Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD440374C9FF11F1B3BF62F9CE1D38B0.roa
File:                     CD440374C9FF11F1B3BF62F9CE1D38B0.roa (raw, json)
Hash identifier:          8dWUwvtkGoeSRmlJYkfEYLHgDhZdsgIdsPPTixM6F7k=
Subject key identifier:   E1:22:22:9E:B9:85:AB:FF:64:79:D9:A2:D7:E3:86:3B:96:3F:BF:A1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD440374C9FF11F1B3BF62F9CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 07:53:13 +0000
ROA not before:           Sat 17 Oct 2026 07:53:08 +0000
ROA not after:            Tue 24 Nov 2026 07:53:08 +0000
asID:                     54600
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
                          156.239.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122388 (0x1de14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 17 07:53:08 2026 GMT
            Not After : Nov 24 07:53:08 2026 GMT
        Subject: CN=6ad32968-216f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:63:a7:b2:f3:1b:91:2f:7e:a2:53:bd:66:
                    3c:d2:67:ea:41:64:34:02:77:45:d5:c7:2a:f9:b7:
                    03:f8:8f:6a:1a:8d:5f:7c:b0:cb:ef:6b:72:76:11:
                    ae:18:c8:99:fe:88:da:f6:b3:1f:92:97:77:79:78:
                    32:10:86:dc:84:44:50:a7:64:83:95:35:15:91:a3:
                    df:c3:0f:07:1e:94:80:02:1e:19:c1:bc:f7:ac:3d:
                    92:4f:62:7c:0b:3e:97:d4:e8:10:43:40:98:09:a5:
                    cf:c3:f8:5f:81:2f:ab:5f:20:b1:28:d2:2e:e8:d4:
                    1a:41:61:cd:ca:d1:69:fc:63:5c:f1:d3:70:22:62:
                    67:15:67:ce:a1:f7:72:8b:29:bc:b9:84:5e:77:f4:
                    9a:2b:94:35:e5:d3:9c:31:30:f0:a5:e9:71:0a:7e:
                    bb:da:3d:3a:51:1c:a5:14:61:06:08:c1:1b:01:fa:
                    c5:2d:8d:e6:5d:19:9f:d1:8d:46:49:c6:d7:74:7b:
                    58:4a:b3:37:a3:9d:e8:f1:87:8f:57:bc:ff:ef:a0:
                    0d:12:25:a2:57:60:ba:3c:c1:f4:88:c4:83:33:94:
                    a2:9d:68:93:fd:4a:4f:af:e5:f1:6d:fb:c2:4d:7b:
                    28:0e:db:75:23:3d:9e:d4:36:81:3f:41:7a:23:95:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:22:22:9E:B9:85:AB:FF:64:79:D9:A2:D7:E3:86:3B:96:3F:BF:A1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD440374C9FF11F1B3BF62F9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.53.255

    Signature Algorithm: sha256WithRSAEncryption
         0b:46:15:2d:df:73:5a:d9:90:30:11:36:2e:af:34:84:b0:03:
         ee:26:c5:09:8b:11:f4:d3:d1:72:12:2d:cc:2e:78:32:83:97:
         04:eb:97:6d:e7:f5:ae:7c:e4:07:d7:f7:42:f6:89:fa:6d:f7:
         bd:62:4a:07:3a:3e:70:0f:b3:3a:8b:16:cd:76:8d:7c:1b:ac:
         22:fc:98:2f:4a:85:c0:46:1e:0d:b5:4e:da:3c:36:65:67:59:
         13:75:94:5e:7d:c4:97:fa:40:ea:0f:70:42:bb:68:dc:f9:a8:
         3d:47:11:fa:53:59:fc:2f:e6:78:c8:02:c7:b6:c7:86:bd:86:
         13:2b:3f:d2:82:70:fb:b8:f8:8a:1b:a8:0b:ba:a4:84:31:7c:
         ed:10:21:ce:ff:4d:85:26:22:7d:49:06:0c:ef:62:68:e3:d0:
         82:a8:bf:8d:7d:ed:d5:f8:ca:c3:0c:44:42:0b:a4:c1:f7:6f:
         d6:39:f8:ac:35:cc:a2:2b:d0:98:4d:f3:f4:bf:1a:2a:99:bc:
         0d:40:fc:b6:5b:31:51:73:72:98:6b:65:a3:e2:e8:16:9c:db:
         9e:5f:e0:84:82:f6:f8:11:3f:95:f0:17:5a:02:1c:12:87:e2:
         1d:fa:9c:80:cf:3f:5a:33:57:4a:dd:23:40:26:d9:ae:3f:b8:
         39:5a:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----