Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDB63889C8411F1B4DBBBE7CE1D38B0.roa
File:                     8DDB63889C8411F1B4DBBBE7CE1D38B0.roa (raw, json)
Hash identifier:          F3/v1wcI7us7tS16aLC7bJhbLFBAXHvtuotBf04rBBY=
Subject key identifier:   0E:D8:50:8F:0C:2E:8D:CF:E4:C1:79:78:49:AA:39:4D:2E:9C:C8:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CECA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDB63889C8411F1B4DBBBE7CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:47:36 +0000
ROA not before:           Thu 20 Aug 2026 10:47:32 +0000
ROA not after:            Sat 10 Oct 2026 10:47:32 +0000
asID:                     25160
IP address blocks:        156.225.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 00:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118474 (0x1ceca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 10:47:32 2026 GMT
            Not After : Oct 10 10:47:32 2026 GMT
        Subject: CN=6a86db48-2d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:ac:ba:06:4e:5c:d4:42:6c:9f:ef:c6:f1:
                    82:ac:8c:51:d9:e4:0d:00:76:a3:dd:a0:c7:c7:07:
                    d9:59:9a:5b:e5:cc:fc:25:18:98:98:a0:cf:17:2b:
                    a1:31:c7:ad:a0:9d:2a:2d:1e:cd:1c:bd:a6:c0:cb:
                    fc:33:73:50:21:c2:61:d2:40:51:08:07:52:0a:7f:
                    58:98:c2:48:f9:b4:7a:a8:23:be:34:7f:13:a8:1e:
                    fa:3f:8f:3a:8f:17:31:51:f6:a5:ba:53:61:6b:2c:
                    61:a4:40:10:4e:87:7d:06:ee:38:6c:f5:bd:ca:ea:
                    67:84:98:89:9a:8d:57:41:b8:0b:45:ae:9c:4b:21:
                    90:79:97:da:97:b8:2a:17:c7:2b:9f:48:09:86:77:
                    c5:a8:08:a2:eb:2b:7b:aa:99:c5:a9:ed:27:5e:e5:
                    63:16:05:b2:0c:d9:8a:54:75:cc:86:fc:0b:34:10:
                    19:cb:e7:fc:b6:0e:c8:17:db:42:9f:35:06:ab:c9:
                    b4:dd:24:bc:28:82:c4:14:13:87:87:3d:37:d9:9b:
                    e8:d8:c9:c7:03:8b:b8:76:eb:a2:bd:5e:4e:b6:9d:
                    10:09:98:67:5b:b8:e0:29:ae:b6:08:43:f0:c0:c2:
                    ce:db:92:d3:ed:cd:47:b4:19:d6:3f:b1:fc:c5:34:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D8:50:8F:0C:2E:8D:CF:E4:C1:79:78:49:AA:39:4D:2E:9C:C8:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDB63889C8411F1B4DBBBE7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:3d:52:78:88:25:6c:0a:f9:09:b7:83:08:0e:2c:76:21:
         e9:ad:a8:2b:8b:a1:ef:a9:e9:95:a3:15:09:36:0f:b2:ed:7e:
         0f:ac:b9:c1:df:b5:18:fb:84:61:d6:fe:0f:8a:0e:73:88:19:
         32:1a:f9:48:bc:68:74:1c:26:4f:78:3a:e7:96:1a:2a:84:12:
         c5:6a:ab:a2:5e:91:ea:8f:c5:45:3b:da:25:20:0a:aa:2b:6e:
         c1:ae:11:92:34:4d:67:1c:35:b7:70:2b:0c:f6:ca:bf:cc:b4:
         72:7f:af:18:5b:98:22:f6:34:ba:3f:75:2a:35:c9:b8:f4:52:
         2a:ed:08:69:95:d9:57:2c:8a:8e:40:1c:c2:04:b2:52:94:07:
         37:fd:32:8a:a0:a9:83:57:f8:7e:aa:a1:a5:f8:66:aa:76:a5:
         a3:7b:21:8a:97:15:55:bf:74:b5:15:c7:78:7b:53:a9:91:5c:
         a6:e2:b2:dc:7f:c2:d0:5e:6d:88:55:a2:bf:5b:1c:23:46:72:
         0e:2c:f3:3a:1f:2a:5d:d2:67:97:52:4a:80:10:d0:48:5f:1c:
         39:96:31:4e:cf:c7:f7:39:af:4c:32:91:2a:c5:af:27:fc:2f:
         37:29:3b:af:fd:5d:af:54:58:d9:c0:fa:8f:1e:14:85:7f:f3:
         0f:68:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----