Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBD75922956211F1856A5EA8CE1D38B0.roa
File:                     CBD75922956211F1856A5EA8CE1D38B0.roa (raw, json)
Hash identifier:          ruI13gSCfFVsKOpaZXNiMh7ivR31lHMfbYWLdtb0+2A=
Subject key identifier:   65:38:69:AC:A3:01:17:FE:A7:4B:D6:EB:99:B0:1E:93:C9:BE:D1:A3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBD75922956211F1856A5EA8CE1D38B0.roa
Signing time:             Tue 11 Aug 2026 08:58:19 +0000
ROA not before:           Tue 11 Aug 2026 08:58:15 +0000
ROA not after:            Tue 08 Sep 2026 08:58:15 +0000
asID:                     21859
IP address blocks:        156.252.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 24 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117645 (0x1cb8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 08:58:15 2026 GMT
            Not After : Sep  8 08:58:15 2026 GMT
        Subject: CN=6a7ae42b-a979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:ab:d6:eb:7d:7a:0b:df:db:ab:9e:2c:44:
                    ca:69:cf:ba:fe:2f:3a:96:64:15:0c:4d:ba:4d:e5:
                    9f:39:f0:bf:a7:a6:3d:08:7e:df:a2:cc:53:04:84:
                    05:b9:c9:cb:bf:77:e3:88:fc:2b:54:29:44:00:08:
                    7e:6b:fa:12:9a:57:47:e3:74:14:bd:08:98:15:ed:
                    f3:e9:0f:28:f0:36:8f:e6:c0:94:e1:1e:f8:f1:8f:
                    3f:19:fa:ea:03:f3:6e:6f:48:cd:24:a5:d0:7d:9c:
                    86:b0:6b:65:18:6c:e9:dd:dd:b8:09:76:be:c1:8c:
                    8e:21:c3:bd:20:f1:b4:09:c8:4c:ec:0c:a0:4b:48:
                    f4:81:07:50:ba:7c:30:a9:95:81:76:34:5d:39:09:
                    e6:c0:46:1c:b0:4e:89:d7:c3:de:89:e6:8e:eb:70:
                    10:bc:c8:c1:02:08:ac:be:5c:bd:5d:5d:81:73:46:
                    a8:69:af:43:10:1b:6f:8b:03:a0:0f:7b:6c:4e:e1:
                    b1:b4:24:f2:d6:3e:43:f9:44:48:b4:6a:20:a8:56:
                    7f:af:ba:3d:98:47:56:59:f6:b3:20:27:20:82:91:
                    0a:fa:33:83:4e:51:bd:3f:b1:0b:fe:e2:56:d8:3a:
                    84:6e:8b:6e:d7:29:05:8f:6b:11:de:fa:92:52:71:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:38:69:AC:A3:01:17:FE:A7:4B:D6:EB:99:B0:1E:93:C9:BE:D1:A3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBD75922956211F1856A5EA8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ac:68:37:10:bb:69:ec:9e:26:57:c0:d3:b4:1d:97:1c:76:
         8d:af:ed:7d:15:0b:59:16:1b:ad:3e:89:d5:fc:a5:60:de:fd:
         93:65:ba:41:bf:8c:38:93:cd:0a:88:1e:b6:ad:1a:7f:d5:47:
         8f:6a:08:1a:c3:6a:50:be:de:58:7b:a1:d6:10:6f:00:24:a0:
         9c:aa:56:ea:51:e8:5a:61:60:ea:64:ff:4d:82:8f:3f:49:76:
         c5:c5:8e:e1:75:4a:c1:22:b1:f4:30:8d:20:34:71:a3:e7:65:
         c4:87:fd:ad:11:72:b4:19:c7:02:87:bb:06:03:b0:c7:6b:ca:
         e5:38:c3:92:de:fb:f6:10:b3:41:0c:d0:d2:18:70:be:91:3c:
         97:6d:b8:07:09:a1:fd:58:3d:a9:cb:8e:8a:3f:09:ec:0f:7e:
         f3:78:c8:43:68:44:c7:81:10:8f:d3:16:d5:17:dc:87:c7:bf:
         4c:63:18:7e:4a:3f:24:8b:2a:83:18:bb:fd:45:2a:0a:8b:49:
         c1:8c:26:fe:38:94:70:cf:9e:85:30:e0:75:fb:10:60:4e:37:
         92:31:c0:38:57:af:e2:7f:fe:d6:cc:19:84:9b:df:2a:e9:8a:
         ba:52:4a:09:4c:eb:07:e1:88:04:19:44:26:f7:45:e7:20:81:
         d0:53:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----