Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C2A236A12B11F1A3F225DFCE1D38B0.roa
File:                     C2C2A236A12B11F1A3F225DFCE1D38B0.roa (raw, json)
Hash identifier:          SmTnIyS+Xr9/7xIpJVVxkbyLl0o/3pvDjloDrk2qmEQ=
Subject key identifier:   B8:53:4C:EE:CD:77:4B:BE:A4:A6:CE:0F:FC:6C:0F:69:48:C3:09:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D111
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C2A236A12B11F1A3F225DFCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 08:54:35 +0000
ROA not before:           Wed 26 Aug 2026 08:54:31 +0000
ROA not after:            Sat 25 Aug 2029 08:54:31 +0000
asID:                     17561
IP address blocks:        156.235.158.0/24 maxlen: 24
                          156.235.159.0/24 maxlen: 24
                          156.235.160.0/24 maxlen: 24
                          156.235.161.0/24 maxlen: 24
                          156.235.162.0/24 maxlen: 24
                          156.235.163.0/24 maxlen: 24
                          156.235.164.0/24 maxlen: 24
                          156.235.165.0/24 maxlen: 24
                          156.235.166.0/24 maxlen: 24
                          156.235.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119057 (0x1d111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 08:54:31 2026 GMT
            Not After : Aug 25 08:54:31 2029 GMT
        Subject: CN=6a8ea9cb-5b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:04:0b:4b:74:0a:b6:29:5e:04:6a:6d:29:
                    ad:a0:dd:6c:14:e5:8b:f2:dc:45:bb:8a:8d:b7:50:
                    d2:12:b8:4a:fa:ef:8a:c1:4a:ae:db:fd:45:9e:22:
                    7a:b9:91:33:28:84:9e:3f:b6:c4:98:50:43:60:3d:
                    b7:63:f4:cf:da:2e:20:df:b6:7c:f6:e3:31:5b:68:
                    09:d0:f1:63:df:74:06:2e:f5:54:f4:32:8d:9a:f5:
                    33:b6:d8:dc:3c:dd:a1:24:23:2b:2b:62:a8:33:52:
                    68:69:b1:11:45:33:59:fd:07:a4:0a:55:f7:bd:62:
                    62:f0:6c:c2:77:11:72:d0:d9:d8:2b:01:a5:e2:3f:
                    dd:08:db:f1:ba:15:b6:c4:49:bb:be:4c:e0:14:c8:
                    5a:ba:05:2e:3c:4f:0f:a9:9c:34:26:39:ae:ba:60:
                    37:60:91:4c:d4:39:12:c0:6f:3e:e0:52:e7:cc:ee:
                    75:fa:4e:7e:91:c2:81:ee:cc:51:20:bb:da:d0:8b:
                    b2:30:95:fa:70:cc:88:9f:c7:0d:87:78:1c:34:11:
                    9d:71:e3:1b:0e:3c:80:bf:28:2a:cf:ee:00:0e:c7:
                    27:f7:61:51:26:fb:9b:4d:1b:1e:27:40:fd:0c:9d:
                    c6:f0:d5:3d:ee:e4:2d:3e:3a:9b:e6:d2:da:5d:b4:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:53:4C:EE:CD:77:4B:BE:A4:A6:CE:0F:FC:6C:0F:69:48:C3:09:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C2A236A12B11F1A3F225DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.158.0-156.235.167.255

    Signature Algorithm: sha256WithRSAEncryption
         13:91:a7:28:cf:e4:88:fb:33:85:1d:fc:3f:ec:b0:65:5a:ad:
         e5:fe:3c:37:13:ec:eb:e7:58:bf:53:59:1b:b2:18:b6:4e:3a:
         53:94:ff:e1:96:6a:39:ea:fb:7e:8a:97:1a:67:8a:18:4a:58:
         f9:47:34:28:64:26:f7:25:17:36:60:47:4d:a6:9f:58:b1:0b:
         bd:d9:d6:a4:99:91:d7:d6:c8:14:37:5c:19:b1:97:84:71:07:
         19:7b:46:87:ce:85:11:59:09:7f:eb:29:a7:3e:e0:56:0d:0f:
         3e:19:9b:81:aa:ef:1b:a7:75:1b:b5:c9:4f:33:b6:97:5b:4b:
         bb:a4:1f:af:c7:82:78:b6:7f:71:3d:c1:70:40:85:e6:5a:3d:
         78:ad:77:46:4a:de:f6:fb:61:2b:ea:10:8d:8f:6e:44:bd:21:
         ab:17:4b:8d:54:4b:4a:03:40:f9:ec:6c:c8:a5:ec:11:85:ed:
         ba:78:26:04:27:8e:a7:16:43:50:7c:8c:a3:8d:36:20:6d:4d:
         ee:e8:4f:0d:1c:c7:10:3f:dd:03:97:15:8c:36:39:f4:64:60:
         38:bd:ad:4e:12:ef:a6:d4:16:ef:e4:34:ff:25:53:6e:ce:92:
         50:74:1e:23:2e:cb:d0:fc:07:84:bd:c2:dd:18:15:92:66:56:
         9b:48:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----