Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E3530C2A12D11F1B76432EBCE1D38B0.roa
File:                     8E3530C2A12D11F1B76432EBCE1D38B0.roa (raw, json)
Hash identifier:          iQGK3yh6uvA532CKDmSf408nTWSMRpqgCu7EC3AgmhE=
Subject key identifier:   F5:19:E4:99:EA:11:B5:1C:F5:E9:69:55:7C:1F:41:3C:9A:B0:FE:05
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D115
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E3530C2A12D11F1B76432EBCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 09:07:26 +0000
ROA not before:           Wed 26 Aug 2026 09:07:22 +0000
ROA not after:            Sat 25 Aug 2029 09:07:22 +0000
asID:                     17561
IP address blocks:        156.235.178.0/24 maxlen: 24
                          156.235.179.0/24 maxlen: 24
                          156.235.180.0/24 maxlen: 24
                          156.235.181.0/24 maxlen: 24
                          156.235.182.0/24 maxlen: 24
                          156.235.183.0/24 maxlen: 24
                          156.235.184.0/24 maxlen: 24
                          156.235.185.0/24 maxlen: 24
                          156.235.186.0/24 maxlen: 24
                          156.235.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119061 (0x1d115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 09:07:22 2026 GMT
            Not After : Aug 25 09:07:22 2029 GMT
        Subject: CN=6a8eacce-901b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:bf:52:95:09:89:c9:cb:c5:3d:ce:dc:77:
                    95:ba:66:9d:76:c1:a5:dc:55:66:f1:f3:e3:4e:53:
                    38:19:b9:db:05:78:c7:1e:1b:be:22:d9:25:50:9c:
                    ed:7f:6d:5c:23:f0:e7:e6:70:d0:1c:25:ec:64:65:
                    03:64:b3:79:d7:e5:7a:7a:c8:92:f2:41:ac:7a:cd:
                    72:41:d2:06:b9:29:93:6a:35:12:e7:6e:cf:07:e4:
                    bb:1c:e9:bf:95:cb:6d:11:a3:6a:87:42:a2:08:96:
                    ae:c7:b7:23:b4:ea:17:ac:e9:7f:41:cc:27:ed:12:
                    1d:41:38:c5:8c:f0:76:ae:b2:e4:51:b1:79:de:81:
                    b3:fd:1a:df:5a:61:0e:37:4d:75:37:d5:30:ee:81:
                    af:27:f7:17:a3:89:89:70:60:59:40:39:1b:56:ca:
                    00:66:5e:c6:ab:e1:04:0f:63:39:14:8d:3e:46:76:
                    fa:05:80:61:c8:4d:49:8a:ce:03:f4:df:f1:f4:13:
                    2c:ab:48:08:d5:24:81:cb:e0:f9:73:63:a8:c2:51:
                    94:bd:3d:b4:37:27:11:86:8d:c2:27:0f:d2:73:73:
                    77:fc:fb:a9:df:46:c1:5d:00:4e:23:35:54:fc:e2:
                    fe:3d:be:49:93:e8:41:7c:31:dd:7a:ea:86:65:33:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:19:E4:99:EA:11:B5:1C:F5:E9:69:55:7C:1F:41:3C:9A:B0:FE:05
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E3530C2A12D11F1B76432EBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.178.0-156.235.187.255

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:25:0a:7c:2e:44:12:b5:82:42:0c:ea:8d:0b:a0:c7:2a:
         76:72:af:c5:7d:64:c3:cc:a5:c8:51:6f:f0:2a:0d:23:98:8c:
         96:90:80:c4:e1:7d:80:db:a1:cd:14:59:b7:2f:b1:64:93:14:
         45:f6:90:7c:2e:7d:74:96:66:b2:a1:cb:5e:0e:9a:4c:16:14:
         b9:ca:c3:ec:f8:4d:27:2b:38:37:0b:de:f2:e3:b0:e1:10:2a:
         67:6e:d9:bc:0c:20:68:7b:40:65:a0:24:b3:5b:0f:a0:9f:9a:
         18:84:97:e8:2f:fe:02:bb:10:d0:58:52:73:0b:4c:81:45:bf:
         71:53:65:27:f8:04:ee:51:7d:5e:62:5f:53:a2:7d:7a:8e:18:
         10:3e:ce:94:2d:80:ad:54:0c:4d:0d:8c:43:ad:60:d7:6b:8e:
         46:8c:c0:68:6a:7e:86:d5:54:fd:9e:1d:41:f9:01:7f:51:eb:
         79:b2:ff:cb:0a:03:bd:4e:f9:e5:09:df:ed:2d:29:24:54:37:
         be:62:6f:52:65:b7:02:1d:c4:f0:fc:b2:03:0a:7b:30:8e:4b:
         b9:ab:83:07:54:22:d4:4c:80:17:7f:e6:10:e0:b1:c6:8f:78:
         f3:3c:da:6d:10:9d:18:ee:ca:04:ec:b2:2f:95:92:d5:f8:4b:
         cc:65:a1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----