Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E940C088962611F1BC03D6CBCE1D38B0.roa
File:                     E940C088962611F1BC03D6CBCE1D38B0.roa (raw, json)
Hash identifier:          zflm4+mmnM56t5iF8gabT4cHP1qgVePc/+7Cv9C+4fI=
Subject key identifier:   96:82:E8:F2:CA:BA:F1:8A:E6:8B:D3:4D:EE:68:03:0A:6D:D1:AB:D8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E940C088962611F1BC03D6CBCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:22:09 +0000
ROA not before:           Wed 12 Aug 2026 08:22:05 +0000
ROA not after:            Fri 18 Aug 2028 08:22:05 +0000
asID:                     24413
IP address blocks:        156.230.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117711 (0x1cbcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 08:22:05 2026 GMT
            Not After : Aug 18 08:22:05 2028 GMT
        Subject: CN=6a7c2d31-59b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:84:2c:64:7a:4c:2e:c2:b1:c7:85:d9:89:
                    e1:ce:1d:05:1f:05:d1:08:3e:40:fa:1d:67:6f:14:
                    8e:ea:7a:82:fc:32:7a:43:13:4d:7e:98:e8:d0:5e:
                    90:85:26:4c:fe:09:fd:50:87:62:17:ed:eb:ea:7a:
                    be:fe:79:34:bf:4a:d6:b0:63:a1:d7:c1:a6:3f:d4:
                    9b:54:7e:a2:41:08:93:65:09:ee:77:12:6f:04:29:
                    7c:f6:09:69:4c:a3:dd:f9:b0:d7:52:2a:b9:72:c6:
                    b2:a2:0a:bb:20:6d:9f:35:60:3f:9e:74:9b:b5:4c:
                    26:72:24:12:88:9d:0e:65:43:74:f6:b5:ec:59:bf:
                    6b:f7:33:04:8b:b4:cb:23:07:fe:38:e1:e2:52:85:
                    67:21:6e:09:b7:a7:89:f7:e2:05:37:c9:45:66:d7:
                    7a:a4:1a:21:f9:b4:01:5f:95:6a:71:df:6d:cc:99:
                    70:45:63:6a:c2:89:f3:7f:a9:1f:cb:06:5b:41:a0:
                    1a:7a:84:68:16:57:e5:23:c1:71:43:da:62:3b:b0:
                    7c:4f:a3:54:3d:a3:f1:b6:f3:72:32:25:19:c9:dc:
                    b6:86:39:b1:c5:cb:06:b4:62:c6:aa:d4:ae:a8:2b:
                    a9:88:9a:8d:47:11:c4:22:b7:1d:7e:28:58:de:ac:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:82:E8:F2:CA:BA:F1:8A:E6:8B:D3:4D:EE:68:03:0A:6D:D1:AB:D8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E940C088962611F1BC03D6CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:cd:55:d5:0b:79:77:ac:bf:06:12:8b:ea:f4:4a:db:3a:6d:
         21:08:6e:a6:d0:40:5c:92:34:8f:ad:90:fc:fc:10:85:d1:c3:
         c6:32:2d:db:d9:e0:12:30:ac:e5:d9:54:36:bc:f5:c8:c5:79:
         ad:31:c1:cd:97:46:f3:0e:22:ce:84:29:e8:ac:51:71:42:e8:
         3c:e6:4c:20:07:25:be:58:4d:e2:73:24:51:0d:10:c1:29:6d:
         24:f6:c7:bd:58:79:9b:34:b7:d6:d2:1a:f6:14:2e:e3:a4:b5:
         65:8c:54:e6:c4:43:11:c4:09:9f:79:e4:c7:65:23:39:4f:b8:
         1f:33:2f:b5:31:08:c1:d4:d5:e4:72:50:14:64:f5:95:f5:1f:
         44:61:e7:9e:1d:02:06:be:ba:4f:e7:e1:67:e2:4b:0f:eb:7b:
         95:ad:1d:d9:f5:aa:c2:cd:e4:f4:5a:b6:25:78:72:5a:bf:5d:
         f1:74:12:7e:5c:96:d5:01:b0:90:18:4d:3a:3d:06:69:bc:d6:
         37:8f:9e:c8:bd:d7:1a:5d:eb:71:bc:d0:0c:84:3f:db:3a:2b:
         e4:68:cf:7a:79:93:25:dc:98:ba:5b:b3:f0:19:22:cd:c7:02:
         7e:dc:5f:b2:0e:47:2a:6a:30:c2:02:35:41:71:b6:74:2a:ee:
         29:d0:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----