Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1CED4FCAC6711F18CD984D9CE1D38B0.roa
File:                     C1CED4FCAC6711F18CD984D9CE1D38B0.roa (raw, json)
Hash identifier:          Pl1fmsyzofs05k6R1j1ud19ePx7Fn/IL3adVHiEGZWY=
Subject key identifier:   0E:17:FF:6F:2C:C7:21:B7:95:D3:00:09:AC:A8:CD:22:D0:8B:D0:4B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D47C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1CED4FCAC6711F18CD984D9CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 16:01:46 +0000
ROA not before:           Wed 09 Sep 2026 16:01:42 +0000
ROA not after:            Mon 30 Nov 2026 16:01:42 +0000
asID:                     399077
IP address blocks:        156.251.49.0/24 maxlen: 24
                          156.251.50.0/24 maxlen: 24
                          156.251.51.0/24 maxlen: 24
                          156.251.52.0/24 maxlen: 24
                          156.251.53.0/24 maxlen: 24
                          156.251.54.0/24 maxlen: 24
                          156.251.55.0/24 maxlen: 24
                          156.251.56.0/24 maxlen: 24
                          156.251.57.0/24 maxlen: 24
                          156.251.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119932 (0x1d47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 16:01:42 2026 GMT
            Not After : Nov 30 16:01:42 2026 GMT
        Subject: CN=6aa182ea-3fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:06:d7:0f:16:d2:d0:8e:72:6d:01:0b:8c:
                    67:e6:c5:d7:26:d9:7c:44:db:49:5e:a8:94:d0:62:
                    fb:fb:c8:31:e4:f0:d0:2b:d6:69:79:27:8e:9d:d0:
                    d3:9c:08:7d:fd:4f:95:48:83:09:dc:46:79:1d:b7:
                    a8:03:9f:8d:d8:10:e2:ed:fe:84:70:e0:4c:47:f2:
                    c4:41:58:25:50:ed:1e:25:48:74:ef:60:e2:ed:16:
                    3d:c8:d3:77:fa:42:db:f0:84:fe:23:c9:02:81:f8:
                    55:5a:e9:b3:b7:91:93:1b:8d:27:0a:6b:b8:b4:d1:
                    02:a2:ec:5e:4c:b9:70:56:ab:15:0a:09:b1:06:cb:
                    82:4b:2a:21:41:08:2c:6a:d0:b4:76:e3:8b:5c:44:
                    25:e8:2b:1d:6a:b9:00:3a:08:d4:96:cc:ff:7c:0c:
                    88:ca:7b:cc:ae:f1:fb:be:01:a0:c1:e9:bf:ef:0a:
                    a3:5c:af:45:07:55:6e:59:7f:c1:6c:07:7b:90:a3:
                    3c:e4:40:cf:c1:95:6c:4e:88:bc:3b:bf:f7:b2:71:
                    f6:be:16:96:e8:ab:8c:68:b8:2d:9d:de:d7:1d:54:
                    a4:dc:ba:4e:87:c4:fd:c3:96:8f:a1:8d:6b:a1:8c:
                    2a:25:e3:be:21:2b:64:1c:67:55:8b:bf:46:60:0e:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:17:FF:6F:2C:C7:21:B7:95:D3:00:09:AC:A8:CD:22:D0:8B:D0:4B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1CED4FCAC6711F18CD984D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.49.0-156.251.58.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:77:eb:f6:d3:01:64:e0:5c:22:fb:e2:67:ed:b1:d0:53:65:
         ec:64:db:eb:51:00:e4:65:85:39:aa:f8:de:40:ca:45:c7:f4:
         b3:4d:92:59:e7:a0:d7:61:f8:00:66:97:4c:47:de:57:b9:7a:
         2e:8e:e0:33:0e:15:d5:d3:c0:96:26:76:82:e6:f1:a9:7e:09:
         b3:e9:9b:cc:44:14:f5:44:d7:28:cc:45:17:b1:64:ab:82:bc:
         bb:99:b3:bf:31:f4:cb:0b:d6:be:ad:75:82:0d:c0:06:c4:c6:
         d4:43:36:00:0d:ac:d8:b5:90:63:b1:81:98:92:54:c7:65:67:
         bc:9a:42:b1:61:ff:dd:47:81:a7:c4:49:d7:dc:23:59:8e:43:
         57:8a:4a:a8:59:b8:2c:20:79:ce:89:de:41:a4:c5:46:a4:2d:
         c8:08:0f:c4:4d:fe:58:97:f6:e0:95:43:32:3f:09:5f:51:1f:
         b9:33:33:c7:96:d5:23:93:0b:99:b9:01:44:14:cf:4d:b0:28:
         cf:37:82:9b:d6:8a:c1:7b:63:c7:8d:fa:fd:48:36:db:ae:cf:
         b4:77:69:e6:7b:0c:ae:84:57:db:78:01:23:dd:ae:ac:ac:5c:
         25:15:47:18:b0:b3:9e:fd:d9:14:4a:43:ed:f6:d0:d7:91:0b:
         da:34:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----