Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/997C0DFCCF7711F194533DE6CE1D38B0.roa
File:                     997C0DFCCF7711F194533DE6CE1D38B0.roa (raw, json)
Hash identifier:          UTiMm2SiRjYVnnA347tljIEBJYS/P1uRJZdPG3Tj1P4=
Subject key identifier:   D9:97:BE:8E:E8:C7:10:C8:FD:DF:5A:74:A0:E2:B9:81:DF:3C:39:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DFEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/997C0DFCCF7711F194533DE6CE1D38B0.roa
Signing time:             Sat 24 Oct 2026 06:53:21 +0000
ROA not before:           Sat 24 Oct 2026 06:53:16 +0000
ROA not after:            Tue 03 Nov 2026 06:53:16 +0000
asID:                     153656
IP address blocks:        156.254.32.0/19 maxlen: 24
                          156.254.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122863 (0x1dfef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 24 06:53:16 2026 GMT
            Not After : Nov  3 06:53:16 2026 GMT
        Subject: CN=6adc55e1-d7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:47:b8:b8:21:8a:f8:33:dc:bd:8e:f3:91:8d:
                    67:0d:8f:2c:7c:29:74:b7:7e:b5:02:e4:50:a3:ac:
                    7a:b5:a1:bf:7c:3f:2c:e1:e3:9f:3f:1d:08:14:81:
                    60:72:12:10:9a:54:f2:60:2e:54:36:74:73:6b:35:
                    4c:28:e4:b9:ca:f0:40:16:e3:fd:1a:c3:1f:8a:5e:
                    14:15:1a:d5:06:dc:b9:2d:12:ef:77:c9:9c:21:d3:
                    d5:23:32:4f:1e:cf:d4:b7:a6:eb:44:b1:03:fc:0b:
                    9e:db:18:af:13:15:ff:b0:99:2e:77:08:64:16:65:
                    27:97:ff:78:58:be:93:a9:15:6e:fd:fc:a1:8a:a0:
                    e9:98:29:2f:05:4a:41:92:37:d3:2d:29:d6:89:b2:
                    43:1a:67:f9:81:43:82:85:b5:5f:45:1a:40:61:ba:
                    8c:4f:95:21:2c:50:8e:2f:2c:ac:49:ae:77:52:40:
                    fe:24:b3:9b:7f:4c:15:8d:c9:26:19:8e:1a:16:8c:
                    7f:c7:1b:93:72:4c:10:74:61:be:6d:f4:65:99:01:
                    3b:d1:5e:ad:a0:34:f3:53:50:e5:33:39:d2:50:3e:
                    d2:7b:f0:02:e7:1c:45:d4:76:88:ec:3f:a2:9f:57:
                    66:e7:d7:fb:93:8c:22:71:a4:51:dc:8d:d2:18:1e:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:97:BE:8E:E8:C7:10:C8:FD:DF:5A:74:A0:E2:B9:81:DF:3C:39:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/997C0DFCCF7711F194533DE6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.32.0-156.254.95.255

    Signature Algorithm: sha256WithRSAEncryption
         4d:72:cd:cc:f2:80:d7:82:09:20:d9:9e:9c:8a:7a:78:ca:b1:
         ab:34:3a:8c:cf:16:78:c6:98:3c:c9:eb:4d:1a:31:fe:c9:bd:
         5c:08:29:ff:70:27:1c:fe:c2:df:40:76:fe:43:53:1b:13:fe:
         1e:54:76:55:fb:48:3e:d3:b2:35:6c:79:56:14:19:35:a0:ea:
         2d:ea:6c:0c:08:d4:4f:58:c2:e2:3f:2e:76:1c:67:0d:7d:7b:
         eb:23:b1:c1:20:94:d7:78:82:0b:30:53:fc:57:c0:94:ad:e0:
         f5:71:94:dc:b4:f0:9d:dc:18:67:b6:82:f5:62:0f:f7:c0:27:
         63:3f:bf:b0:0e:28:fe:87:d2:77:22:62:f2:d1:cc:c5:29:bb:
         a3:05:d4:67:50:9c:44:68:59:28:f6:a4:e8:ab:d3:51:e2:c5:
         f5:f4:b5:91:d4:8c:68:92:cd:9d:5e:b1:34:de:0e:4e:e9:32:
         d2:2b:98:65:0e:68:98:68:59:30:81:99:c7:44:a4:af:a2:0a:
         ad:28:59:70:65:b2:b6:4f:fb:0e:97:d6:09:d0:d4:5e:7e:66:
         5f:80:64:4a:7f:c4:dd:1a:0d:63:00:5d:75:16:b8:87:38:ad:
         e0:23:2b:e8:44:63:92:e8:0f:fe:9a:e4:70:6d:a1:77:09:5d:
         30:25:54:2e
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAd/vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDI0MDY1MzE2WhcNMjYxMTAzMDY1MzE2WjAYMRYw
FAYDVQQDEw02YWRjNTVlMS1kN2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Ee4uCGK+DPcvY7zkY1nDY8sfCl0t361AuRQo6x6taG/fD8s4eOfPx0I
FIFgchIQmlTyYC5UNnRzazVMKOS5yvBAFuP9GsMfil4UFRrVBty5LRLvd8mcIdPV
IzJPHs/Ut6brRLED/Aue2xivExX/sJkudwhkFmUnl/94WL6TqRVu/fyhiqDpmCkv
BUpBkjfTLSnWibJDGmf5gUOChbVfRRpAYbqMT5UhLFCOLyysSa53UkD+JLObf0wV
jckmGY4aFox/xxuTckwQdGG+bfRlmQE70V6toDTzU1DlMznSUD7Se/AC5xxF1HaI
7D+in1dm59f7k4wicaRR3I3SGB5P0QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNmX
vo7oxxDI/d9adKDiuYHfPDlSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OTdDMERGQ0NGNzcxMUYxOTQ1MzNERTZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWc/iADBAWc/kAwDQYJKoZI
hvcNAQELBQADggEBAE1yzczygNeCCSDZnpyKenjKsas0OozPFnjGmDzJ600aMf7J
vVwIKf9wJxz+wt9Adv5DUxsT/h5UdlX7SD7TsjVseVYUGTWg6i3qbAwI1E9YwuI/
LnYcZw19e+sjscEglNd4ggswU/xXwJSt4PVxlNy08J3cGGe2gvViD/fAJ2M/v7AO
KP6H0nciYvLRzMUpu6MF1GdQnERoWSj2pOir01HixfX0tZHUjGiSzZ1esTTeDk7p
MtIrmGUOaJhoWTCBmcdEpK+iCq0oWXBlsrZP+w6X1gnQ1F5+Zl+AZEp/xN0aDWMA
XXUWuIc4reAjK+hEY5LoD/6a5HBtoXcJXTAlVC4=
-----END CERTIFICATE-----