Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B99E7B968E5511F1A5E0DBEDCE1D38B0.roa
File:                     B99E7B968E5511F1A5E0DBEDCE1D38B0.roa (raw, json)
Hash identifier:          dDGpYoRGG2WKUA8iA/xr3vuhXnb5Oe4g7XnWhj9GcSo=
Subject key identifier:   F8:B2:D5:54:DE:9D:18:DB:6F:31:4E:DB:2D:84:12:D8:30:82:96:89
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C939
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B99E7B968E5511F1A5E0DBEDCE1D38B0.roa
Signing time:             Sun 02 Aug 2026 09:37:07 +0000
ROA not before:           Sun 02 Aug 2026 09:37:03 +0000
ROA not after:            Tue 22 Sep 2026 09:37:03 +0000
asID:                     8796
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117049 (0x1c939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 09:37:03 2026 GMT
            Not After : Sep 22 09:37:03 2026 GMT
        Subject: CN=6a6f0fc2-5820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:c3:01:4e:ea:fe:cb:d2:c5:c3:1f:58:ec:
                    f1:27:c7:b9:77:ec:ac:3f:e6:8f:28:a5:26:ab:0a:
                    8a:49:a3:a0:8b:cf:26:f7:86:4e:1e:c7:30:b5:ab:
                    15:74:5e:8e:15:ea:a5:eb:df:44:ac:49:16:7f:63:
                    d2:d1:98:ba:f2:e1:96:49:bc:04:67:c0:4f:ca:dc:
                    aa:a5:a0:68:6a:29:a1:72:69:1f:29:83:7c:e2:d7:
                    3c:fd:42:e7:4e:8f:ab:29:f0:4b:bf:e6:dd:6c:37:
                    df:41:83:c6:2d:fb:fc:b4:89:74:12:f8:c2:2e:cc:
                    32:e9:fe:f6:36:f0:8d:a8:8b:43:db:e6:6f:80:e3:
                    a3:53:62:be:45:df:69:f8:ab:3c:8f:ae:9b:dc:71:
                    21:68:d9:f8:9c:9a:7f:a9:48:49:68:b5:92:e6:a1:
                    6b:74:84:7f:bd:65:41:92:07:35:66:1a:b0:1e:31:
                    cf:5e:dd:93:aa:57:b8:05:6c:ec:82:8b:d0:82:6a:
                    ae:c0:bc:5a:84:16:27:63:d3:a7:43:14:6b:6a:4e:
                    73:73:01:db:d8:35:d5:86:12:f4:52:43:38:cb:10:
                    77:4c:28:7f:cb:78:19:b6:86:85:83:5f:13:1a:82:
                    31:5d:86:3b:7d:9a:45:4e:70:a5:5f:38:37:a5:43:
                    c8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B2:D5:54:DE:9D:18:DB:6F:31:4E:DB:2D:84:12:D8:30:82:96:89
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B99E7B968E5511F1A5E0DBEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:bf:0d:0c:d4:e1:02:c1:b9:c8:5a:18:3f:6b:cd:39:a3:93:
         00:de:7f:b2:eb:bf:b5:5c:bf:3b:cd:84:be:11:38:33:a8:25:
         af:b2:88:fc:90:2d:a8:06:b1:92:20:5d:7c:1a:42:3a:c5:b0:
         d5:2f:3e:59:e8:fb:46:2f:5b:64:c4:0b:d1:7a:3a:28:79:13:
         19:d5:1c:35:1a:08:7e:8c:f0:d9:a1:e7:8a:00:c4:a3:ad:6e:
         f9:27:a5:f4:eb:98:c8:9a:67:da:d8:da:48:d9:62:4d:2a:8d:
         2b:ae:6b:0c:47:3c:b4:ac:f7:b0:1a:d9:4d:27:48:71:44:e0:
         50:05:16:e8:65:8c:14:47:36:b9:c3:d0:55:25:a3:f8:e2:3a:
         48:49:b1:49:57:f5:6a:44:1a:c6:c5:4e:ed:10:d0:9f:7d:f0:
         db:53:7b:d6:9c:92:a7:19:1d:9b:ce:50:ef:96:73:78:e6:ff:
         de:7e:ff:27:8c:71:a5:ea:1d:ec:6e:5e:e0:a4:9d:50:ea:a8:
         76:e3:7a:d8:50:61:7b:02:d3:3e:ac:86:23:1d:8a:50:6c:2f:
         89:eb:60:c8:19:a8:f8:f2:c4:a1:c9:94:e6:53:cf:df:d2:10:
         91:59:70:dd:ff:f5:6b:2d:89:0c:f8:5a:50:0f:0e:d9:21:95:
         58:7f:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----