Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A752580AC87911F1A6DE6906CF1D38B0.roa
File:                     A752580AC87911F1A6DE6906CF1D38B0.roa (raw, json)
Hash identifier:          tWzdrbPBlbRVKa8uvFHwFU2+YjVNmZl/4FQRJB0Y9g0=
Subject key identifier:   69:D6:A7:D7:45:F9:E3:B1:61:7B:5D:D7:F2:9B:2D:C7:0B:BA:42:C0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A752580AC87911F1A6DE6906CF1D38B0.roa
Signing time:             Thu 15 Oct 2026 09:20:25 +0000
ROA not before:           Thu 15 Oct 2026 09:20:19 +0000
ROA not after:            Sun 22 Nov 2026 09:20:19 +0000
asID:                     40779
IP address blocks:        156.233.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122287 (0x1ddaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 09:20:19 2026 GMT
            Not After : Nov 22 09:20:19 2026 GMT
        Subject: CN=6ad09ad9-cc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:0a:d0:8d:ea:a4:f2:17:f8:c6:5f:b5:4e:
                    f8:31:55:ba:dc:4a:08:d2:cb:b1:2e:89:c9:13:11:
                    a7:de:8d:4e:ce:57:99:08:ea:dc:58:75:f1:04:5e:
                    32:f9:53:7b:08:72:92:14:d6:5e:e4:0c:dc:93:7b:
                    2f:83:b9:7c:6c:15:5c:7e:96:ba:71:83:66:0b:84:
                    e2:83:ba:1b:e3:74:da:6c:6b:51:e4:5a:7a:0c:0f:
                    6a:38:1d:48:34:fc:b9:34:b4:06:92:c3:05:2f:b8:
                    5d:ef:87:86:59:c9:b1:54:96:74:c5:f8:ef:9a:2a:
                    a5:12:b9:a9:f2:38:9f:3c:d0:67:90:bd:b5:4e:9d:
                    7a:4c:52:8c:40:a5:70:5e:cb:4f:31:eb:b6:f3:33:
                    d7:56:41:2b:0c:fa:41:0a:58:08:12:ba:f7:00:c9:
                    f0:4b:bf:97:8b:6a:47:2e:8d:c5:b8:50:c6:c5:00:
                    5f:9a:91:17:58:72:e3:54:bc:0d:f4:21:15:78:28:
                    a3:76:84:ab:9a:21:c0:36:03:9c:ee:67:ce:9e:4e:
                    0d:84:db:11:9c:b5:8e:aa:d3:fd:1b:b2:4f:6c:4a:
                    29:b5:63:fd:cd:58:60:0b:e6:86:31:03:7b:8b:55:
                    9f:ec:d2:a6:fb:68:10:da:25:66:cc:c8:3f:2f:d8:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:A7:D7:45:F9:E3:B1:61:7B:5D:D7:F2:9B:2D:C7:0B:BA:42:C0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A752580AC87911F1A6DE6906CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:fb:17:e7:3a:15:0c:01:ce:65:31:b5:8a:48:7e:6f:aa:
         bd:28:75:46:a4:f0:d1:1b:df:00:5a:ba:02:05:cc:ab:14:1e:
         f4:81:e0:e6:4d:ff:7e:6d:da:09:aa:2b:67:c7:28:95:44:82:
         3d:1e:04:2b:0f:31:2a:07:c4:d6:97:54:c0:0f:b5:f8:4b:b3:
         1d:45:ac:1a:5c:9e:a8:70:02:b1:53:92:30:7f:ab:39:ab:47:
         49:33:4a:86:d2:0b:00:57:a3:16:e8:77:d0:4c:62:fb:06:ae:
         82:57:38:31:1d:23:64:c3:ec:9d:36:47:a2:3c:c2:e7:95:e6:
         82:33:7b:71:9f:81:82:b1:9e:c1:c5:f9:41:57:fc:0b:32:ee:
         08:d4:09:57:97:47:a3:71:7e:03:40:08:cf:7f:ec:93:d4:dc:
         c1:25:36:76:02:cf:ed:55:aa:f7:37:61:39:e6:6c:75:38:e5:
         a6:d4:32:af:ae:b8:55:f0:44:c7:44:d2:43:27:09:d2:b8:d0:
         d1:e3:9e:c7:c7:99:f1:14:89:ab:a0:f8:5d:09:c5:00:82:f5:
         6a:b5:1e:bf:84:f6:2b:32:01:12:69:b3:01:6a:bf:73:fc:8e:
         e5:c2:35:a9:e2:f9:db:75:8d:24:b3:0b:f9:63:49:37:d1:00:
         46:8d:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----