Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD5926A49EB411F1884E2FB2CE1D38B0.roa
File:                     BD5926A49EB411F1884E2FB2CE1D38B0.roa (raw, json)
Hash identifier:          e3OM6vHodCh8dhvAv3vGyBe9Ts4I0TqVuPEVoeHuwq8=
Subject key identifier:   71:52:5D:4E:7E:4D:8F:2E:69:C4:13:7A:10:23:C8:CE:A3:80:8B:5B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D011
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD5926A49EB411F1884E2FB2CE1D38B0.roa
Signing time:             Sun 23 Aug 2026 05:37:34 +0000
ROA not before:           Sun 23 Aug 2026 05:37:30 +0000
ROA not after:            Mon 28 Sep 2026 05:37:30 +0000
asID:                     59187
IP address blocks:        156.238.97.0/24 maxlen: 24
                          156.238.98.0/24 maxlen: 24
                          156.238.99.0/24 maxlen: 24
                          156.238.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118801 (0x1d011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 23 05:37:30 2026 GMT
            Not After : Sep 28 05:37:30 2026 GMT
        Subject: CN=6a8a871d-085d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:80:13:93:61:d4:71:31:e6:8e:0b:e7:ce:
                    33:42:f4:25:1d:bd:54:54:a4:fd:9c:e9:65:12:c9:
                    be:d6:42:1c:0a:a7:1c:8c:39:7b:18:0d:f8:6d:49:
                    10:a4:b0:80:73:96:20:4d:40:a8:44:e7:61:16:4d:
                    42:f8:f4:8f:34:89:2e:1a:69:9d:db:d2:f6:6c:1c:
                    1e:4f:af:a1:8f:1b:bd:d9:64:aa:62:af:8e:da:88:
                    81:28:94:e9:77:39:80:1a:7a:dc:02:46:d4:69:1f:
                    b5:6a:92:68:00:26:6f:82:41:e4:24:35:5e:61:fb:
                    0d:41:cd:d0:75:51:0a:c6:72:88:9c:76:95:24:4f:
                    cf:45:ee:0c:68:ba:4a:ce:ef:b9:f2:b8:16:28:b5:
                    c2:50:c9:04:7f:33:4d:68:73:9a:73:d2:df:fe:f0:
                    b8:0f:e4:5e:8c:58:c3:83:e5:a4:8c:63:9f:73:99:
                    96:f3:a3:44:aa:5d:6e:12:ee:08:d3:a1:ce:73:ab:
                    35:52:6c:2f:bd:3c:02:7f:8e:7f:79:bf:e2:10:1a:
                    90:0c:8f:5d:36:85:37:3e:35:b4:7e:69:de:d6:da:
                    c6:b1:2a:af:9a:fc:aa:8e:64:6b:8b:f0:7a:ae:65:
                    5b:cc:07:7f:ea:dc:b4:4e:a7:3e:6c:14:0f:11:33:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:52:5D:4E:7E:4D:8F:2E:69:C4:13:7A:10:23:C8:CE:A3:80:8B:5B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD5926A49EB411F1884E2FB2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.97.0-156.238.100.255

    Signature Algorithm: sha256WithRSAEncryption
         93:7d:d7:20:49:f5:d0:3f:78:dc:fc:62:39:99:76:4d:6e:0f:
         3c:c5:6b:6c:cb:a3:db:02:25:d3:11:35:f5:e0:70:cb:38:73:
         e8:2c:69:27:70:70:93:d8:48:7e:4f:2e:fc:0d:7f:e2:1c:e6:
         82:64:6b:6f:f8:92:b5:d0:53:1c:53:7d:f3:f4:e6:5e:84:3a:
         12:1b:12:20:cd:25:5c:a2:e6:50:b4:ea:48:96:5c:51:84:01:
         a9:75:14:4a:ff:26:56:01:80:57:b0:d5:14:aa:97:81:7d:e0:
         cc:20:1c:4f:d9:f1:00:ea:49:46:16:63:ce:d1:08:b7:cc:fa:
         5f:05:ca:79:08:c2:fa:91:52:78:e0:c3:27:70:e7:8c:8b:95:
         8b:7e:41:51:ca:2a:f7:df:07:cd:c5:ca:c1:7d:7f:d9:50:b1:
         ff:bb:31:62:85:c6:75:bb:90:09:b6:c9:9a:86:a5:64:30:49:
         2d:2b:08:12:de:4f:9f:00:3d:13:c5:bc:26:f1:a4:ea:c8:5a:
         62:24:58:4a:9a:19:36:39:54:2e:00:6a:2a:d4:0b:e6:a7:f1:
         c5:e3:e0:a3:2c:e9:f7:ed:b8:4e:69:4c:39:c1:b1:d9:b2:d2:
         d0:74:d0:7c:e1:1e:28:c9:25:e3:0d:7f:c2:5b:f0:a9:df:ad:
         c8:9e:75:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----