Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C30C6CC4A211F18603D5F4CE1D38B0.roa
File:                     A0C30C6CC4A211F18603D5F4CE1D38B0.roa (raw, json)
Hash identifier:          73Lc4mq4/fkHe09j64jgx2PwLJDbHCDfET+aVzGZoko=
Subject key identifier:   83:69:F2:40:AE:D0:63:FC:19:1F:AC:86:BB:87:73:93:F3:D2:6C:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C30C6CC4A211F18603D5F4CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 12:03:39 +0000
ROA not before:           Sat 10 Oct 2026 12:03:34 +0000
ROA not after:            Tue 17 Nov 2026 12:03:34 +0000
asID:                     22773
IP address blocks:        156.233.253.0/24 maxlen: 24
                          156.233.254.0/24 maxlen: 24
                          156.233.255.0/24 maxlen: 24
                          156.238.136.0/24 maxlen: 24
                          156.238.137.0/24 maxlen: 24
                          156.238.138.0/24 maxlen: 24
                          156.238.139.0/24 maxlen: 24
                          156.238.140.0/24 maxlen: 24
                          156.238.141.0/24 maxlen: 24
                          156.238.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121974 (0x1dc76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 12:03:34 2026 GMT
            Not After : Nov 17 12:03:34 2026 GMT
        Subject: CN=6aca299b-55ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:c7:c1:6c:3f:6b:dc:7f:4f:5c:7d:21:3b:
                    0c:ed:1e:dc:3b:84:e3:ea:6d:a6:80:24:0c:b6:63:
                    7b:87:5b:df:a1:cf:67:91:bf:80:59:92:55:e0:5f:
                    ac:46:6a:bb:2d:6a:93:ca:ab:d9:5d:d6:45:ad:1d:
                    86:8d:95:6d:84:71:7c:83:40:14:f7:b2:99:c0:c8:
                    74:58:00:97:3a:d8:30:94:00:61:b7:66:b5:e5:69:
                    1c:59:db:bc:9f:1b:b2:e8:fd:d0:0c:94:82:23:1c:
                    92:2e:e0:83:bd:9e:87:3f:c2:b8:93:06:82:a8:53:
                    16:09:13:27:c6:14:e0:f1:19:c0:25:49:d3:93:86:
                    94:c8:d6:97:58:4d:81:b3:2a:01:84:94:6b:98:c2:
                    51:38:69:b8:2f:05:3b:ca:1b:fc:50:35:6e:6c:c0:
                    35:cf:86:11:ae:fd:f3:de:24:63:f5:65:70:05:47:
                    a4:a5:9d:61:f3:da:7b:7e:36:21:dc:c6:f5:0d:a6:
                    66:f6:60:45:15:a6:d0:ca:7b:57:7f:8b:c9:41:8b:
                    a0:61:3d:02:a1:00:6a:13:75:65:46:db:d4:1c:ed:
                    e9:61:a7:cc:da:ae:d8:02:56:7b:79:ca:58:05:0b:
                    f7:6c:f6:12:d5:9b:12:28:4a:f7:8f:ef:cb:fc:d3:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:69:F2:40:AE:D0:63:FC:19:1F:AC:86:BB:87:73:93:F3:D2:6C:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C30C6CC4A211F18603D5F4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.253.0-156.233.255.255
                  156.238.136.0-156.238.141.255
                  156.238.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:73:9a:03:74:35:1b:9f:7b:72:04:8f:38:7f:33:04:b5:
         41:78:20:e5:93:8c:ca:b0:17:a0:ea:61:ba:94:6d:7a:ff:39:
         8e:61:07:85:79:c2:f9:79:fe:4b:cb:a5:30:e2:99:84:e8:ac:
         d5:2e:2f:57:bd:85:5b:c3:cd:39:8b:ea:27:88:24:a1:a2:57:
         1a:a2:ef:24:58:b3:63:40:25:52:61:ff:bb:3d:76:df:15:25:
         f4:5f:96:5b:59:6b:b5:89:e9:d6:f1:d7:16:69:0b:3a:5b:f2:
         97:dd:e6:6e:28:24:4a:ac:f5:4f:ff:3a:3d:9a:4c:71:c4:5c:
         8c:eb:87:be:09:2b:1c:89:93:df:f4:c4:5f:32:01:09:af:04:
         0b:1d:d3:4d:f6:24:8b:45:dd:34:07:83:1a:0a:0f:f1:0a:49:
         1c:5e:08:09:46:f8:0b:b7:36:2a:25:5a:b1:30:e6:32:a5:f4:
         74:bb:89:50:bd:fd:3a:b4:98:04:1e:03:79:76:da:61:29:ef:
         a1:a9:73:40:e1:48:67:1c:08:35:da:07:a1:cb:99:f8:d6:0d:
         cd:78:46:ac:9b:06:07:6b:62:d7:b6:e8:9c:1e:52:43:58:8e:
         39:c2:4b:04:9a:c0:c2:42:49:0e:38:d4:fb:5a:5b:2f:fa:1e:
         f6:ec:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----