Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D56D74D6BE3311F1879C8AEACE1D38B0.roa
File:                     D56D74D6BE3311F1879C8AEACE1D38B0.roa (raw, json)
Hash identifier:          1Kz07G6UB7Wwb/EMGMpO5BxCup51Rjd8bSi/xQq3NrM=
Subject key identifier:   BA:F1:4B:02:BF:88:00:FA:6C:CF:0E:8C:5F:91:C9:37:34:07:D8:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D56D74D6BE3311F1879C8AEACE1D38B0.roa
Signing time:             Fri 02 Oct 2026 07:35:26 +0000
ROA not before:           Fri 02 Oct 2026 07:35:22 +0000
ROA not after:            Mon 09 Nov 2026 07:35:22 +0000
asID:                     48031
IP address blocks:        156.254.102.0/24 maxlen: 24
                          156.254.103.0/24 maxlen: 24
                          156.254.104.0/24 maxlen: 24
                          156.254.105.0/24 maxlen: 24
                          156.254.106.0/24 maxlen: 24
                          156.254.107.0/24 maxlen: 24
                          156.254.108.0/24 maxlen: 24
                          156.254.109.0/24 maxlen: 24
                          156.254.110.0/24 maxlen: 24
                          156.254.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121337 (0x1d9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 07:35:22 2026 GMT
            Not After : Nov  9 07:35:22 2026 GMT
        Subject: CN=6abf5ebe-f4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:11:5f:dd:ba:57:f6:be:27:0c:25:5d:31:
                    ba:f9:7e:0a:54:6c:92:0c:2c:c1:71:81:fc:c8:ee:
                    cb:23:45:da:08:09:d1:1a:ca:7b:82:51:a7:3a:48:
                    9b:6a:2e:c0:f7:db:85:5e:7a:f9:ab:60:e0:74:80:
                    c5:63:f6:f2:05:fc:b3:47:ec:28:97:83:0d:ed:c8:
                    91:ba:df:fe:23:54:c4:00:a4:6f:15:17:b1:43:19:
                    8b:a4:40:13:90:55:2f:14:aa:37:af:73:cf:e3:46:
                    8f:a1:5a:3c:3f:a0:05:f1:b1:24:0b:d3:18:7a:59:
                    22:71:63:45:75:54:a2:73:2d:86:d5:03:9c:a4:0b:
                    99:03:09:d7:40:95:89:4a:85:37:c4:48:b6:0a:d9:
                    3b:37:65:e6:73:44:86:fd:19:10:37:42:5f:2d:a7:
                    e5:04:82:33:d6:01:b3:a1:58:d5:e2:3b:44:c2:96:
                    81:9a:a3:fa:3c:28:29:3d:fc:82:6b:61:53:3c:5f:
                    a3:70:29:cc:b1:54:1c:35:5e:0e:4f:c7:c0:02:81:
                    bc:8d:b9:27:e7:8e:05:16:a1:2f:8e:78:e9:5a:f7:
                    ad:5e:d5:7f:44:6d:6e:ce:b9:9d:82:4c:8b:3c:0c:
                    7d:a5:bf:6f:89:3e:2f:5c:50:dd:d6:f5:b1:c3:f5:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F1:4B:02:BF:88:00:FA:6C:CF:0E:8C:5F:91:C9:37:34:07:D8:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D56D74D6BE3311F1879C8AEACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.102.0-156.254.111.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:7b:89:36:05:6b:8b:e0:e2:3b:64:78:0d:db:da:09:ae:
         2c:f2:ba:d9:47:03:26:41:21:2a:32:7a:23:fc:cd:3a:03:af:
         ec:c5:55:8b:78:56:d0:cf:d6:e7:c1:1e:5c:5e:6b:3d:11:b9:
         26:b7:2b:67:ae:36:48:7f:62:ba:f5:9a:d7:59:4f:df:30:78:
         68:70:db:9a:ad:6c:f8:72:90:d5:f5:18:b6:d3:23:de:9e:5f:
         10:a7:7f:fe:10:5c:bf:40:cb:5e:fc:7d:e6:31:c3:57:13:8e:
         e6:19:15:77:cb:e8:46:46:09:e7:6a:1f:8d:cc:59:04:a1:f8:
         c6:26:d1:ec:02:b2:48:4a:4e:4c:64:93:fb:f0:46:ae:9a:8e:
         b3:4e:b3:99:7a:24:df:fd:be:eb:d8:da:fc:f4:55:c7:e0:d1:
         e0:47:93:78:81:64:4e:0c:31:e6:b7:c4:9d:0a:57:f9:f7:e4:
         ef:b6:3b:88:4d:be:c6:7e:bd:b8:3f:b1:04:0b:d8:4f:a0:43:
         a5:50:a9:0c:5b:78:d2:9d:09:e8:d4:a9:53:3d:6f:3f:05:d3:
         97:e8:5f:58:a4:e4:c3:e6:1d:0f:9a:23:6f:c6:c7:1b:14:96:
         48:45:a1:1b:cb:88:f8:6e:ce:73:1a:49:58:6e:de:09:24:f3:
         eb:36:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----