Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A02E45CC955F11F19F144616CF1D38B0.roa
File:                     A02E45CC955F11F19F144616CF1D38B0.roa (raw, json)
Hash identifier:          I6av9Uu+DvRpsothRWKd//GpPcZ9m+rcmMWdUj07qu0=
Subject key identifier:   3F:1B:DC:8F:FC:2F:44:FF:E7:86:E4:0D:EE:E3:55:45:4C:39:2B:4D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A02E45CC955F11F19F144616CF1D38B0.roa
Signing time:             Tue 11 Aug 2026 08:35:37 +0000
ROA not before:           Tue 11 Aug 2026 08:35:32 +0000
ROA not after:            Wed 09 Sep 2026 08:35:32 +0000
asID:                     271907
IP address blocks:        156.238.73.0/24 maxlen: 24
                          156.238.74.0/24 maxlen: 24
                          156.238.75.0/24 maxlen: 24
                          156.238.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117629 (0x1cb7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 08:35:32 2026 GMT
            Not After : Sep  9 08:35:32 2026 GMT
        Subject: CN=6a7aded9-6a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a8:a0:35:d6:fb:68:83:a2:e5:8b:df:e2:1e:
                    84:37:50:9d:26:6f:b0:78:4d:c3:96:78:86:81:43:
                    51:75:93:1a:21:40:21:04:3f:f7:c3:39:0a:75:a0:
                    b6:a8:c1:5a:ff:d7:49:35:3a:ec:ff:a8:d1:0e:e0:
                    83:25:9a:55:a1:eb:53:36:6e:68:5b:a9:c4:16:8e:
                    67:7b:9c:80:6d:44:9f:d0:7c:18:b5:59:b1:79:b7:
                    a5:21:e4:a5:2c:08:33:75:36:56:0a:d3:37:39:4c:
                    98:3a:62:d5:24:55:f1:de:e8:bb:14:c4:77:66:24:
                    f4:9c:1e:32:09:e6:8d:2a:63:15:21:8f:c6:b3:b9:
                    d8:6b:9b:9d:0c:e2:ed:d9:a5:98:db:a9:f7:6b:38:
                    9c:30:b0:b4:7f:4a:2f:fe:6a:d6:8c:49:fe:18:97:
                    db:e8:2a:2d:9c:e1:3f:02:b8:57:aa:1a:62:8c:9e:
                    4f:d5:3b:ef:c1:09:1c:1c:27:a1:20:95:9f:4f:2b:
                    b1:61:fc:46:d3:ca:23:9a:69:16:3e:e6:84:ee:16:
                    16:52:7b:06:0a:23:ce:30:d4:29:3c:e9:8a:8d:b9:
                    3f:0d:ff:0a:8a:5a:1f:28:d2:27:50:d6:97:99:a6:
                    9c:66:6b:81:59:92:57:59:36:82:c3:6c:30:ac:97:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1B:DC:8F:FC:2F:44:FF:E7:86:E4:0D:EE:E3:55:45:4C:39:2B:4D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A02E45CC955F11F19F144616CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.73.0-156.238.76.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:b1:03:eb:83:6c:a6:eb:09:43:d2:43:1f:02:10:3d:0d:2e:
         b7:ff:c1:98:5b:1e:11:e9:f3:29:0d:dc:5b:13:f7:bf:e8:18:
         f5:2e:20:34:77:82:6d:4a:3e:25:10:e7:68:97:e7:1f:a9:17:
         21:0b:7e:9b:b4:4d:eb:95:2a:86:c3:9a:d2:96:a2:28:c5:f8:
         b1:ac:f2:ae:cc:c4:6b:8c:e4:cc:bb:69:17:5d:8a:d2:72:57:
         5b:9f:57:f6:b9:fb:a0:fa:1b:bb:a4:5d:ad:8a:90:7a:2c:6e:
         49:05:db:48:84:22:df:f1:20:54:78:b7:d3:9e:73:20:32:28:
         bd:44:43:ea:8d:c8:23:31:eb:3d:98:69:02:47:57:a1:3c:37:
         27:ca:17:47:e9:11:5d:4a:9c:d2:85:61:89:14:0a:4b:25:32:
         a8:30:ab:20:a3:b7:47:d1:91:7c:34:44:09:c0:ce:50:d1:75:
         5a:56:45:be:bf:1d:2e:7f:b9:52:7b:01:65:5e:85:a2:cc:5a:
         df:8a:3a:87:04:99:98:5f:6b:04:5f:18:e9:01:f9:85:88:5f:
         11:99:12:5d:e0:94:12:b1:55:95:56:3f:7b:44:6c:cb:49:48:
         f3:86:ad:b1:45:d1:03:fd:52:59:d1:7c:6a:0f:db:4a:02:0f:
         14:12:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----