Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8082828AC6611F19D0492D3CE1D38B0.roa
File:                     D8082828AC6611F19D0492D3CE1D38B0.roa (raw, json)
Hash identifier:          D4VHgd9Ach7fnUd13WRi8GESKnCkwL9xBh1JQTBc+5U=
Subject key identifier:   40:43:77:1F:67:00:16:C8:73:F7:94:1D:20:D6:86:F0:FB:33:D5:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D47A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8082828AC6611F19D0492D3CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 15:55:14 +0000
ROA not before:           Wed 09 Sep 2026 15:55:10 +0000
ROA not after:            Mon 30 Nov 2026 15:55:10 +0000
asID:                     399077
IP address blocks:        156.251.40.0/24 maxlen: 24
                          156.251.41.0/24 maxlen: 24
                          156.251.42.0/24 maxlen: 24
                          156.251.43.0/24 maxlen: 24
                          156.251.44.0/24 maxlen: 24
                          156.251.45.0/24 maxlen: 24
                          156.251.46.0/24 maxlen: 24
                          156.251.47.0/24 maxlen: 24
                          156.251.48.0/23 maxlen: 24
                          156.251.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119930 (0x1d47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 15:55:10 2026 GMT
            Not After : Nov 30 15:55:10 2026 GMT
        Subject: CN=6aa18162-8cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:7e:04:4b:ca:df:79:d2:d3:05:b8:46:76:
                    cb:28:5b:01:a1:f4:32:35:1c:ed:9f:fd:4e:bf:9e:
                    7b:12:8b:7d:66:03:b4:27:ae:05:8c:ab:2b:48:22:
                    85:55:f5:d9:f9:86:26:fd:2c:81:6e:6a:b7:43:7b:
                    30:1e:26:e4:ed:b6:a2:7b:12:3f:0e:fe:1f:7b:b0:
                    36:dd:79:6f:cd:64:59:9e:54:b5:c4:5a:78:9a:6b:
                    ef:13:48:9c:6c:82:7e:ab:b4:6d:05:0f:87:ed:5f:
                    09:1b:67:3e:b5:ad:8c:89:98:e0:3b:1a:67:a2:40:
                    76:af:7d:bc:af:eb:78:fa:8d:d7:f2:c5:d9:49:72:
                    b2:55:c6:0e:15:08:e9:40:2c:5d:07:b4:ca:6d:7d:
                    e1:df:a3:b7:cf:c6:fc:34:16:67:09:1f:34:68:37:
                    5f:fd:26:1f:31:fc:e9:8b:61:dc:1b:a0:fa:34:27:
                    c1:9f:ea:da:5c:81:9a:45:b2:8a:69:6e:c6:5c:89:
                    2f:76:4d:f6:e6:5e:3c:5e:f9:31:5c:3b:e8:ce:64:
                    ed:3b:3b:59:f5:06:83:79:1e:82:e0:63:fc:a6:37:
                    a6:3a:bc:f6:34:4d:22:11:8c:f2:35:63:fc:f0:58:
                    5f:e0:52:c8:5b:0e:a7:a5:88:40:da:ba:1d:65:c9:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:43:77:1F:67:00:16:C8:73:F7:94:1D:20:D6:86:F0:FB:33:D5:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8082828AC6611F19D0492D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.40.0-156.251.49.255

    Signature Algorithm: sha256WithRSAEncryption
         46:02:fb:03:07:a5:aa:9e:70:04:b7:9b:a4:66:d6:a6:70:45:
         9c:a2:d6:c3:e5:66:8a:77:1b:0a:86:08:89:ca:3b:58:d8:37:
         1c:95:ab:26:09:bd:4e:fe:a7:61:5e:11:f1:0a:9f:34:21:37:
         1b:4c:2b:8a:9a:4d:3c:5d:da:c4:dc:23:dd:56:fb:bf:70:7b:
         4a:f5:ca:f4:6d:9a:ee:45:22:33:6a:8f:96:01:e1:7a:ef:cc:
         e5:8c:78:a3:11:32:f8:fb:5a:6e:4f:b9:d4:7e:c0:e7:b0:4b:
         20:5d:ed:69:ee:4d:7b:96:15:4d:aa:45:3f:ce:21:9d:2e:43:
         a4:f9:09:f6:46:6c:9e:21:bb:e4:9a:aa:9e:59:af:ce:cd:e7:
         c1:7b:2a:2e:cb:fe:b7:17:49:3c:2b:65:6c:85:54:62:ca:c1:
         11:c9:99:f0:80:75:46:91:dd:af:09:60:57:26:20:2b:28:c6:
         64:f3:a5:66:6f:df:0f:bf:14:48:2a:0e:12:85:46:fe:5f:29:
         74:b4:5b:61:f5:06:4d:b8:3b:bd:69:15:b5:3f:60:06:3e:5e:
         4b:eb:d4:23:86:99:38:b8:a1:bb:4e:3e:6f:26:d5:2e:a4:ed:
         73:15:08:6f:3e:57:79:8d:bf:e4:05:23:0d:43:53:c1:41:55:
         54:50:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----