Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE279A4E9CE111F19D7C8F0FCF1D38B0.roa
File:                     CE279A4E9CE111F19D7C8F0FCF1D38B0.roa (raw, json)
Hash identifier:          ASUCuRCBdEc+1ejYNNBzNg3tilGl3X0p4DVgvf6kouA=
Subject key identifier:   7A:A8:AB:D7:04:6F:AB:EB:0A:77:40:1A:CD:D6:60:B8:87:C4:28:5C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE279A4E9CE111F19D7C8F0FCF1D38B0.roa
Signing time:             Thu 20 Aug 2026 21:55:07 +0000
ROA not before:           Thu 20 Aug 2026 21:55:03 +0000
ROA not after:            Sat 10 Oct 2026 21:55:03 +0000
asID:                     25160
IP address blocks:        156.225.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118542 (0x1cf0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 21:55:03 2026 GMT
            Not After : Oct 10 21:55:03 2026 GMT
        Subject: CN=6a8777bb-a38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fd:de:fd:67:6b:9f:00:39:73:01:89:e7:ca:
                    06:bd:fd:d7:e2:cf:40:ea:f7:ab:09:00:37:f9:f1:
                    27:22:c3:77:b4:57:bd:ea:4c:2a:7e:bd:30:0c:f5:
                    da:10:ba:2b:f3:23:d8:ff:ce:1a:2f:e3:cc:16:a5:
                    cb:12:5c:43:4d:eb:35:40:e7:1d:61:75:b1:5b:81:
                    30:80:e9:56:54:59:46:39:f4:64:73:62:22:55:23:
                    10:4c:50:1d:a8:01:3d:6a:1c:9e:cd:e1:f5:48:ad:
                    54:d3:e3:68:32:91:c1:69:2c:bc:0b:9c:9b:af:3f:
                    16:e8:2f:1c:d5:6a:db:f0:ad:6e:09:d2:da:65:68:
                    9a:b3:13:ee:48:a1:9e:00:91:fb:e1:ff:7e:05:df:
                    77:e8:a4:d4:cc:65:f1:7f:c0:64:f1:27:8a:31:07:
                    6b:ca:bb:09:15:12:36:2d:69:8c:09:36:c2:0e:37:
                    8e:db:d0:a3:41:f7:99:7f:35:90:48:b9:63:52:7f:
                    8c:33:11:e7:1c:23:78:d8:67:5d:dc:a0:af:f4:f7:
                    48:e2:fb:05:bb:d6:f4:4a:c2:26:79:16:ea:a4:f0:
                    7b:d9:65:8a:ce:47:3d:fb:36:48:be:7f:f9:2b:59:
                    ec:6f:51:b6:6d:1f:e8:71:44:36:1e:90:72:f2:54:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A8:AB:D7:04:6F:AB:EB:0A:77:40:1A:CD:D6:60:B8:87:C4:28:5C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE279A4E9CE111F19D7C8F0FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:f0:78:03:10:2e:58:fd:90:a8:83:4e:57:49:d4:44:d6:
         ab:85:88:d1:73:f6:5c:0a:3a:de:fb:d7:8b:cb:4b:95:fb:bb:
         20:3f:d9:78:b8:33:3c:43:9a:a7:b7:93:d5:b3:b2:d3:93:9a:
         f6:23:92:4e:e6:d4:8b:78:0f:ed:ad:2b:31:1e:b1:42:74:81:
         4b:1e:4e:cb:32:0a:2e:d5:f5:b9:a9:dd:78:48:58:b4:5f:3b:
         ee:af:34:ab:ad:ea:aa:ce:eb:c9:3b:05:9e:19:2f:9c:ee:36:
         4c:6a:5b:17:b0:34:d9:96:58:ec:25:0b:e0:30:6d:b8:46:df:
         d5:99:b3:57:51:e2:7c:8c:26:c0:6d:ad:52:cb:1a:fd:12:fe:
         ca:02:a5:50:b1:c4:8d:dd:94:9f:46:4e:f5:70:ed:e8:f9:ab:
         e7:4c:4e:b2:bc:91:61:b5:a6:ab:f1:e4:6c:53:5b:64:a8:d7:
         b8:7c:56:7e:4b:45:79:7e:68:7d:bd:b2:b1:ed:8f:21:af:fa:
         be:14:4d:ba:13:9e:de:1c:b4:d3:75:0d:ff:82:1e:f6:35:85:
         89:59:66:a9:1c:f9:ea:00:6a:95:6b:ef:37:f1:da:11:ed:64:
         93:fc:9b:f3:f3:c1:d2:ce:99:0a:9e:10:47:2e:c7:fe:10:10:
         e7:be:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----