Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A863D0EAA2F711F19E5C5EBDCE1D38B0.roa
File:                     A863D0EAA2F711F19E5C5EBDCE1D38B0.roa (raw, json)
Hash identifier:          4UQ8Ix/ZyrbPF4og9qykHbCzfaoCl077KrFdFnl69S4=
Subject key identifier:   0C:41:56:28:0F:54:87:B8:AF:7A:01:EB:71:05:3D:5E:CD:CC:39:7D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A863D0EAA2F711F19E5C5EBDCE1D38B0.roa
Signing time:             Fri 28 Aug 2026 15:46:40 +0000
ROA not before:           Fri 28 Aug 2026 15:46:35 +0000
ROA not after:            Mon 05 Oct 2026 15:46:35 +0000
asID:                     138643
IP address blocks:        156.234.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119203 (0x1d1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 15:46:35 2026 GMT
            Not After : Oct  5 15:46:35 2026 GMT
        Subject: CN=6a91ad5f-3836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:d5:d1:ba:ec:43:9c:8a:57:8d:da:69:a7:
                    11:fa:44:ed:7d:26:52:d2:f1:c7:ee:5e:69:52:2c:
                    ca:3b:33:d7:93:27:43:4c:d5:7f:f9:9f:12:78:39:
                    15:68:06:60:29:e0:e0:62:3c:7b:8e:38:44:9c:50:
                    37:36:8c:f1:9d:c2:cc:81:8d:b7:47:7f:b1:39:81:
                    fc:87:5d:45:c4:db:59:ba:25:31:05:3c:3d:dd:d3:
                    45:f9:56:00:7f:be:fe:9d:c4:88:22:fa:69:6a:f4:
                    38:9c:3f:d3:37:e6:58:02:19:50:82:aa:ed:b2:73:
                    b5:5b:00:85:20:84:e0:6e:63:78:6c:fc:9d:cd:33:
                    73:55:9e:b1:a2:9a:6a:43:21:58:aa:d9:48:38:03:
                    c8:d3:ec:d2:50:51:f5:a6:fe:b5:dc:aa:10:76:a4:
                    03:46:c6:36:61:5b:d8:a6:b8:4f:63:8f:37:3f:d9:
                    41:e6:ea:98:81:6c:5a:e6:02:26:2e:d9:21:3a:f3:
                    a8:3f:01:5b:85:7d:7f:7a:cb:03:62:bd:dd:42:6c:
                    9f:25:f2:0f:33:f3:b3:6c:b0:8d:88:77:9d:7d:2e:
                    77:ed:00:07:76:d4:2e:f6:f6:b8:0f:25:6c:08:f1:
                    05:17:2a:65:b4:e2:4e:c4:fe:52:af:0a:14:31:5d:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:41:56:28:0F:54:87:B8:AF:7A:01:EB:71:05:3D:5E:CD:CC:39:7D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A863D0EAA2F711F19E5C5EBDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:72:cf:7f:14:00:be:29:af:53:9d:f0:8e:62:0d:5f:c9:89:
         62:20:9f:e3:f3:51:63:5c:4d:cb:c0:6b:72:3c:81:00:a2:c9:
         9e:2c:fc:f0:0e:c7:a7:dd:33:66:75:15:21:b5:7b:e4:69:90:
         3f:13:98:c2:bd:ef:16:8e:17:7b:45:8f:65:91:35:87:86:8c:
         db:d4:b1:9d:e1:25:f6:8a:75:f5:f4:a0:29:16:f8:ef:7b:b8:
         6a:f5:f5:fb:1f:34:8c:f9:a6:1d:75:df:93:98:c9:f7:65:ef:
         cc:2b:9e:11:9c:cd:5a:dd:8d:90:65:0e:a1:18:de:46:d9:8f:
         5d:38:c8:9d:a7:38:81:d4:4a:b1:79:23:3b:46:bb:8f:62:7e:
         db:b2:d5:9d:b9:5c:75:37:91:56:3e:07:cd:77:02:90:66:68:
         fc:a1:d6:20:ce:3e:d2:34:5b:f7:95:29:97:97:54:8d:62:95:
         f0:60:5c:ad:d7:13:97:63:5c:43:92:d7:f5:f1:14:d4:49:0a:
         1e:fa:7b:25:97:57:c4:9b:ff:a6:ca:93:57:a4:8e:45:a2:c7:
         61:14:c2:2d:5d:32:32:df:97:38:9f:cc:0e:87:87:a8:45:a2:
         9c:19:79:39:a9:e9:1b:f7:97:3c:ea:ea:50:a7:12:18:56:14:
         47:06:4d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----