Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFBD9750BF3411F189CAC6EECE1D38B0.roa
File:                     AFBD9750BF3411F189CAC6EECE1D38B0.roa (raw, json)
Hash identifier:          xOAdlplXAFmN+gq94WpG0JK5TlY1wqiKZ0hx2bL3yUQ=
Subject key identifier:   CF:58:BD:74:1B:F7:44:69:52:39:D8:7B:29:16:7B:A3:56:5F:30:11
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFBD9750BF3411F189CAC6EECE1D38B0.roa
Signing time:             Sat 03 Oct 2026 14:14:03 +0000
ROA not before:           Sat 03 Oct 2026 14:14:00 +0000
ROA not after:            Sun 22 Nov 2026 14:14:00 +0000
asID:                     8796
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121485 (0x1da8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 14:14:00 2026 GMT
            Not After : Nov 22 14:14:00 2026 GMT
        Subject: CN=6ac10dab-a6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:ba:35:48:92:52:f2:2b:b0:71:f2:dd:2d:
                    de:ce:91:4e:f2:c8:8f:6d:5a:fb:9a:2c:d2:03:bf:
                    9f:28:81:7a:73:14:c0:c3:55:6f:76:13:99:89:91:
                    18:ba:88:b5:7f:b3:fc:f2:a4:e0:bc:40:60:74:bd:
                    a7:ba:fc:b8:94:75:c3:ef:46:5f:27:99:bc:a0:6d:
                    64:31:67:ba:27:3a:8a:f6:3f:d4:99:c0:69:90:ce:
                    3b:f2:fa:53:ae:64:db:4a:3d:55:36:1b:a5:9c:90:
                    e0:2f:be:08:78:50:d4:a4:f4:bf:22:f4:e1:b3:3f:
                    14:92:9d:b0:af:47:cc:1d:d9:1e:9c:26:8a:3d:12:
                    4a:2f:5a:33:8f:cd:82:3c:6f:d1:a5:43:ad:3f:e1:
                    7b:c3:d7:55:13:d0:1a:71:e2:fd:cd:e3:09:d7:07:
                    07:96:b3:c9:94:6f:09:cb:a5:fe:65:bf:9d:a8:cf:
                    a3:03:3a:fd:28:80:1d:a8:a1:78:0a:f5:a0:d5:fc:
                    89:a4:3a:34:12:7d:5e:54:3e:ab:78:40:68:fe:55:
                    cf:b4:71:bc:25:bb:fe:41:bc:bd:64:69:4c:60:cf:
                    12:37:12:2c:e3:18:37:63:01:45:47:e4:d1:a0:5a:
                    76:97:bc:96:ce:a0:ac:54:16:85:69:b9:68:10:38:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:58:BD:74:1B:F7:44:69:52:39:D8:7B:29:16:7B:A3:56:5F:30:11
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFBD9750BF3411F189CAC6EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:bf:a6:58:e6:82:4e:44:9d:6f:ea:1a:07:b2:2d:16:a1:41:
         ad:17:c5:cf:fc:56:0b:bc:f7:fe:c6:dd:97:12:8d:4f:e8:a6:
         56:89:f9:2f:e5:1f:64:0b:79:7e:22:3b:5b:cb:c9:74:ef:22:
         24:e8:3a:2d:84:06:a8:54:8f:a4:1f:12:a7:84:2e:b2:d1:41:
         5f:4a:b5:6d:80:80:3f:47:9f:1e:43:5e:b2:f5:d1:34:f5:d2:
         02:6f:fa:c8:2e:ab:f7:67:b9:bc:22:4a:8e:21:b2:07:74:7d:
         51:10:b5:31:9e:68:ba:64:cb:33:8a:10:be:df:83:9f:a2:87:
         64:22:3e:78:c9:ce:57:cd:51:a4:c0:77:57:4a:56:c9:ff:9f:
         c2:39:21:03:d3:c6:2e:6b:b4:ed:66:c5:7d:38:0f:bd:48:6a:
         ed:cd:e6:01:f6:a4:54:c5:60:2d:a2:63:bd:5e:2d:93:f6:d1:
         dc:48:bb:d4:93:9e:ed:65:21:ff:0f:ab:ab:47:74:ab:94:ad:
         e7:52:b3:ce:5f:85:5b:af:94:a4:27:1a:cc:a4:f8:9c:f4:46:
         e6:26:76:9d:4b:35:cd:5d:f4:83:89:0e:dc:af:bb:23:72:97:
         58:c4:d0:55:e8:a9:35:3b:5a:43:a5:4e:8e:fa:7e:41:01:e0:
         8e:6b:c0:f1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdqNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDAzMTQxNDAwWhcNMjYxMTIyMTQxNDAwWjAYMRYw
FAYDVQQDEw02YWMxMGRhYi1hNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqzq6NUiSUvIrsHHy3S3ezpFO8siPbVr7mizSA7+fKIF6cxTAw1VvdhOZ
iZEYuoi1f7P88qTgvEBgdL2nuvy4lHXD70ZfJ5m8oG1kMWe6JzqK9j/UmcBpkM47
8vpTrmTbSj1VNhulnJDgL74IeFDUpPS/IvThsz8Ukp2wr0fMHdkenCaKPRJKL1oz
j82CPG/RpUOtP+F7w9dVE9AaceL9zeMJ1wcHlrPJlG8Jy6X+Zb+dqM+jAzr9KIAd
qKF4CvWg1fyJpDo0En1eVD6reEBo/lXPtHG8Jbv+Qby9ZGlMYM8SNxIs4xg3YwFF
R+TRoFp2l7yWzqCsVBaFabloEDhOpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM9Y
vXQb90RpUjnYeykWe6NWXzARMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRkJEOTc1MEJGMzQxMUYxODlDQUM2RUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOEQMA0GCSqGSIb3DQEBCwUA
A4IBAQCev6ZY5oJORJ1v6hoHsi0WoUGtF8XP/FYLvPf+xt2XEo1P6KZWifkv5R9k
C3l+Ijtby8l07yIk6DothAaoVI+kHxKnhC6y0UFfSrVtgIA/R58eQ16y9dE09dIC
b/rILqv3Z7m8IkqOIbIHdH1RELUxnmi6ZMszihC+34OfoodkIj54yc5XzVGkwHdX
SlbJ/5/COSED08Yua7TtZsV9OA+9SGrtzeYB9qRUxWAtomO9Xi2T9tHcSLvUk57t
ZSH/D6urR3SrlK3nUrPOX4Vbr5SkJxrMpPic9EbmJnadSzXNXfSDiQ7cr7sjcpdY
xNBV6Kk1O1pDpU6O+n5BAeCOa8Dx
-----END CERTIFICATE-----