Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF421130B99111F1A43F9BAECE1D38B0.roa
File:                     CF421130B99111F1A43F9BAECE1D38B0.roa (raw, json)
Hash identifier:          NNWqCDyM6kcWgDW2Fas6RmA6v+DFOu/oRoJf+UiSpF8=
Subject key identifier:   0A:CD:6F:4C:4F:7D:09:4E:AA:55:7A:BF:EB:D7:D2:3B:72:CE:53:1B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF421130B99111F1A43F9BAECE1D38B0.roa
Signing time:             Sat 26 Sep 2026 10:05:33 +0000
ROA not before:           Sat 26 Sep 2026 10:05:28 +0000
ROA not after:            Sun 01 Nov 2026 10:05:28 +0000
asID:                     44559
IP address blocks:        156.243.234.0/24 maxlen: 24
                          156.243.240.0/24 maxlen: 24
                          156.243.242.0/24 maxlen: 24
                          156.243.255.0/24 maxlen: 24
                          156.244.209.0/24 maxlen: 24
                          156.244.210.0/24 maxlen: 24
                          156.244.211.0/24 maxlen: 24
                          156.249.19.0/24 maxlen: 24
                          156.249.80.0/24 maxlen: 24
                          156.249.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121074 (0x1d8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 10:05:28 2026 GMT
            Not After : Nov  1 10:05:28 2026 GMT
        Subject: CN=6ab798ed-9806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:a6:9d:38:ab:29:5c:dd:f1:eb:0d:01:37:
                    6c:ff:2e:f7:6a:df:79:93:31:94:c8:39:f9:28:19:
                    25:78:69:25:d8:9e:df:9d:19:01:2c:30:19:e4:df:
                    62:1b:0e:73:96:1c:00:5b:48:41:ed:70:fc:0e:6e:
                    8f:2a:af:fb:ae:3b:01:3e:50:18:a5:9e:2f:77:f3:
                    86:a2:43:f0:fe:95:c3:8e:96:41:ec:f8:d2:6d:aa:
                    84:2f:95:be:e2:95:a4:6c:81:37:62:d1:23:20:9e:
                    14:27:56:26:36:bf:ba:1c:3b:48:ba:79:a5:41:a3:
                    9b:e9:d0:31:5c:0f:b3:29:e7:e7:e9:8b:37:40:7e:
                    6c:05:8a:19:f2:85:bf:0f:5b:77:f1:a7:37:c1:b0:
                    91:fd:58:ee:85:54:3d:ff:8d:3b:01:5a:01:8d:a4:
                    54:f8:eb:95:85:58:9d:79:18:b5:1c:3d:a5:25:6d:
                    a5:0e:16:e9:d1:eb:fa:c7:2c:0d:5d:62:07:04:60:
                    de:45:55:10:4c:52:44:62:1f:39:d8:52:72:7f:70:
                    4a:f3:22:24:67:af:d7:2c:de:0a:c2:c2:7c:67:bf:
                    62:2b:9c:28:6b:98:a5:84:1c:5a:c7:40:5a:22:70:
                    45:b6:65:44:f6:36:4d:17:5e:52:93:86:89:a7:0c:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CD:6F:4C:4F:7D:09:4E:AA:55:7A:BF:EB:D7:D2:3B:72:CE:53:1B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF421130B99111F1A43F9BAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.234.0/24
                  156.243.240.0/24
                  156.243.242.0/24
                  156.243.255.0/24
                  156.244.209.0-156.244.211.255
                  156.249.19.0/24
                  156.249.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:8f:e8:54:e4:b9:7b:0b:8b:5f:2e:18:35:cf:75:3d:32:9e:
         b8:6e:4e:b9:fa:a7:8c:e7:72:99:23:18:9f:c9:4b:0e:ee:16:
         87:8b:64:7a:3c:51:ee:4f:8f:f6:ee:0f:7b:19:28:d0:25:7a:
         02:1d:ba:d9:ab:69:fb:2b:29:12:23:5b:ac:77:e4:38:7c:33:
         a9:4c:01:7d:b6:b8:27:a6:50:31:e2:2c:cb:90:0c:01:b0:c1:
         0f:c2:13:c9:bd:d3:99:06:76:75:7c:e8:4f:2a:86:61:c5:55:
         73:df:23:6a:6b:87:f1:e2:47:b7:7b:8b:e0:8b:a5:59:5f:c9:
         7c:21:d6:c5:6e:54:12:f8:59:bf:b7:f9:04:c1:1f:d9:83:a7:
         a7:2f:5b:1c:12:26:b7:a4:0b:03:75:99:f9:64:74:96:c0:74:
         9d:5e:e8:57:4f:e1:16:dd:bb:f6:d1:af:67:93:1e:ee:0d:a1:
         4f:a8:cf:3c:c3:95:6e:6c:b3:43:fd:83:30:ee:2f:ea:56:57:
         68:e6:df:d1:4e:c6:35:d4:af:df:ab:ef:47:b1:0c:5e:32:6c:
         fd:86:99:06:d4:79:93:4c:c5:6e:b0:10:c5:0d:99:59:cd:07:
         9e:ca:5f:9f:d6:58:c7:0f:30:d8:4c:c9:a6:08:34:ae:6a:c1:
         f5:9c:86:da
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIDAdjyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI2MTAwNTI4WhcNMjYxMTAxMTAwNTI4WjAYMRYw
FAYDVQQDEw02YWI3OThlZC05ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvdqmnTirKVzd8esNATds/y73at95kzGUyDn5KBkleGkl2J7fnRkBLDAZ
5N9iGw5zlhwAW0hB7XD8Dm6PKq/7rjsBPlAYpZ4vd/OGokPw/pXDjpZB7PjSbaqE
L5W+4pWkbIE3YtEjIJ4UJ1YmNr+6HDtIunmlQaOb6dAxXA+zKefn6Ys3QH5sBYoZ
8oW/D1t38ac3wbCR/VjuhVQ9/407AVoBjaRU+OuVhVideRi1HD2lJW2lDhbp0ev6
xywNXWIHBGDeRVUQTFJEYh852FJyf3BK8yIkZ6/XLN4KwsJ8Z79iK5woa5ilhBxa
x0BaInBFtmVE9jZNF15Sk4aJpwzFgwIDAQABo4ICzjCCAsowHQYDVR0OBBYEFArN
b0xPfQlOqlV6v+vX0jtyzlMbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRjQyMTEzMEI5OTExMUYxQTQzRjlCQUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAnPPqAwQAnPPwAwQAnPPyAwQA
nPP/MAwDBACc9NEDBAKc9NADBACc+RMDBAGc+VAwDQYJKoZIhvcNAQELBQADggEB
AKSP6FTkuXsLi18uGDXPdT0ynrhuTrn6p4zncpkjGJ/JSw7uFoeLZHo8Ue5Pj/bu
D3sZKNAlegIdutmrafsrKRIjW6x35Dh8M6lMAX22uCemUDHiLMuQDAGwwQ/CE8m9
05kGdnV86E8qhmHFVXPfI2prh/HiR7d7i+CLpVlfyXwh1sVuVBL4Wb+3+QTBH9mD
p6cvWxwSJrekCwN1mflkdJbAdJ1e6FdP4Rbdu/bRr2eTHu4NoU+ozzzDlW5ss0P9
gzDuL+pWV2jm39FOxjXUr9+r70exDF4ybP2GmQbUeZNMxW6wEMUNmVnNB57KX5/W
WMcPMNhMyaYINK5qwfWchto=
-----END CERTIFICATE-----