Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF955842A13211F189DD4808CF1D38B0.roa
File:                     EF955842A13211F189DD4808CF1D38B0.roa (raw, json)
Hash identifier:          66PzL0tfqSm1T4YwW1Mh2Sq8iGgoAxM0EXcar4sThss=
Subject key identifier:   4F:3D:7A:69:B8:66:D3:0E:AC:B9:70:DF:C2:40:F0:79:2B:0A:B7:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D121
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF955842A13211F189DD4808CF1D38B0.roa
Signing time:             Wed 26 Aug 2026 09:45:57 +0000
ROA not before:           Wed 26 Aug 2026 09:45:53 +0000
ROA not after:            Sat 25 Aug 2029 09:45:53 +0000
asID:                     17561
IP address blocks:        156.235.238.0/24 maxlen: 24
                          156.235.239.0/24 maxlen: 24
                          156.235.240.0/24 maxlen: 24
                          156.235.241.0/24 maxlen: 24
                          156.235.242.0/24 maxlen: 24
                          156.235.243.0/24 maxlen: 24
                          156.235.244.0/24 maxlen: 24
                          156.235.245.0/24 maxlen: 24
                          156.235.246.0/24 maxlen: 24
                          156.235.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119073 (0x1d121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 09:45:53 2026 GMT
            Not After : Aug 25 09:45:53 2029 GMT
        Subject: CN=6a8eb5d5-b8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:98:bb:73:4d:1e:4d:21:8d:af:d8:c7:67:
                    dc:bc:40:16:00:cc:31:b0:e1:f1:cb:fb:5a:73:41:
                    27:a1:dc:65:e9:f3:ca:d1:b9:6d:50:d8:de:c2:d5:
                    85:2f:c4:0c:b8:6c:e6:9a:1c:01:bd:ba:9e:09:ec:
                    b3:2f:b6:e9:a2:b9:8c:db:6f:17:e4:39:b6:3f:3a:
                    ff:93:be:53:0a:87:57:d3:e2:de:e1:86:a8:d1:61:
                    18:02:07:0f:9c:b7:c2:da:e7:93:a6:aa:6b:f8:80:
                    0d:fc:02:d4:9b:03:40:17:44:c8:15:95:df:19:cf:
                    55:f5:df:80:cc:7b:aa:af:37:ef:6d:18:06:e6:43:
                    0f:fd:80:b6:86:19:ce:69:07:a8:d3:e4:e4:ce:da:
                    3c:50:a2:94:b6:bd:ef:8f:33:be:ed:31:b9:8d:a7:
                    ed:66:5b:82:e1:78:0e:ea:a3:67:0d:bb:de:7d:18:
                    86:6f:da:57:15:ea:ed:0d:c5:f1:50:6f:c8:a4:53:
                    7f:1b:9c:1f:ee:56:cc:e5:14:42:55:cc:e4:76:11:
                    d8:d0:d0:10:54:bf:65:0d:86:3e:ea:b5:76:20:d0:
                    a7:d0:7b:ba:38:3e:c1:8c:82:47:fd:8a:ae:2a:5f:
                    4c:47:86:58:4a:29:67:04:00:9e:08:ba:90:3d:6d:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3D:7A:69:B8:66:D3:0E:AC:B9:70:DF:C2:40:F0:79:2B:0A:B7:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF955842A13211F189DD4808CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.238.0-156.235.247.255

    Signature Algorithm: sha256WithRSAEncryption
         82:5b:f5:b5:6b:e5:8a:c0:56:35:f4:ff:3a:61:ce:54:e3:05:
         da:db:03:14:52:05:09:7e:f9:91:df:b9:63:4c:85:5d:89:78:
         65:ab:15:5a:6f:4a:2a:6e:f8:1d:30:f5:66:c6:6c:ac:25:33:
         c5:b2:42:87:fc:3a:a2:a6:56:44:b3:3b:b2:8b:08:c5:ba:99:
         fd:7c:70:93:0d:19:5e:9f:24:3f:c0:7d:4d:31:dd:9f:a3:c2:
         b6:26:ed:8b:20:14:7b:d5:41:6e:64:18:84:8c:3b:ba:63:a4:
         fa:9b:36:95:a7:1f:ca:da:f1:f6:0e:e5:98:e8:e0:15:87:f9:
         b0:f5:04:de:8e:38:ae:1b:97:5e:f4:31:5e:ef:50:1e:a5:e4:
         41:ff:5b:f5:a1:f1:ec:73:2a:1c:e1:8b:e9:5d:55:43:9a:09:
         fb:32:1a:ea:33:6c:8c:fe:24:9a:0e:60:3f:a7:76:d7:0a:61:
         aa:14:91:d3:c7:d9:fc:2a:08:c9:f1:d9:ca:70:2b:4a:6a:c3:
         ee:8f:94:35:f5:73:09:50:2d:79:80:ff:5b:b3:99:f8:03:e4:
         8e:41:9d:a1:7e:8a:1d:78:ed:b7:26:b9:a9:24:ec:2a:31:4e:
         f4:a6:34:5c:f8:a1:80:03:1a:14:ae:42:b4:e8:4c:86:60:5e:
         38:8a:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----