Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D533E09BB111F1B4605DEECE1D38B0.roa
File:                     F8D533E09BB111F1B4605DEECE1D38B0.roa (raw, json)
Hash identifier:          v9SOFzVjqXvBU0U0XuqzZVy0hTVBL2JbxqdFPFe8ciQ=
Subject key identifier:   1C:33:9A:84:65:E7:32:6F:F4:B9:F6:FF:65:33:80:A7:87:D9:50:5A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D533E09BB111F1B4605DEECE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:40:11 +0000
ROA not before:           Wed 19 Aug 2026 09:40:07 +0000
ROA not after:            Thu 19 Nov 2026 09:40:07 +0000
asID:                     55020
IP address blocks:        156.224.16.0/23 maxlen: 24
                          156.224.18.0/23 maxlen: 24
                          156.224.20.0/22 maxlen: 24
                          156.224.24.0/22 maxlen: 24
                          156.224.28.0/23 maxlen: 24
                          156.224.30.0/23 maxlen: 24
                          156.224.63.0/24 maxlen: 24
                          156.235.96.0/21 maxlen: 24
                          156.235.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118369 (0x1ce61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 09:40:07 2026 GMT
            Not After : Nov 19 09:40:07 2026 GMT
        Subject: CN=6a8579fb-4845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3a:d3:d1:1a:27:d0:6a:72:e1:22:42:ce:75:
                    59:7d:6e:09:67:65:77:2e:d0:2c:39:97:7c:7d:e0:
                    92:25:2c:e7:b6:e6:fe:83:ed:14:24:7b:0a:5e:ef:
                    90:e8:ae:27:60:e1:ad:a6:11:d9:0b:a4:ed:83:15:
                    b1:75:17:37:e9:a6:b0:f5:92:c8:ef:b1:66:fe:8f:
                    6f:ed:79:3d:cc:32:7e:99:9e:b1:f7:45:5e:0c:99:
                    ce:65:4d:94:0b:29:1f:91:79:dd:0a:d6:1b:51:6c:
                    99:d6:27:43:c8:7d:57:6d:54:50:a7:9c:14:ee:2a:
                    e7:4b:22:01:4b:1f:b6:2d:0a:88:6a:6b:48:5b:87:
                    da:fa:9e:ad:34:d6:22:95:45:9d:a2:ad:7f:2c:ef:
                    f2:91:bb:86:d3:66:57:43:65:3d:a0:81:17:9f:3e:
                    ab:57:40:94:f8:ca:63:b3:6b:a2:1c:6e:7b:96:ba:
                    0a:2e:dd:88:74:8d:aa:8d:ff:6c:3e:42:e5:9e:47:
                    d1:82:be:ff:c2:5f:26:81:92:4d:90:f1:1c:55:41:
                    66:87:3c:3e:94:99:06:7c:a9:3f:d9:42:d9:ce:dc:
                    e4:73:35:54:51:5e:48:af:88:45:8b:77:d8:d8:cf:
                    28:97:6c:7f:ba:ec:a3:9b:be:6f:16:c7:4b:85:f2:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:33:9A:84:65:E7:32:6F:F4:B9:F6:FF:65:33:80:A7:87:D9:50:5A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D533E09BB111F1B4605DEECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.16.0/20
                  156.224.63.0/24
                  156.235.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:7b:c7:69:aa:8b:c9:ef:04:c6:46:66:b7:e3:dd:94:9a:b4:
         e4:df:18:ab:47:c0:3f:22:0a:da:73:77:d9:ee:fb:ba:18:94:
         ed:64:f7:92:96:18:43:e5:08:b7:03:34:3d:a7:ce:08:06:8a:
         23:46:c6:e9:7c:fd:a5:a1:de:64:aa:ac:09:15:1c:22:31:16:
         04:29:9f:f9:b1:6f:72:f8:46:e6:91:55:8f:f7:e2:da:24:88:
         15:f3:40:e2:b7:20:53:3f:a7:49:04:8b:b7:8f:47:2a:2f:c9:
         6b:0e:ff:fb:4f:95:e0:96:42:2d:39:06:ba:bb:2c:71:ab:6c:
         1f:e0:d0:1d:a7:5c:90:a8:82:e4:1a:bb:d3:24:ce:55:89:bc:
         ae:ac:db:15:4c:fe:36:b6:f7:63:f2:38:f3:08:b8:e5:27:56:
         08:08:74:07:bb:36:fa:fc:59:f6:e2:71:bc:df:25:85:ef:cf:
         10:18:be:64:e4:a5:af:43:93:d7:1d:4a:b0:47:82:97:b7:7b:
         ee:d0:37:a7:2b:05:23:94:f9:9e:cb:27:22:9d:08:73:a6:84:
         73:60:12:c5:67:10:c9:dd:5f:a3:11:7e:e6:16:84:9d:99:fb:
         f3:f0:c3:f4:8b:36:6d:83:ca:c6:8e:7c:2f:54:5e:25:4d:97:
         e6:a8:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----