Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B59CBA5E9C7311F19F418303CF1D38B0.roa
File:                     B59CBA5E9C7311F19F418303CF1D38B0.roa (raw, json)
Hash identifier:          Lj7yZ+3l9OC1oT+KcB0wzDPodUrqi/JNbsmEgYLrf+M=
Subject key identifier:   0D:BD:19:32:9F:8E:29:DE:C3:EE:7B:33:2D:A3:E5:2B:F5:75:A6:8C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B59CBA5E9C7311F19F418303CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:47:01 +0000
ROA not before:           Thu 20 Aug 2026 08:46:57 +0000
ROA not after:            Thu 24 Sep 2026 08:46:57 +0000
asID:                     55020
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
                          156.239.52.0/23 maxlen: 24
                          156.254.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118422 (0x1ce96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 08:46:57 2026 GMT
            Not After : Sep 24 08:46:57 2026 GMT
        Subject: CN=6a86bf05-403e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:25:2f:99:30:42:f4:dc:62:51:20:85:ad:
                    bf:dc:96:7e:48:0f:b8:60:27:1d:10:83:97:e7:e9:
                    e1:76:06:ea:14:a0:9a:f6:46:0a:de:58:eb:ab:59:
                    7c:3d:f0:a6:20:e1:19:57:33:09:ed:94:d1:b5:d1:
                    36:b6:63:4c:46:e4:d7:37:df:ab:cf:cb:39:25:e9:
                    67:bc:2f:87:59:5a:10:95:88:9d:bd:d9:2a:94:50:
                    47:6b:3d:6d:a7:94:05:05:b9:2d:dc:a9:8f:57:0e:
                    0c:73:f3:2c:a2:cd:e4:d4:46:21:09:a8:a9:b2:25:
                    77:c5:f3:16:11:e5:88:c7:cd:ee:ad:5d:02:8a:ec:
                    cd:ca:47:6d:4e:15:c9:20:9b:1b:67:44:fb:ae:47:
                    c3:42:66:72:34:f8:ed:b0:87:81:d4:f2:76:a7:59:
                    89:a3:6c:8c:90:a9:1e:ed:46:0e:32:d1:c9:62:f6:
                    5d:4b:4a:bd:b2:b5:26:29:ad:93:8d:1c:2e:86:40:
                    a0:fb:23:6b:cf:44:f2:01:e6:e1:34:22:3a:6b:a0:
                    10:2c:60:4d:3c:c9:e5:4b:31:6d:5c:9e:d1:f6:64:
                    bc:0d:fc:b2:a6:15:03:5a:1a:d8:27:63:68:40:0f:
                    5b:40:6a:9a:f3:2b:fa:5d:bd:80:86:e7:78:24:b0:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BD:19:32:9F:8E:29:DE:C3:EE:7B:33:2D:A3:E5:2B:F5:75:A6:8C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B59CBA5E9C7311F19F418303CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.53.255
                  156.254.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:63:f0:db:95:15:77:bf:e8:88:2d:85:54:c9:15:e4:bb:84:
         a2:14:20:b8:f4:6a:26:9e:fc:86:53:38:1a:38:ce:24:64:ec:
         cb:a3:3f:8a:ba:e9:49:51:c7:5c:8f:d3:37:b0:f8:6c:a9:d9:
         2c:3a:5e:80:99:f8:eb:d2:5b:ba:82:7b:4d:5f:74:14:51:4a:
         3c:c4:f9:02:eb:e2:81:dd:9a:fc:56:aa:39:17:c2:c5:91:3f:
         4e:39:d5:fb:1a:81:fa:01:46:01:93:a1:c5:00:7a:e3:1a:d2:
         a9:43:25:bf:14:34:5e:56:47:03:af:06:19:41:d5:9b:fa:45:
         49:92:59:f0:38:c4:5a:04:6f:51:7d:7c:ee:6a:0a:74:1e:31:
         15:50:38:87:aa:39:f1:55:aa:72:69:da:47:c2:2d:5c:8b:39:
         ae:c3:31:9e:f5:d7:ca:6b:95:92:44:6b:83:1d:a8:39:7a:9d:
         e4:07:c6:91:fa:82:5c:54:2a:86:25:98:d3:de:ea:61:01:45:
         ff:35:57:66:a6:d6:d0:38:11:a1:94:7a:25:e7:67:ab:89:e8:
         2f:c3:7f:91:cf:7b:d4:2e:57:88:83:d6:1c:84:8e:7c:78:fa:
         f2:c5:b4:1f:8a:cb:23:a9:60:44:97:d7:f9:09:4d:5b:6f:ba:
         ff:3a:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----