Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFF798A69FA311F195B57B11CF1D38B0.roa
File:                     BFF798A69FA311F195B57B11CF1D38B0.roa (raw, json)
Hash identifier:          yzBwR2+9ghqvreoAujQswbJAJNcz5gdplJ0pqCgph+w=
Subject key identifier:   75:B5:8E:3A:C3:62:73:CE:5E:D3:95:CF:2B:87:47:C8:4D:BB:1E:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D089
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFF798A69FA311F195B57B11CF1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:08:28 +0000
ROA not before:           Mon 24 Aug 2026 10:08:24 +0000
ROA not after:            Mon 06 Nov 2028 10:08:24 +0000
asID:                     17561
IP address blocks:        156.235.0.0/24 maxlen: 24
                          156.235.24.0/24 maxlen: 24
                          156.235.25.0/24 maxlen: 24
                          156.235.26.0/24 maxlen: 24
                          156.235.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118921 (0x1d089)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 10:08:24 2026 GMT
            Not After : Nov  6 10:08:24 2028 GMT
        Subject: CN=6a8c181c-6899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:35:49:f2:9e:93:b9:36:0b:71:b3:4a:d7:
                    ed:37:6e:6f:fb:49:7b:f0:7a:6b:70:97:07:14:24:
                    6c:84:9b:e9:09:a4:f7:29:a4:4d:40:0d:d5:9d:60:
                    2d:fe:aa:c2:4e:28:67:81:d4:51:71:c4:f8:3d:fa:
                    a9:fd:eb:52:5a:6d:04:66:eb:47:62:f1:f5:97:76:
                    9d:29:46:88:aa:f2:9d:9d:89:44:fd:eb:cd:59:9d:
                    22:91:1d:72:2d:0a:61:3f:97:b7:d9:ed:8f:53:3c:
                    c7:7a:89:48:4c:6f:68:d1:34:05:86:56:43:01:12:
                    65:1d:4b:70:83:6b:23:f9:ae:bb:8f:12:57:c5:87:
                    d4:15:88:28:a3:14:11:f7:10:ed:2a:02:b3:0a:8a:
                    23:fc:06:d6:de:bc:58:42:b5:36:ee:01:5c:d6:db:
                    b4:b8:2e:af:eb:07:3b:c8:b9:b6:db:be:49:6b:7b:
                    86:ff:ec:73:07:cb:47:77:61:19:d9:21:12:b8:fd:
                    8c:07:ef:3e:ad:d5:b9:c1:a0:70:1c:57:b3:11:d2:
                    5d:02:a7:b5:21:aa:30:2a:9a:56:7f:be:10:85:7d:
                    7c:36:8f:49:ed:ca:33:9d:9a:b8:72:31:57:f2:33:
                    31:63:ea:d6:f9:89:25:b4:85:4e:32:d1:9e:74:76:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B5:8E:3A:C3:62:73:CE:5E:D3:95:CF:2B:87:47:C8:4D:BB:1E:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFF798A69FA311F195B57B11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.0.0/24
                  156.235.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:eb:59:09:21:d8:fd:e3:ca:83:d0:cf:db:6f:30:8c:ca:
         10:fe:f3:e6:cf:1f:e0:ec:2d:73:e6:e4:72:d9:cd:13:82:70:
         76:73:bb:cd:ba:b6:00:9a:7a:73:86:04:06:f4:56:aa:fb:64:
         f0:bb:39:86:5a:20:ab:96:4a:8f:c7:2b:4d:26:d0:d4:2d:37:
         c8:1c:b8:a0:06:b2:74:c4:c3:4b:3e:4f:49:dc:af:c3:51:5b:
         4c:f3:11:3f:5b:db:de:35:c8:6f:46:c2:5b:cf:b0:7b:32:76:
         98:62:15:b1:e7:76:eb:a3:f1:c4:27:6e:d6:64:cc:a5:2f:0e:
         41:a5:15:10:97:c9:4d:84:6a:8c:0c:17:d8:49:65:4b:9a:93:
         62:1f:2d:d8:8a:0f:7c:58:08:c6:b6:19:7b:82:b1:ba:06:c2:
         69:4a:7d:c7:6a:b8:64:59:2f:46:d2:41:a1:ae:45:e8:ea:fe:
         49:0a:5e:3b:f8:bc:d4:30:13:ab:2f:5b:86:64:6d:9f:47:80:
         3c:87:d0:50:44:79:25:3e:99:4e:c9:5a:2f:84:74:72:20:a8:
         9f:d9:e3:7e:5a:3d:91:8a:09:96:ac:d6:68:27:41:7c:81:0e:
         46:78:20:8f:4a:e9:7b:52:8d:6d:94:6b:c4:c4:58:72:8a:5f:
         51:20:48:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----