Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A510E1069D0411F18A2C93E5CE1D38B0.roa
File:                     A510E1069D0411F18A2C93E5CE1D38B0.roa (raw, json)
Hash identifier:          xgADTwc5wHlCIKBkijXoy3QJ2VSPfXTNVkAFbIRLjzs=
Subject key identifier:   A0:EA:93:A8:68:F3:1C:7B:89:69:DE:85:B3:30:49:35:5E:42:71:83
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A510E1069D0411F18A2C93E5CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 02:04:30 +0000
ROA not before:           Fri 21 Aug 2026 02:04:26 +0000
ROA not after:            Tue 17 Aug 2027 02:04:26 +0000
asID:                     401739
IP address blocks:        156.247.40.0/24 maxlen: 24
                          156.247.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118570 (0x1cf2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 02:04:26 2026 GMT
            Not After : Aug 17 02:04:26 2027 GMT
        Subject: CN=6a87b22e-e039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a2:f5:1e:79:65:d6:ba:bf:51:69:6b:48:90:
                    e6:2a:d5:38:6e:f5:32:ff:b0:c5:7c:74:15:75:31:
                    eb:42:5e:68:b2:eb:e4:f7:d8:ca:82:43:d1:6e:21:
                    2f:73:63:ac:eb:b2:c7:16:92:90:31:6b:94:84:7d:
                    4d:46:c5:c7:38:16:44:c6:2b:7b:9d:85:ec:8d:ed:
                    15:93:4e:61:b8:c0:d5:84:9d:f1:ec:d6:72:f2:53:
                    fc:41:6f:d2:ca:76:3b:69:f7:34:9d:ae:7b:d2:54:
                    e2:80:93:a2:3f:2f:2e:f5:05:d8:57:84:a9:c8:07:
                    79:19:60:ff:bd:d2:a4:4b:59:ac:cc:04:99:75:6d:
                    43:c4:c0:8c:1e:cf:9a:74:5a:55:03:2f:cd:b4:fd:
                    d8:8f:ab:ba:44:f9:e5:b5:2a:6b:d9:ad:ab:1d:31:
                    22:36:93:1a:1f:03:a9:8c:ef:ac:3a:3a:6c:37:e6:
                    f4:7f:c7:96:6c:df:e6:09:f0:e9:2c:54:e5:31:9e:
                    02:d7:7b:53:a7:3e:39:a1:6a:c1:08:e6:33:d7:cd:
                    4c:01:ad:f2:1b:d1:6f:d2:26:4e:55:94:7f:06:51:
                    ce:24:d6:94:df:9b:e6:d7:23:87:eb:dc:93:e8:8a:
                    41:68:b1:48:27:36:14:3d:d7:92:78:f7:d5:20:0e:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EA:93:A8:68:F3:1C:7B:89:69:DE:85:B3:30:49:35:5E:42:71:83
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A510E1069D0411F18A2C93E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:73:a2:13:c1:ca:7d:e1:28:90:2d:af:16:cd:18:19:70:9e:
         3f:3c:ec:91:bd:c9:8a:d0:2f:39:54:28:c4:81:fe:4f:c7:5e:
         b1:e0:b8:d0:8b:9b:25:c7:08:51:2a:7e:9a:86:8d:b6:39:ab:
         0b:08:72:a7:75:95:a2:bc:e3:00:a4:c1:60:13:80:85:17:03:
         cf:ae:ff:1a:2f:a3:c8:45:38:5e:e3:e6:2e:66:61:fe:bd:1f:
         a5:aa:e2:53:0a:6c:be:6b:a5:d4:21:58:62:85:1d:41:5a:5d:
         8d:c7:90:90:6a:fc:51:d6:a6:f8:0c:4e:fb:35:5b:60:a4:a2:
         c7:1e:b0:2f:c0:74:af:f4:5e:52:df:a4:85:71:43:4c:39:92:
         26:8b:9a:16:5b:2f:89:50:70:ab:98:c5:ea:0b:ca:a8:82:39:
         76:c8:d2:83:49:10:52:99:ce:48:fb:89:f5:53:1a:5a:42:65:
         7f:ab:73:db:ba:95:dd:07:95:22:39:6e:2c:73:cb:04:a9:c3:
         db:c3:f5:37:47:2c:bc:3d:ba:10:10:e9:2e:a2:5f:b7:9c:27:
         32:6c:a3:fc:6d:7d:d9:6a:7c:78:13:4d:85:bb:5b:13:80:f1:
         98:f4:8b:7b:7b:b5:59:09:d8:95:05:ce:da:41:06:21:a0:f3:
         6d:0a:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----