Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA2A1809D5C11F1BE22C30ACF1D38B0.roa
File:                     FDA2A1809D5C11F1BE22C30ACF1D38B0.roa (raw, json)
Hash identifier:          OIZFcv8orfHWdPFWGUFNUcgnyVRFKttPxYviSn1uSiw=
Subject key identifier:   6A:F9:3D:E6:BE:85:73:F8:3B:37:38:64:8F:CD:09:51:D6:57:05:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA2A1809D5C11F1BE22C30ACF1D38B0.roa
Signing time:             Fri 21 Aug 2026 12:36:55 +0000
ROA not before:           Fri 21 Aug 2026 12:36:51 +0000
ROA not after:            Tue 29 Sep 2026 12:36:51 +0000
asID:                     44559
IP address blocks:        156.246.218.0/24 maxlen: 24
                          156.246.219.0/24 maxlen: 24
                          156.246.220.0/24 maxlen: 24
                          156.246.221.0/24 maxlen: 24
                          156.246.222.0/24 maxlen: 24
                          156.246.223.0/24 maxlen: 24
                          156.246.224.0/24 maxlen: 24
                          156.246.225.0/24 maxlen: 24
                          156.246.226.0/24 maxlen: 24
                          156.246.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118748 (0x1cfdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 12:36:51 2026 GMT
            Not After : Sep 29 12:36:51 2026 GMT
        Subject: CN=6a884666-b621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:25:de:13:00:37:00:ca:03:66:39:f4:94:
                    19:41:1d:42:77:9c:dd:54:2c:76:bb:7d:b1:10:39:
                    4e:0c:b6:5b:79:f5:36:1e:1e:ec:18:cc:e4:6c:73:
                    62:4f:00:2e:d4:5d:dd:38:fb:09:1a:f6:f0:76:5f:
                    73:c8:dc:7f:0e:8e:8c:12:90:22:31:a4:c6:61:6f:
                    5f:bc:8e:84:5b:d9:de:e9:55:6c:1e:85:60:44:c2:
                    57:f2:2e:50:d1:59:8c:82:6a:1c:2c:c2:27:e8:fb:
                    97:d4:cf:de:01:e8:75:89:a8:ed:03:a6:05:b4:09:
                    cc:40:fd:cc:f9:7c:70:e0:a1:f0:de:db:bc:d5:a0:
                    72:cd:65:10:0f:76:5b:5d:a6:9a:e2:d4:26:de:0f:
                    9e:fe:e7:67:24:db:2e:9f:cd:29:b1:4f:3e:2c:f5:
                    c9:7d:7a:df:78:5e:32:06:80:0d:74:dc:aa:67:c8:
                    f8:20:f2:7b:c7:92:3e:54:f3:f9:86:05:a1:ca:a6:
                    c2:04:56:ed:01:cb:a2:a4:c7:7b:c6:66:5e:6c:0d:
                    e8:26:ce:1b:d6:0e:f1:2b:8c:58:4f:0a:d4:9f:22:
                    68:31:5e:cf:bb:54:d9:2c:7a:b8:df:29:ef:69:94:
                    7d:89:9f:a5:db:64:67:0c:6f:bd:6d:3b:8e:a8:39:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:3D:E6:BE:85:73:F8:3B:37:38:64:8F:CD:09:51:D6:57:05:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDA2A1809D5C11F1BE22C30ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.218.0-156.246.227.255

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:54:74:bc:d0:d4:3d:92:23:8f:07:ca:4a:10:30:f6:76:
         50:31:d6:aa:49:14:90:1b:de:11:bd:6d:d7:d7:db:43:e8:9f:
         71:b7:41:4a:21:17:d9:85:6b:3b:59:72:f2:a9:b7:45:1c:9f:
         0f:7e:cd:7b:f3:c6:fc:68:a9:90:7a:97:9f:8c:a4:83:cf:24:
         cd:82:d6:97:db:25:2e:0d:7b:a5:3f:ca:eb:a4:ce:ec:84:2d:
         1b:89:c1:5b:03:18:4f:46:29:9c:61:97:b6:46:f5:b7:43:28:
         0a:2c:c5:ec:96:a8:a6:36:60:7d:d0:97:4e:5f:4c:da:bf:28:
         de:5c:61:1a:39:5e:5b:5b:a5:11:e2:31:27:1d:51:4c:47:8a:
         34:56:c5:ab:82:9a:1d:34:68:d2:a1:18:ce:7b:e8:96:22:f6:
         bd:bc:bb:c8:1b:a5:b9:c8:65:b8:9b:bf:90:22:d0:26:d4:a4:
         85:ca:50:33:a6:86:07:d1:1b:35:96:57:67:a4:b3:cd:5d:fc:
         e4:10:2f:d2:2a:34:fa:fd:e6:e6:dc:cb:01:c2:ef:cd:d3:cd:
         e9:0a:39:31:6c:e9:87:7e:7c:57:a1:a7:4d:05:6d:b5:a9:d5:
         76:b1:8b:94:7b:56:12:e2:de:60:01:1f:10:8d:fb:0f:e1:4b:
         a5:ae:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----