Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC94324BEFB11F1BF11BE03CF1D38B0.roa
File:                     EEC94324BEFB11F1BF11BE03CF1D38B0.roa (raw, json)
Hash identifier:          EURtXFPgGk/aw0nB0d3uULyS1i8vvqhXGq+UpVTrwvQ=
Subject key identifier:   46:EE:19:61:C9:DC:56:10:0A:FB:83:A2:46:6B:F5:E4:19:8D:E4:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC94324BEFB11F1BF11BE03CF1D38B0.roa
Signing time:             Sat 03 Oct 2026 07:27:48 +0000
ROA not before:           Sat 03 Oct 2026 07:27:44 +0000
ROA not after:            Tue 10 Nov 2026 07:27:44 +0000
asID:                     138915
IP address blocks:        156.244.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121405 (0x1da3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 07:27:44 2026 GMT
            Not After : Nov 10 07:27:44 2026 GMT
        Subject: CN=6ac0ae74-81a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:b9:30:0f:e3:ea:f1:d1:43:f8:3b:36:b2:
                    9b:23:fb:d0:6f:d4:bf:38:0f:20:72:d9:71:e9:d5:
                    d4:0a:21:08:ea:9d:30:c5:34:9c:7c:3c:a5:fa:4d:
                    50:e2:05:53:60:e4:ac:e2:9e:51:3e:ca:47:a3:99:
                    68:bd:91:2c:d5:68:21:09:e6:f2:fd:28:90:ed:f9:
                    47:e8:63:d1:7b:fc:45:a3:f2:8e:fe:32:e5:00:ab:
                    9c:4c:5f:d8:ed:b8:34:96:37:cc:e1:48:2e:d7:17:
                    d7:f4:76:2a:d9:d7:ee:cd:da:9f:ca:1e:81:0a:16:
                    b9:95:28:ca:5a:bc:c5:56:d2:48:76:3c:a2:36:d7:
                    75:30:b1:42:3f:55:28:ae:01:53:26:59:12:76:a5:
                    66:a8:ca:a9:73:25:29:17:30:5e:fa:ab:72:2f:d0:
                    47:eb:af:b5:d9:6e:84:2b:a6:0d:85:31:3b:35:f8:
                    ae:fe:f7:36:fa:77:ac:84:08:af:c9:04:55:5b:75:
                    01:fd:2d:db:e5:8d:1c:72:5f:f9:07:54:41:10:1a:
                    d4:75:eb:ae:81:1e:d8:d8:98:ce:b9:c2:ca:29:d5:
                    e6:06:74:d3:59:49:a7:be:18:8f:32:e9:3e:2b:9c:
                    02:cd:16:98:31:dc:e3:7c:62:ad:dc:77:32:49:54:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EE:19:61:C9:DC:56:10:0A:FB:83:A2:46:6B:F5:E4:19:8D:E4:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC94324BEFB11F1BF11BE03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:7c:c6:d7:07:f0:c0:2b:10:f9:39:9f:b3:55:7a:b9:30:a9:
         39:a7:8f:8b:66:bb:a4:39:ff:c3:7e:c2:2a:1a:0d:0f:04:aa:
         4c:23:c6:a7:9a:c6:0b:b5:05:8b:07:17:d0:35:a7:3a:78:c4:
         3c:b9:08:78:9c:a3:d6:39:5c:c9:12:29:b0:54:ca:39:17:21:
         a9:3e:72:b0:ce:79:79:bb:ba:68:53:cf:99:06:f8:03:20:bc:
         a2:b0:d1:d0:a1:f4:e6:6f:a8:4d:f0:09:eb:3f:74:09:d3:75:
         1f:4b:94:85:2c:4a:06:a9:38:f8:69:2d:b0:3a:ff:55:2e:c6:
         1b:1a:ae:69:7b:c2:02:9b:45:c3:60:7a:0e:d7:45:f6:cc:1d:
         36:4b:30:a4:bb:0a:d4:03:47:08:d9:54:84:71:11:13:a5:07:
         b2:99:ef:e1:f6:d3:6a:5c:74:41:9a:a4:a3:80:6b:8a:b7:11:
         bc:62:71:bc:fd:3b:1d:76:2a:84:b3:2e:0c:4f:39:8c:f0:48:
         2e:b2:7a:4c:a2:1e:21:c4:10:3f:eb:bc:42:92:ca:12:41:77:
         23:e0:b7:98:41:63:24:22:66:18:c7:b6:48:58:ac:da:0f:c2:
         3d:77:b4:db:4f:f9:25:78:b8:e1:4a:7d:6f:52:01:72:ed:57:
         cb:52:0f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----