Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/940938389C6211F1BD5A451DCF1D38B0.roa
File:                     940938389C6211F1BD5A451DCF1D38B0.roa (raw, json)
Hash identifier:          n1VniNNbjIQ/04JZox1ibdOZDN5rgbxdgIe9AmdK+RY=
Subject key identifier:   C1:3C:0B:A8:C3:D9:D7:E8:41:55:2F:BD:54:30:7D:BA:E7:82:0E:56
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/940938389C6211F1BD5A451DCF1D38B0.roa
Signing time:             Thu 20 Aug 2026 06:44:23 +0000
ROA not before:           Thu 20 Aug 2026 06:44:19 +0000
ROA not after:            Thu 12 Aug 2027 06:44:19 +0000
asID:                     135097
IP address blocks:        156.226.32.0/19 maxlen: 24
                          156.226.64.0/18 maxlen: 24
                          156.241.64.0/18 maxlen: 24
                          156.245.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118388 (0x1ce74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 06:44:19 2026 GMT
            Not After : Aug 12 06:44:19 2027 GMT
        Subject: CN=6a86a247-ca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:11:1b:84:7f:40:38:b5:78:b9:d8:1a:b9:
                    1c:3b:7b:66:3e:7c:36:1a:b6:ac:6b:c5:54:53:14:
                    8f:01:54:b7:46:6a:fa:04:43:60:8b:d9:81:a2:d3:
                    e2:0a:3b:3c:aa:a0:79:a2:c8:dc:23:27:cc:b9:01:
                    ba:34:39:2d:63:f0:04:74:65:ee:d6:e3:07:b7:1f:
                    7a:7f:1b:ec:ef:0e:aa:9c:78:eb:53:19:ff:fb:9e:
                    db:5e:aa:af:45:29:de:b1:b0:4a:5b:ca:51:2e:7f:
                    c6:ea:11:7b:28:3f:9f:ed:6f:89:31:00:c1:eb:fb:
                    6e:0d:69:87:eb:ff:30:1b:b1:d1:83:e2:ce:e8:ef:
                    40:36:29:46:eb:ac:14:c4:c8:d9:e8:99:0f:95:eb:
                    e9:82:f2:65:e2:d4:5c:2b:ab:13:9d:90:df:79:a3:
                    70:40:14:55:00:37:ef:55:0e:18:35:f2:1e:87:eb:
                    46:38:90:93:42:95:27:0d:d0:02:23:ed:7d:0d:87:
                    5e:46:65:41:4e:54:55:c0:91:83:92:56:c8:29:04:
                    be:e0:81:93:02:a8:0b:83:dc:3a:06:7e:d6:32:89:
                    f3:59:a8:34:4b:52:07:a5:ab:05:8e:e8:46:64:8d:
                    2d:74:02:be:94:ca:28:a3:ae:41:53:7f:95:ba:c8:
                    11:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:0B:A8:C3:D9:D7:E8:41:55:2F:BD:54:30:7D:BA:E7:82:0E:56
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/940938389C6211F1BD5A451DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.32.0-156.226.127.255
                  156.241.64.0/18
                  156.245.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:4d:f6:e9:ff:ec:cf:8d:84:81:85:92:0c:66:c5:0a:26:fe:
         57:8e:15:05:ce:f0:d7:db:44:18:e2:fe:a9:23:63:64:07:e0:
         e3:54:fd:32:87:f5:4c:98:e1:7c:db:45:4b:4f:aa:07:e6:65:
         c5:6d:8b:ba:35:58:a7:75:63:ec:be:a8:27:ed:07:84:6b:a3:
         42:0a:e6:7e:0f:d7:66:8b:dd:b3:33:6f:94:0d:aa:e4:eb:66:
         2f:76:10:1e:81:a5:ba:37:66:1e:da:60:51:f6:f6:fc:f2:b2:
         b6:2b:bb:8b:ae:95:aa:2f:43:19:5c:f3:72:6b:14:bc:d3:32:
         b8:93:2c:28:a9:6d:b3:bd:68:c6:4c:10:cb:93:f3:cf:a7:8e:
         b1:b8:dc:90:f4:9a:5f:da:7b:4b:b1:44:46:7e:89:d0:e3:af:
         cd:ca:1d:ec:7a:fd:ae:ef:2a:22:85:32:24:10:56:fe:0f:69:
         a0:a1:7f:19:1c:f1:d2:15:33:b4:e0:81:36:65:bc:31:c9:3a:
         07:92:55:25:54:c2:f7:a1:f6:69:d3:c4:4a:d2:9e:c0:1f:2b:
         11:bb:93:2d:ea:5f:89:41:c6:b7:ed:2a:db:b0:49:42:17:07:
         3b:b9:86:65:3e:2a:60:5a:1a:cf:fd:e9:f6:de:e9:b6:4c:be:
         15:40:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----