1:6b:df:ee:2e:17:90:49:49:
         08:5c:c3:05:86:dc:05:08:58:e9:a0:45:4d:77:f2:47:68:18:
         49:ac:94:c9:c4:48:d8:3b:20:0d:16:ce:2f:3b:a0:36:03:4e:
         c8:ba:a7:1c:10:e6:b2:3e:02:8b:49:29:48:59:af:88:1d:dc:
         7a:4d:89:e1:b6:ca:26:4f:f0:34:77:98:77:ec:0c:af:69:eb:
         1c:ca:3c:1f:f8:b6:0c:42:45:b1:3b:ee:0a:e1:b3:b6:47:de:
         43:ce:ed:1a:c5:43:8f:05:cf:a8:0d:9c:ae:fe:de:2b:1f:6a:
         53:85:bd:20:81:af:38:7b:e7:ae:9c:31:10:7e:a1:df:c8:3d:
         49:f5:ee:6b:35:bd:24:6f:d5:76:87:32:7d:61:e3:3c:0c:8f:
         2c:05:0a:a5:58:bd:c9:32:62:07:b5:51:8c:68:43:72:98:ef:
         66:01:8d:f8:ef:4c:4f:90:38:b9:a4:6a:34:ed:e2:9a:b5:3f:
         75:71:95:1a:8a:40:8b:d9:43:3b:06:2b:35:0e:b2:4b:fd:ad:
         06:30:1a:0f:4d:a2:67:6d:1e:4b:f3:4b:cf:ce:0c:e5:b0:21:
         06:e5:db:12:3e:60:2d:80:5e:60:06:65:b4:c2:d1:31:e6:2b:
         83:3b:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----