Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9933323E9C7411F188989E07CF1D38B0.roa
File:                     9933323E9C7411F188989E07CF1D38B0.roa (raw, json)
Hash identifier:          g6yLCU926hDDXWM/XTWYLcDmAXRzzGpe4DoEq/mvtw8=
Subject key identifier:   AA:39:08:F8:1B:AD:22:3C:E9:7B:B3:94:F6:6B:E5:98:81:80:17:EA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9933323E9C7411F188989E07CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:53:23 +0000
ROA not before:           Thu 20 Aug 2026 08:53:19 +0000
ROA not after:            Sun 20 Sep 2026 08:53:19 +0000
asID:                     400619
IP address blocks:        156.254.0.0/19 maxlen: 24
                          156.254.0.0/24 maxlen: 24
                          156.254.1.0/24 maxlen: 24
                          156.254.2.0/24 maxlen: 24
                          156.254.3.0/24 maxlen: 24
                          156.254.4.0/24 maxlen: 24
                          156.254.5.0/24 maxlen: 24
                          156.254.6.0/24 maxlen: 24
                          156.254.7.0/24 maxlen: 24
                          156.254.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118426 (0x1ce9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 08:53:19 2026 GMT
            Not After : Sep 20 08:53:19 2026 GMT
        Subject: CN=6a86c083-0cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:26:57:25:e3:1a:b8:52:1d:10:43:1e:97:87:
                    a2:b4:0c:a7:09:8b:f9:ac:2f:3b:c9:95:4d:5c:b3:
                    7e:bf:c3:0d:96:f2:a7:97:39:b1:45:ed:ae:a7:f4:
                    01:74:d5:51:56:00:47:10:e8:52:c0:98:fe:7b:3e:
                    d5:ab:7c:97:dd:e3:11:dd:b6:b5:31:6f:24:52:e1:
                    a6:61:89:a0:2b:28:b5:c7:83:13:c7:f4:15:b5:3e:
                    a8:36:b2:be:c4:f3:87:a4:99:17:4b:50:40:a1:a4:
                    8a:e8:e4:b9:2d:5c:2e:a0:81:ed:1e:92:0c:fe:d2:
                    a7:96:cc:3a:c6:94:f0:07:6f:4e:85:70:99:2e:4c:
                    5a:8d:db:32:60:2f:63:81:98:23:5e:f8:8d:a0:35:
                    6d:b0:dc:28:fe:e0:2d:c5:6b:4c:2a:34:fd:c3:7d:
                    e5:78:44:d6:d8:4f:68:2e:d0:81:16:cd:7c:23:2c:
                    50:73:d3:d7:e5:22:c6:fc:bb:ed:b4:a0:42:01:8b:
                    41:fc:57:e4:b9:bc:cf:fa:8f:e2:1d:96:93:a4:5d:
                    b6:c1:7f:6a:30:bc:2e:8b:d0:03:82:7b:34:67:ac:
                    c7:b9:02:e3:5d:64:43:28:04:2f:9b:49:62:94:d3:
                    70:4c:e2:8c:bc:0a:0f:38:fc:b6:75:69:7a:57:8b:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:39:08:F8:1B:AD:22:3C:E9:7B:B3:94:F6:6B:E5:98:81:80:17:EA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9933323E9C7411F188989E07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:11:43:0d:1e:2e:da:52:19:ad:ee:11:0e:3c:a1:9f:f8:6b:
         31:9e:01:e6:8b:65:42:b4:5a:02:bb:69:f5:52:35:54:59:5d:
         e6:02:a4:b8:72:83:6b:0b:71:c2:9a:b3:c4:ef:dd:fc:34:be:
         0b:22:b1:25:ea:44:26:ad:72:f6:5b:af:78:ed:27:00:9d:b4:
         5d:bb:9f:74:b6:eb:6f:3a:bd:0c:28:4b:62:70:7c:bf:9f:e2:
         77:22:bf:bc:69:13:92:d7:c3:6d:b6:c9:68:09:7f:3b:ed:3c:
         e5:28:42:2d:bb:2b:05:12:a4:ba:4b:49:25:9c:c8:c4:1c:45:
         da:bc:a1:08:7b:87:39:f0:13:c8:d6:6d:82:3a:89:8c:34:c5:
         88:3a:e8:a4:1c:8c:9e:4d:09:62:20:7e:90:26:ab:df:58:58:
         56:08:cc:9a:a5:0f:20:a9:72:fa:d1:cd:9f:84:d2:3a:a5:49:
         fd:ff:ee:38:06:ba:18:3d:6b:c1:95:31:a3:3c:c4:28:6d:7f:
         85:e9:50:dc:ac:d1:07:76:38:ee:cd:c3:6c:d7:64:60:74:ac:
         b7:30:38:a1:2f:7b:7f:83:b1:d3:ab:01:c2:4b:cf:81:e3:d1:
         96:2a:60:ee:94:a6:2f:e2:41:5e:3c:a6:02:e2:08:3a:8c:fb:
         99:13:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----