Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D207466EC57211F18A1A13C3CE1D38B0.roa
File:                     D207466EC57211F18A1A13C3CE1D38B0.roa (raw, json)
Hash identifier:          8+55VQ7xIK80DN5Y+E2Vy5NgHUzU4EiCbTSyaQjOHAk=
Subject key identifier:   F0:00:BD:2F:82:5D:8F:D6:AC:F5:3C:FF:1D:37:BF:2E:3F:9F:9C:F3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D207466EC57211F18A1A13C3CE1D38B0.roa
Signing time:             Sun 11 Oct 2026 12:53:57 +0000
ROA not before:           Sun 11 Oct 2026 12:53:52 +0000
ROA not after:            Wed 18 Nov 2026 12:53:52 +0000
asID:                     22773
IP address blocks:        156.242.20.0/23 maxlen: 24
                          156.242.22.0/24 maxlen: 24
                          156.242.24.0/23 maxlen: 24
                          156.243.35.0/24 maxlen: 24
                          156.243.36.0/23 maxlen: 24
                          156.243.82.0/24 maxlen: 24
                          156.243.84.0/24 maxlen: 24
                          156.243.96.0/22 maxlen: 24
                          156.243.130.0/24 maxlen: 24
                          156.244.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122049 (0x1dcc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 12:53:52 2026 GMT
            Not After : Nov 18 12:53:52 2026 GMT
        Subject: CN=6acb86e5-d5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:97:de:4d:dc:fa:2a:0d:b2:b2:6b:33:9a:
                    0a:18:8a:7c:b1:6f:9f:6b:5d:d0:8a:84:70:03:21:
                    db:01:25:70:2d:b9:8b:2b:a4:6f:ac:a5:fe:2a:16:
                    11:db:da:3f:ef:16:d6:1e:96:4d:c7:67:61:ce:15:
                    f6:a3:82:65:43:41:8d:3f:05:43:f8:8d:fa:da:58:
                    85:81:c4:d7:42:36:78:97:68:40:aa:14:51:a4:db:
                    2b:4b:c1:3a:8f:32:72:03:54:77:22:2a:0c:c6:3e:
                    46:7a:e3:dd:8d:4e:9f:e4:51:60:41:65:7e:e8:d6:
                    c8:85:4a:92:aa:6d:f5:5b:e9:cf:6f:75:ff:28:e2:
                    fa:3f:1f:56:a2:54:7c:4f:5e:50:da:5e:32:b4:41:
                    f8:92:c7:cf:a5:f7:ad:18:47:24:b5:87:82:26:c2:
                    07:91:62:7b:15:93:38:69:f5:eb:48:28:8a:ce:8a:
                    a2:a9:8d:a7:5b:ad:72:d6:d0:3b:6e:2d:49:26:cc:
                    f2:1e:d2:6c:83:52:d9:5c:57:82:0f:ba:db:38:8e:
                    34:02:d9:66:c1:09:ac:8a:46:68:94:f1:f8:69:42:
                    e0:d6:50:9b:18:6e:65:ff:c6:f6:58:1a:5a:4e:bd:
                    65:96:8a:60:6b:95:8e:ce:21:b6:e2:b2:c7:f9:87:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:00:BD:2F:82:5D:8F:D6:AC:F5:3C:FF:1D:37:BF:2E:3F:9F:9C:F3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D207466EC57211F18A1A13C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.20.0-156.242.22.255
                  156.242.24.0/23
                  156.243.35.0-156.243.37.255
                  156.243.82.0/24
                  156.243.84.0/24
                  156.243.96.0/22
                  156.243.130.0/24
                  156.244.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:1e:de:9d:ab:06:ee:5b:2f:1c:11:67:c2:e0:6b:be:40:c2:
         c2:09:a4:c8:96:bd:db:7c:d0:b6:8e:59:50:29:14:29:7d:e5:
         f1:c4:66:33:d9:03:82:5c:16:b5:6a:a6:9f:a1:06:ed:8e:5d:
         95:bc:3b:72:b3:78:04:c5:94:68:f5:7e:c4:71:9e:47:3f:ea:
         d0:ed:51:f4:6d:c0:94:06:5d:04:f9:fd:63:67:a0:f1:06:fe:
         1e:6c:bd:ae:a6:6e:7d:57:ee:65:71:c4:f8:f8:d3:0a:76:fb:
         36:d6:5d:84:85:32:40:71:0c:5f:cf:49:16:e8:d5:e3:ef:01:
         7c:d9:af:3e:e3:e2:31:40:c1:a0:f4:56:c4:58:c0:1b:76:cc:
         f5:91:48:2a:a6:5b:82:ae:c5:8c:e9:03:8f:0e:73:f2:59:20:
         f6:c6:23:56:39:3b:19:0d:eb:30:7c:d5:2b:8d:81:ae:c5:f4:
         17:7f:1c:d4:25:53:3e:e2:26:0f:13:89:24:b3:0b:0c:50:4a:
         6f:c9:7d:98:fe:fa:d1:81:a5:ca:b8:9a:45:03:b3:72:83:3f:
         4c:1e:cc:3a:93:25:41:8b:fc:bc:28:ec:c0:67:8b:f3:21:df:
         93:c7:27:0a:79:52:d7:71:d8:90:72:4e:5c:34:66:8e:ec:54:
         9c:72:54:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----