Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A57D4A64AC4311F18A12A902CF1D38B0.roa
File:                     A57D4A64AC4311F18A12A902CF1D38B0.roa (raw, json)
Hash identifier:          biNvtYaowK5WU44+R0at5hBTGqYbYGQLLKtFM9qncnE=
Subject key identifier:   7E:6F:B4:F3:D9:C1:A8:36:61:78:B3:89:5D:86:A7:E1:3D:B6:7F:E0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D46E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A57D4A64AC4311F18A12A902CF1D38B0.roa
Signing time:             Wed 09 Sep 2026 11:43:17 +0000
ROA not before:           Wed 09 Sep 2026 11:43:13 +0000
ROA not after:            Sat 19 Sep 2026 11:43:13 +0000
asID:                     134365
IP address blocks:        156.226.176.0/21 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
                          156.226.180.0/22 maxlen: 24
                          156.226.180.0/24 maxlen: 24
                          156.226.181.0/24 maxlen: 24
                          156.226.182.0/24 maxlen: 24
                          156.226.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119918 (0x1d46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 11:43:13 2026 GMT
            Not After : Sep 19 11:43:13 2026 GMT
        Subject: CN=6aa14655-701d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:a3:14:39:a6:ce:a7:3c:a5:13:ac:cf:6d:
                    09:91:af:3c:3e:32:ce:32:9a:41:3c:46:02:6f:ae:
                    72:4c:c4:b2:a3:c2:31:d2:f0:3d:b4:57:eb:fb:62:
                    78:2f:7a:ed:ca:c9:ef:f9:3c:d6:b6:c6:fa:63:ff:
                    a4:58:6c:74:af:01:bb:14:0d:78:11:82:aa:fa:6a:
                    6e:98:42:9a:92:bf:dd:22:3d:c3:17:21:d5:cd:00:
                    83:44:b2:7e:1b:b9:3f:78:36:88:71:21:20:9d:e2:
                    4b:e0:ce:b2:e3:19:c8:e5:a1:85:55:0a:11:a8:be:
                    52:a1:49:d0:34:52:ff:d6:77:1d:38:c3:77:92:10:
                    d2:36:4a:8c:13:d5:c2:9e:76:e4:91:66:98:b4:f2:
                    c5:1a:2d:e7:25:92:a1:a8:5f:7e:93:49:f4:8f:c9:
                    8d:e7:a4:94:5b:17:be:7f:d9:83:a5:f1:d7:4c:49:
                    23:2f:ab:bc:2e:29:fb:10:20:fc:e1:8e:e6:10:10:
                    d9:3b:c0:cb:9c:2e:bd:fd:a6:1b:b1:59:e5:59:3a:
                    0c:f8:d6:ff:48:c6:c5:0a:0a:09:a9:c1:3e:ce:29:
                    a5:2b:f7:6c:5e:b4:86:4c:1e:77:53:e4:88:c1:89:
                    f3:9b:7c:a9:8d:d0:c4:e3:92:ed:92:0c:7e:ce:23:
                    a0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6F:B4:F3:D9:C1:A8:36:61:78:B3:89:5D:86:A7:E1:3D:B6:7F:E0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A57D4A64AC4311F18A12A902CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b8:5d:f7:ed:57:e3:6b:3d:b8:86:d3:df:5a:76:12:9c:1e:f1:
         e4:cd:82:e5:42:0c:cd:e6:12:53:83:ee:92:f4:a4:0d:11:fd:
         e7:fa:da:6f:5a:67:09:23:75:97:5a:02:61:47:92:40:5e:56:
         11:40:7c:af:f7:75:f8:8a:d8:d3:ab:52:31:3e:dd:2e:58:a3:
         cf:48:20:7b:69:c1:0a:50:a6:ea:15:91:ce:90:ab:14:79:a3:
         e4:0b:fe:68:cd:cb:16:56:f8:3a:c4:6e:11:a6:65:4a:9b:4f:
         33:20:c4:40:f2:1a:d2:9e:b6:16:69:1b:03:b7:ec:c2:8d:c1:
         ba:a0:f3:97:6a:c2:80:9a:7a:94:bf:85:1f:43:58:a9:f1:df:
         93:eb:9b:2e:b9:7d:5b:a8:a2:fc:bf:10:ca:01:cc:03:6f:95:
         fd:5a:40:17:27:bf:62:44:db:f9:42:29:c0:26:fa:c3:47:6a:
         fa:45:07:d8:56:9f:a7:2a:20:ec:e9:c7:ed:1a:f4:5d:50:0a:
         ed:58:5f:5a:fd:15:83:5f:4a:aa:3a:47:b4:b3:34:a7:ba:ba:
         03:a9:6d:0f:0b:2a:9e:9d:45:29:23:fd:3e:94:5b:8d:54:47:
         d4:6f:fa:dd:a1:0b:2a:c3:19:cf:bf:15:6f:3e:eb:d8:4d:e3:
         dd:bc:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----