Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89D701269D3711F1A52968ADCE1D38B0.roa
File:                     89D701269D3711F1A52968ADCE1D38B0.roa (raw, json)
Hash identifier:          1Hz0c8gMrOBc84A/MiXA5TQVV9qhZMeIfs6+3GTilOM=
Subject key identifier:   F2:3B:05:7A:BB:C4:03:74:7C:52:51:88:E6:79:75:C4:07:28:A4:F8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89D701269D3711F1A52968ADCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:08:49 +0000
ROA not before:           Fri 21 Aug 2026 08:08:45 +0000
ROA not after:            Tue 24 Aug 2027 08:08:45 +0000
asID:                     64013
IP address blocks:        156.247.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118641 (0x1cf71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 08:08:45 2026 GMT
            Not After : Aug 24 08:08:45 2027 GMT
        Subject: CN=6a880791-937b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:27:35:3d:cc:de:3a:94:5f:1b:17:bb:3c:
                    f7:bf:28:a3:64:e3:0d:91:85:5c:10:28:f9:af:0f:
                    77:84:8c:57:10:1a:ef:91:7d:72:d6:d7:0e:e2:2c:
                    b2:5a:e0:d6:fe:26:3f:29:1b:22:58:eb:d6:1d:17:
                    8d:29:4a:c5:c2:f3:d3:a4:4d:f4:8b:8c:fb:eb:9a:
                    8e:b3:0f:06:3b:2b:f2:64:14:ab:74:71:7a:b2:5a:
                    7d:70:ca:b8:6e:51:ac:95:37:89:47:a0:09:29:c4:
                    b6:4b:d8:38:27:dd:ca:63:b3:5e:f4:f4:0d:cc:15:
                    f3:96:7d:a6:21:53:59:33:a6:ce:df:fb:e4:ae:14:
                    2f:9b:89:80:1e:b4:74:85:a0:c8:d6:fb:82:12:b3:
                    a0:7b:68:5c:bb:8a:2c:60:e0:d1:54:68:b7:4b:cb:
                    5f:bc:5e:d2:44:56:f6:93:0b:07:c5:c0:a7:a9:e8:
                    54:44:06:6d:be:f5:f8:e1:82:1b:db:d8:45:bf:90:
                    e6:30:fc:9b:05:20:a0:1a:c3:e5:9a:0f:5b:38:60:
                    d8:e3:50:c7:7a:c2:98:52:63:62:ec:07:27:88:91:
                    51:c2:ce:1f:88:6e:93:de:6e:24:bb:11:74:e2:4b:
                    43:7e:8d:52:2d:e7:ca:5a:23:3f:97:3e:0a:47:c5:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3B:05:7A:BB:C4:03:74:7C:52:51:88:E6:79:75:C4:07:28:A4:F8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89D701269D3711F1A52968ADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:c7:60:a3:3b:4c:29:e0:2f:47:62:2f:3a:92:71:b7:fb:
         a4:fa:8f:77:a3:81:92:36:08:6d:f0:ba:d2:f8:1b:ad:16:9c:
         59:25:83:d7:16:03:e7:ad:1e:68:f6:bb:c7:01:3f:84:11:8e:
         8d:b0:5e:f3:54:10:4f:22:7c:ce:33:12:27:ef:58:ed:2d:97:
         1b:f2:14:a3:ab:68:41:bc:c7:50:c7:9d:3c:c0:2b:f8:ff:26:
         50:62:d7:a1:39:a1:1f:7d:dc:c1:4b:62:07:75:cc:02:7e:0d:
         1f:4f:be:e9:d8:24:09:9b:5c:21:c1:a8:e7:3b:83:7f:f2:70:
         48:92:30:4e:b1:14:3b:ca:d7:30:9a:33:73:76:65:81:b5:29:
         e6:9c:3c:f2:9d:4a:62:a1:19:60:1e:4a:3e:48:2a:39:e1:1a:
         20:0f:22:ec:eb:6f:11:78:54:13:d0:c6:18:b3:92:b1:f4:e3:
         36:4a:b2:35:a5:6f:b1:3c:84:d1:ae:b9:de:fb:91:62:29:32:
         ed:cd:60:04:83:77:eb:29:1a:98:35:46:68:95:56:5a:75:a8:
         0b:35:4a:54:84:8d:0c:43:89:01:50:91:3a:39:c6:0a:77:4f:
         7c:e1:29:4b:a3:14:42:b8:d5:52:ed:d5:13:e6:da:4e:06:e5:
         b5:d1:b0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----