Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEB18AACC96611F1A5F8EB0BCF1D38B0.roa
File:                     EEB18AACC96611F1A5F8EB0BCF1D38B0.roa (raw, json)
Hash identifier:          BRElAMSDKPe2CruC3ZmrBFpt15AI6upLV57llOEwv0Q=
Subject key identifier:   B0:B9:D8:0E:79:93:9E:9B:2E:C7:45:B1:D7:A0:1B:A3:97:B4:8E:3E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEB18AACC96611F1A5F8EB0BCF1D38B0.roa
Signing time:             Fri 16 Oct 2026 13:38:56 +0000
ROA not before:           Fri 16 Oct 2026 13:38:51 +0000
ROA not after:            Sun 22 Nov 2026 13:38:51 +0000
asID:                     213690
IP address blocks:        156.249.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122370 (0x1de02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 13:38:51 2026 GMT
            Not After : Nov 22 13:38:51 2026 GMT
        Subject: CN=6ad228f0-ac84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:0c:55:4b:24:48:f7:85:92:8c:a4:45:f8:
                    7e:39:9b:03:1b:ef:7b:40:a3:46:e4:24:35:db:eb:
                    61:8e:62:e4:59:4f:3a:c1:da:c2:a5:cd:91:82:f6:
                    f0:69:a7:7a:9f:b7:68:b1:d4:b0:c6:51:60:1a:79:
                    9e:e6:12:87:90:7a:9a:02:65:7e:55:e0:ca:ae:d5:
                    66:f9:7c:7f:3d:d0:8d:72:f0:fa:ca:3a:28:fb:8a:
                    66:4d:f0:07:97:ed:0e:ba:25:d1:24:83:1d:a5:c6:
                    03:8d:69:5c:f4:dc:ba:41:d5:1c:af:c9:34:da:07:
                    95:88:b7:4c:4f:55:21:69:e5:a0:52:ab:f7:36:b5:
                    75:f3:14:55:17:83:df:5b:9c:c4:fb:0d:30:88:6c:
                    d6:2e:5a:8a:7d:74:1f:22:4b:66:7a:04:e3:66:22:
                    3c:c8:b1:58:cd:8c:dd:16:97:b5:fa:ca:24:e5:54:
                    00:09:88:52:a0:c8:f0:da:ff:8c:fa:03:31:7c:20:
                    61:d2:04:33:02:04:14:fa:74:3e:76:52:83:03:8d:
                    c8:c7:72:db:ad:9c:61:6e:3e:f5:78:50:e7:c0:86:
                    50:fe:dc:6c:01:48:46:d5:04:37:75:c6:5c:0c:12:
                    f0:6d:41:30:4f:75:9c:04:df:38:2d:23:ff:13:f0:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B9:D8:0E:79:93:9E:9B:2E:C7:45:B1:D7:A0:1B:A3:97:B4:8E:3E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEB18AACC96611F1A5F8EB0BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:70:95:6c:b2:fe:2f:e4:18:5f:c6:a3:00:69:d2:25:a7:64:
         77:89:ed:bb:ea:fe:8b:76:5b:6f:bf:f3:bf:e3:ad:b5:85:cc:
         1b:ce:3f:54:5f:89:4c:01:01:6c:ad:b1:e2:44:52:cf:69:d7:
         1e:5b:9a:5a:3f:cf:75:b7:7b:bc:06:53:20:60:ed:17:38:33:
         de:bb:66:f6:00:f6:64:a5:95:10:fc:dc:d8:80:75:d5:23:af:
         80:32:4a:5a:08:9e:db:8a:14:f1:48:2b:cb:2a:40:1a:c8:d4:
         5e:46:11:9a:e0:5a:cf:d5:ab:e7:d2:3d:0f:eb:c4:5d:6d:d5:
         82:59:5f:cb:51:f0:df:2b:27:97:ab:6a:51:16:9b:43:2e:3c:
         3a:4c:bc:ad:09:00:12:24:94:09:85:01:2a:91:7a:23:9a:85:
         44:b3:5d:d2:3c:94:38:89:a9:6e:fe:a3:69:4b:f6:ae:b3:6d:
         e6:8e:de:f2:6b:1a:cb:20:eb:db:e7:c5:fc:d5:bf:23:f8:1c:
         e6:a3:8e:65:ce:87:01:cd:f9:82:96:fd:04:32:5e:27:c3:bb:
         ef:07:9d:f4:30:10:c8:1c:04:52:e1:cc:8a:74:07:f2:9e:8d:
         25:21:4a:4a:e3:db:ee:f5:45:a9:28:ca:ac:4c:5a:73:7e:0a:
         11:8f:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----