Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F181AA7CC53411F187314CB5CE1D38B0.roa
File:                     F181AA7CC53411F187314CB5CE1D38B0.roa (raw, json)
Hash identifier:          C8RPWJ4kuKKnIJSF33RC0sTkSU5q0L3J8iKdl2lxyOc=
Subject key identifier:   59:BE:B0:84:DF:C4:A6:22:A3:6E:DB:32:BB:02:7A:5F:CD:09:A5:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F181AA7CC53411F187314CB5CE1D38B0.roa
Signing time:             Sun 11 Oct 2026 05:31:01 +0000
ROA not before:           Sun 11 Oct 2026 05:30:56 +0000
ROA not after:            Wed 11 Nov 2026 05:30:56 +0000
asID:                     401362
IP address blocks:        156.225.33.0/24 maxlen: 24
                          156.225.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Oct 2026 13:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122011 (0x1dc9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 05:30:56 2026 GMT
            Not After : Nov 11 05:30:56 2026 GMT
        Subject: CN=6acb1f15-3b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8b:12:01:0f:f9:f2:c2:c0:41:06:30:e8:b8:
                    4e:7e:a9:17:9b:89:8f:50:b6:40:68:3a:c0:9e:24:
                    06:80:d0:30:38:8b:4d:dc:6c:aa:5c:04:91:e7:38:
                    8a:06:1b:10:e0:02:62:ca:b7:46:90:4a:48:4c:01:
                    03:c2:15:26:14:a4:12:2f:13:37:de:3c:f2:e1:d3:
                    7d:9e:95:ac:fa:ba:75:b8:53:46:05:42:51:b6:48:
                    10:51:47:f2:93:9d:c9:57:fb:61:b8:bd:d5:c6:5b:
                    8b:ab:3f:9a:2a:41:4d:93:27:a9:c1:21:ee:04:f7:
                    fd:6f:ed:f7:34:94:6d:49:70:d8:13:79:10:a7:ca:
                    c8:d1:7b:e0:92:3e:a0:bc:86:58:27:92:d9:67:95:
                    2d:75:b5:57:c2:f7:18:c3:83:bf:de:de:0a:16:57:
                    e6:71:06:4a:f8:bd:2c:ad:3d:fd:fc:89:a0:b8:2b:
                    14:1f:07:72:41:6d:d9:1d:46:d3:34:3b:a1:24:8e:
                    b9:ac:c6:4a:4d:7d:1a:de:b9:90:cc:4f:73:5b:d0:
                    ac:a2:2f:4c:85:4f:2c:cd:ab:c3:54:53:bb:7f:37:
                    f7:6b:a1:7b:1e:5e:6a:84:3c:54:23:c4:5a:b9:be:
                    a4:c3:0e:9b:fa:bc:e6:1a:6f:3a:89:04:c2:6b:5f:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:B0:84:DF:C4:A6:22:A3:6E:DB:32:BB:02:7A:5F:CD:09:A5:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F181AA7CC53411F187314CB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.33.0/24
                  156.225.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:f9:65:a7:4f:b4:2d:f4:4b:0c:90:fc:54:dc:3e:bd:f9:
         c5:b0:7e:00:4e:ee:cf:a0:d5:28:d7:5b:62:bb:ae:8c:d2:3d:
         f7:aa:93:0c:54:67:e5:9d:a1:4a:92:e7:5b:2d:f8:c5:51:65:
         ef:9e:5c:5d:a8:e4:59:7c:c4:62:e4:83:0d:26:a0:17:25:8c:
         68:96:be:c6:ad:2d:e4:62:cb:e5:3c:d6:c1:dc:82:a2:71:5b:
         68:2e:40:ca:3f:e4:84:ee:3b:2a:c2:56:1b:a1:21:21:d4:b9:
         d1:17:f4:62:01:02:3d:02:fc:9e:5a:eb:57:b5:1f:92:d2:dc:
         8a:aa:0b:e9:ea:e1:aa:33:e5:f4:95:c6:c9:aa:bb:89:23:58:
         1c:45:8e:96:32:c8:46:3e:57:2a:61:61:56:89:63:60:92:83:
         4e:ec:cd:bf:fb:ce:4d:9e:f5:66:dc:5a:ca:84:a7:0f:63:ac:
         ef:33:96:3d:2d:29:8a:6e:fc:93:5f:d7:1d:85:70:9d:85:ad:
         58:51:b1:3d:ef:61:65:fd:6f:e4:5f:16:c6:1f:a1:0b:70:27:
         72:4c:b6:27:af:4d:2d:0d:4c:59:2f:c2:f0:04:13:36:55:69:
         fe:fa:27:08:69:89:ea:91:74:d4:52:9c:1a:e3:95:c1:32:57:
         f2:f1:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----