Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5034194B99811F1ABAE99D9CE1D38B0.roa
File:                     A5034194B99811F1ABAE99D9CE1D38B0.roa (raw, json)
Hash identifier:          sCU2n3iukqvkzjJUOJzeWb4FAuIGtjsalhW5Olw52TY=
Subject key identifier:   14:EA:6A:CE:6B:07:3A:2E:C9:EC:E7:74:1D:50:E4:21:E5:FF:19:71
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5034194B99811F1ABAE99D9CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 10:54:28 +0000
ROA not before:           Sat 26 Sep 2026 10:54:24 +0000
ROA not after:            Mon 02 Nov 2026 10:54:24 +0000
asID:                     11427
IP address blocks:        156.229.228.0/22 maxlen: 24
                          156.233.12.0/22 maxlen: 24
                          156.233.24.0/22 maxlen: 24
                          156.233.36.0/22 maxlen: 24
                          156.233.76.0/22 maxlen: 24
                          156.233.84.0/22 maxlen: 24
                          156.233.112.0/22 maxlen: 24
                          156.233.196.0/22 maxlen: 24
                          156.244.192.0/21 maxlen: 24
                          156.244.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121086 (0x1d8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 10:54:24 2026 GMT
            Not After : Nov  2 10:54:24 2026 GMT
        Subject: CN=6ab7a464-52dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:b6:0d:e2:6a:5f:6f:65:75:b3:31:00:30:
                    15:50:84:17:79:05:86:84:ab:18:5e:05:60:e3:4a:
                    8c:3c:02:00:48:42:37:58:b9:65:9b:94:b5:4d:77:
                    5d:f2:56:20:67:30:6a:5c:45:db:59:fb:20:9a:22:
                    5f:e3:3b:cf:b1:46:01:c5:36:70:d0:6f:ba:42:f1:
                    ba:96:cb:30:72:e5:9f:40:7d:d5:cf:03:49:43:47:
                    58:8d:4d:fe:5f:4b:6f:5a:25:68:c7:d7:c2:52:49:
                    30:3b:7f:11:fb:31:e2:99:f8:0d:6c:08:36:ea:46:
                    b4:c2:ba:31:6c:04:34:8e:08:81:74:e8:cc:23:2e:
                    7b:c6:d9:ce:b5:52:f6:d2:b7:1f:83:9b:57:65:db:
                    11:bf:35:3e:de:d6:4e:43:e3:07:ae:96:ba:07:39:
                    01:b0:c9:d4:0b:f5:40:c5:dd:36:04:36:24:05:d9:
                    60:65:c6:49:de:fd:36:a7:04:3b:48:53:58:a9:4f:
                    9f:c7:06:a4:67:c4:68:fc:fb:b9:6a:e7:32:81:6e:
                    76:58:4b:1d:6f:39:4b:5c:96:ee:d5:89:66:07:d3:
                    ff:4b:06:e0:61:e0:aa:7a:b0:40:fc:c6:13:d9:ab:
                    76:ed:3a:47:e1:ee:19:62:8b:7c:2a:32:e0:b2:1a:
                    38:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:6A:CE:6B:07:3A:2E:C9:EC:E7:74:1D:50:E4:21:E5:FF:19:71
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5034194B99811F1ABAE99D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.228.0/22
                  156.233.12.0/22
                  156.233.24.0/22
                  156.233.36.0/22
                  156.233.76.0/22
                  156.233.84.0/22
                  156.233.112.0/22
                  156.233.196.0/22
                  156.244.192.0/21
                  156.244.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:8f:45:8f:fb:3d:52:b9:67:a8:08:dc:75:5b:a6:b1:a3:
         ae:f2:71:0e:34:d3:28:c8:08:43:cf:a7:c0:40:a6:14:88:da:
         24:a7:af:82:e4:28:13:a7:05:6f:e6:68:cd:d1:3c:48:1c:8f:
         d8:ad:9c:7d:47:61:5a:8b:d6:ed:b0:fb:95:f3:66:d7:75:d9:
         22:54:8c:ab:79:a9:6a:1d:be:89:cf:ae:a6:a5:25:57:d7:12:
         24:a3:04:04:8c:fc:72:86:de:a3:c4:41:14:77:b4:d1:10:2b:
         79:41:ab:8a:bb:3a:87:a1:ac:ac:1a:5d:35:d5:37:17:a2:55:
         f0:28:d1:39:05:3e:ef:32:2b:85:63:f2:ec:95:60:d0:e8:9a:
         65:50:e6:4f:e1:84:65:ac:ec:ef:93:3f:93:42:aa:0d:4c:e1:
         8a:e9:7e:33:24:4e:2e:42:99:9e:ed:0b:20:ac:f6:16:75:04:
         bf:a7:11:fa:37:dd:e8:d1:e1:ee:8c:cb:0c:f1:05:fb:e3:02:
         ed:a3:7e:73:35:84:af:d1:9e:1c:75:86:a5:65:17:40:de:59:
         ca:9e:8c:52:61:14:d8:05:54:a3:6c:0a:aa:f6:81:b4:9f:5e:
         78:a9:06:28:df:8e:1f:3e:76:fc:79:bb:85:d4:bc:4f:c4:67:
         d7:bf:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----