Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE09847E9ABE11F1BC7264ABCE1D38B0.roa
File:                     DE09847E9ABE11F1BC7264ABCE1D38B0.roa (raw, json)
Hash identifier:          lQNh8mKTWj3LxoJvyh1XNSflHL7lZjCz4l9Ml5yTrDk=
Subject key identifier:   EB:EB:CB:04:FB:E9:80:EF:43:93:D6:04:D4:24:BF:6F:A4:F7:DF:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE09847E9ABE11F1BC7264ABCE1D38B0.roa
Signing time:             Tue 18 Aug 2026 04:39:59 +0000
ROA not before:           Tue 18 Aug 2026 04:39:55 +0000
ROA not after:            Wed 26 Aug 2026 04:39:55 +0000
asID:                     135391
IP address blocks:        156.254.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 26 Aug 2026 04:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118083 (0x1cd43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 04:39:55 2026 GMT
            Not After : Aug 26 04:39:55 2026 GMT
        Subject: CN=6a83e21f-1a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:2f:c4:44:73:44:1b:27:c8:ea:0c:1e:8a:
                    48:cf:ef:9c:ab:96:29:b7:c2:5b:57:7e:17:57:d7:
                    28:35:78:40:49:2f:82:e0:8d:30:9a:60:69:a4:b9:
                    3b:fd:11:9f:49:71:27:02:c9:fc:fd:6d:c4:c6:dd:
                    86:96:08:fb:45:20:ca:fd:4e:d2:b2:0a:16:9b:89:
                    96:3d:ae:d0:39:60:29:9b:5c:c5:c1:e8:55:82:01:
                    19:96:97:ca:72:33:f1:95:4a:bf:a0:03:21:61:bb:
                    d3:5d:3c:98:af:f0:4d:f1:2f:65:27:a2:f8:46:82:
                    14:43:74:c0:cd:ae:b7:a4:14:36:2c:f5:2e:7c:89:
                    c2:67:2f:f2:f4:fc:a5:4f:6d:33:ba:3c:a8:78:3b:
                    27:1e:39:d2:11:0c:dd:13:9c:03:4e:50:ee:31:e4:
                    2b:c0:f0:2b:5c:8f:3d:82:ca:02:76:b1:f0:38:67:
                    78:ff:98:80:02:ca:95:67:b3:fb:66:41:e5:a5:d6:
                    e0:f1:86:59:0e:7c:af:80:9e:52:3a:87:be:03:1c:
                    a8:16:a4:38:21:4e:12:f6:50:01:8d:27:f2:02:6c:
                    c4:1a:3d:0d:fe:c1:69:eb:5f:2d:19:92:ac:d6:3c:
                    20:35:42:fb:df:a8:9f:8e:fa:cd:5d:96:ff:a8:e9:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:CB:04:FB:E9:80:EF:43:93:D6:04:D4:24:BF:6F:A4:F7:DF:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE09847E9ABE11F1BC7264ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:be:0c:d0:6e:2a:6d:b7:91:12:86:46:57:86:43:ee:b3:90:
         ec:71:7b:09:96:83:54:03:d0:a7:48:eb:35:ab:1b:c3:bb:0a:
         49:9c:7b:5c:cd:c1:ce:b2:c3:a7:71:ff:ca:64:ca:7c:8f:b6:
         df:04:34:d8:61:4b:df:d9:fb:20:59:af:0a:df:85:1b:fd:00:
         70:70:62:5d:94:bc:b6:2f:d3:6b:30:f8:04:a4:ba:b9:57:f1:
         85:bb:39:fd:2b:c9:6c:01:f3:6d:fe:a3:67:f8:a2:03:7a:9b:
         f8:a5:1d:4c:56:af:d3:45:74:7a:82:e9:58:97:37:87:2b:ca:
         7f:2b:45:d0:33:45:81:6b:53:f1:a1:0b:e4:c5:9b:d4:3f:10:
         50:9a:aa:48:82:b2:4b:b5:66:0b:62:40:31:79:e4:fc:ae:d9:
         e7:5a:17:73:03:b2:2a:f6:7c:9e:4d:9d:d3:52:26:0c:c3:7b:
         bd:47:43:b0:8d:ff:f5:6a:ea:d5:3f:34:05:47:e5:3c:d5:6d:
         ac:ad:97:4c:8f:7a:ef:b7:f7:69:77:33:be:36:61:82:c0:b9:
         5f:8c:20:2d:89:95:e5:93:10:12:76:34:30:60:42:cd:8e:b6:
         dc:82:31:96:ff:de:75:51:08:26:13:2f:5a:bd:94:ec:1d:98:
         ee:10:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----