Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEA390A961C11F1BF74E110CF1D38B0.roa
File:                     FEEA390A961C11F1BF74E110CF1D38B0.roa (raw, json)
Hash identifier:          OESCjDi0+6s7ntBQZ0nZU69LCbPA+B4gXX5MLCNPn0k=
Subject key identifier:   BD:2F:90:C9:63:50:FB:A2:E2:49:7C:EB:CF:88:F4:DC:0A:1F:6F:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEA390A961C11F1BF74E110CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 07:11:11 +0000
ROA not before:           Wed 12 Aug 2026 07:11:07 +0000
ROA not after:            Fri 18 Aug 2028 07:11:07 +0000
asID:                     142132
IP address blocks:        156.230.11.0/24 maxlen: 24
                          156.230.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117673 (0x1cba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 07:11:07 2026 GMT
            Not After : Aug 18 07:11:07 2028 GMT
        Subject: CN=6a7c1c8f-3615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:e7:cd:3a:08:35:8d:68:d5:dd:85:a3:57:
                    79:fc:68:fb:0e:f8:b1:12:c7:80:1f:e7:aa:bb:2c:
                    ce:ae:e6:d6:0b:36:37:f3:4a:11:23:c3:f6:88:c2:
                    93:e0:e2:38:e8:67:89:2c:4f:13:71:d0:1a:fd:e8:
                    b0:2f:71:c0:c9:2e:7d:8d:44:55:1b:c6:24:36:01:
                    c8:27:0a:ea:d3:e2:c2:1d:c2:ff:07:f1:04:37:ee:
                    d9:ce:fa:45:33:c6:02:46:3a:6a:f3:cd:fb:55:f1:
                    81:22:2b:6d:d4:ab:7b:98:b1:a9:fc:91:04:f3:71:
                    d3:d1:3f:db:d1:1e:17:7c:1b:f6:8e:43:e3:92:99:
                    10:d9:47:5f:aa:d3:df:1c:d4:fa:80:49:a2:be:2f:
                    ec:aa:f0:10:8f:8a:d0:d3:47:a2:4f:8d:2d:7b:67:
                    dd:40:de:df:46:5e:98:11:e8:28:84:0c:7c:50:1f:
                    10:8c:fd:cb:32:8c:1f:5f:d6:03:a2:2b:5f:64:74:
                    f6:00:da:7e:3a:38:7a:85:14:aa:21:ba:d8:a3:e4:
                    71:89:8d:92:80:9f:da:0b:2a:9b:85:04:dd:80:36:
                    ea:48:02:44:84:34:33:5d:91:84:ff:cd:ff:89:f8:
                    11:72:ed:c5:3e:12:80:13:01:27:5c:f2:b1:6d:54:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2F:90:C9:63:50:FB:A2:E2:49:7C:EB:CF:88:F4:DC:0A:1F:6F:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEA390A961C11F1BF74E110CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.11.0-156.230.13.255

    Signature Algorithm: sha256WithRSAEncryption
         46:37:37:f9:99:70:a3:c6:c2:25:e0:fc:0e:7f:b2:eb:a8:06:
         ee:71:b4:8e:80:a9:5e:5f:a9:03:33:4e:50:d3:7c:29:f8:d5:
         5d:7d:3a:38:6d:1e:46:e6:3f:01:68:36:13:77:b0:ee:a6:d3:
         70:d8:fa:5d:55:06:83:73:4c:b5:23:c6:cc:3a:d5:cf:4a:55:
         bc:dd:ca:98:eb:8e:57:e2:bb:95:da:f2:79:45:df:89:5c:c8:
         b9:3f:4b:8a:0d:a5:56:5e:6a:b7:de:39:6a:69:e7:c6:26:c5:
         35:25:47:55:aa:c7:10:4e:a5:31:f4:90:b8:37:cd:87:da:a4:
         53:d0:59:c1:3e:b2:bb:4a:c9:9d:51:ed:b8:9e:08:f7:7a:ff:
         87:b7:f8:ee:1e:01:90:0f:a8:90:f6:9f:03:86:77:14:cc:71:
         18:4a:23:9e:16:a6:54:9c:35:0e:fb:36:33:de:14:c9:1b:e0:
         d5:79:f2:13:3f:83:a6:b2:50:d7:08:34:2a:93:ee:57:05:0a:
         0a:39:f2:ae:b7:c6:60:c0:0e:7a:a0:4c:0d:78:b3:ee:a3:f9:
         e0:c2:f9:35:2c:48:c0:fe:ae:17:c3:44:bb:4c:69:28:e6:4a:
         17:02:cf:e4:25:55:09:8b:f5:27:07:c1:3a:99:97:2e:8b:0d:
         7a:6b:25:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----