Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D27BA36E9F8011F1AD33D2C2CE1D38B0.roa
File:                     D27BA36E9F8011F1AD33D2C2CE1D38B0.roa (raw, json)
Hash identifier:          zNc2tN9J6Yh800llan/QKPg8kJsON5fH7HuY/pWLx90=
Subject key identifier:   34:4E:20:A6:AF:25:F4:FF:81:A0:FF:16:CB:55:BA:C0:F8:98:17:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D03B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D27BA36E9F8011F1AD33D2C2CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 05:58:26 +0000
ROA not before:           Mon 24 Aug 2026 05:58:22 +0000
ROA not after:            Wed 16 Sep 2026 05:58:22 +0000
asID:                     154321
IP address blocks:        156.226.176.0/22 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118843 (0x1d03b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 05:58:22 2026 GMT
            Not After : Sep 16 05:58:22 2026 GMT
        Subject: CN=6a8bdd82-1e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:56:f3:d2:d4:ac:12:b7:b8:54:15:98:63:6e:
                    44:58:d2:a1:22:d6:86:45:5f:39:be:b0:b1:ee:8c:
                    8b:63:40:5d:2c:f2:15:8d:52:50:3e:af:46:82:be:
                    99:23:c2:81:02:c0:b8:b9:4f:05:b4:c1:24:18:d3:
                    9d:2a:9e:a1:ac:8e:bb:42:ed:57:c4:49:4a:f6:13:
                    cf:68:fc:17:45:c2:b2:a6:e6:72:46:77:1d:b0:d7:
                    f5:f1:c1:ff:c1:06:1c:17:ad:36:9e:69:1f:32:c1:
                    90:62:84:41:94:fe:ef:83:7b:6a:86:e2:b4:b6:46:
                    f7:ad:3c:5b:02:63:03:c7:38:96:72:46:52:ca:91:
                    04:90:56:93:38:24:6c:05:4a:86:f7:c4:4a:e9:0e:
                    d1:54:55:5d:62:cd:f2:5f:c5:40:1d:43:b8:a9:88:
                    5f:e1:8c:1a:a2:00:29:1c:db:15:1c:b4:1e:ad:ba:
                    b4:44:91:05:e2:d4:99:45:4c:45:e6:5e:3c:56:9a:
                    c9:32:2c:33:15:f5:81:74:65:77:6e:6c:68:91:8d:
                    1b:66:f1:08:97:a7:2f:d6:e3:c4:54:9c:58:7e:77:
                    94:12:0d:7c:d9:d6:8c:93:31:85:4b:b6:5a:e0:3e:
                    ba:8b:84:15:27:44:88:e5:ad:67:22:1a:09:28:ed:
                    b7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4E:20:A6:AF:25:F4:FF:81:A0:FF:16:CB:55:BA:C0:F8:98:17:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D27BA36E9F8011F1AD33D2C2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:f4:e5:91:4e:84:98:d1:72:a0:93:6e:61:91:25:39:64:2c:
         23:ac:e3:c2:39:d6:e8:4f:3d:9e:fc:35:ad:48:9e:c5:f3:19:
         92:4b:02:69:b0:b6:66:08:11:c6:c7:1c:ed:ed:00:2f:30:2b:
         5b:59:6a:79:33:f4:09:ab:60:53:d1:f2:a6:b9:b6:fb:ed:d6:
         6e:5e:ed:66:27:77:6c:dc:d9:7d:08:48:a1:39:a4:6f:8b:ae:
         e5:6d:d9:b3:ce:78:01:f0:84:f8:cd:17:2b:0a:86:a9:2d:1c:
         c5:5f:7f:24:57:9b:f5:35:63:ae:dc:04:a2:fe:46:cc:b4:c9:
         55:2d:56:f7:69:6c:c6:9a:f1:1c:ef:0a:68:18:39:9e:57:9b:
         9f:1c:c3:58:c4:b5:99:27:8a:21:72:c1:49:54:c6:a3:01:04:
         e5:83:ee:9a:d9:77:95:f0:37:b3:a5:aa:cb:7b:37:a6:38:6c:
         32:71:a4:99:e2:20:84:b5:29:88:82:9f:09:b0:ed:29:73:8b:
         34:1c:f5:24:b9:4f:76:07:78:5c:cf:f9:94:92:f8:89:22:f2:
         f9:ac:45:1b:ce:2f:a0:10:d0:43:98:3d:ec:16:51:b1:e5:7c:
         69:c1:03:de:96:df:5a:b2:54:77:a5:05:bf:87:a2:85:bf:a3:
         06:1a:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----