Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D9C5F72AB5811F1A346FEF5CE1D38B0.roa
File:                     1D9C5F72AB5811F1A346FEF5CE1D38B0.roa (raw, json)
Hash identifier:          fsNKKeAUw9gYKxJKnqUghhh33L6QK1O1fFUy4y44EyI=
Subject key identifier:   EA:1B:99:CF:E7:1A:10:F9:55:74:14:B9:CF:C0:CC:F3:CD:F5:F9:8E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D9C5F72AB5811F1A346FEF5CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 07:37:17 +0000
ROA not before:           Tue 08 Sep 2026 07:37:13 +0000
ROA not after:            Thu 15 Oct 2026 07:37:13 +0000
asID:                     135377
IP address blocks:        156.229.25.0/24 maxlen: 24
                          156.229.28.0/24 maxlen: 24
                          156.229.50.0/24 maxlen: 24
                          156.229.54.0/24 maxlen: 24
                          156.229.236.0/24 maxlen: 24
                          156.229.247.0/24 maxlen: 24
                          156.242.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119763 (0x1d3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 07:37:13 2026 GMT
            Not After : Oct 15 07:37:13 2026 GMT
        Subject: CN=6a9fbb2d-ce78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:7e:a6:78:93:3f:c9:40:9a:9f:f0:96:d9:41:
                    57:00:9b:7d:11:1e:3e:84:c4:8d:47:47:e9:e7:a5:
                    5c:49:ad:a3:6d:b1:1d:14:d1:53:3c:c6:8c:4f:d7:
                    fc:0e:dd:53:5c:33:dd:eb:ec:e2:0d:3c:5c:96:e6:
                    26:f3:0d:80:7f:83:fb:30:26:2f:14:b7:db:42:49:
                    22:37:f8:da:09:9d:33:a9:46:a8:21:71:70:fa:8c:
                    19:5f:11:24:fb:84:d8:31:c5:ea:6a:31:8b:3f:f3:
                    81:41:82:b8:bc:99:d3:c5:c8:73:91:e5:6b:2e:d2:
                    0c:08:19:44:31:ad:76:32:55:ca:3b:1b:71:31:ba:
                    80:8d:b2:fd:9e:81:73:a2:dd:97:52:d1:ab:de:d2:
                    b8:c7:d3:77:1c:b7:8f:0d:50:fc:05:e2:37:89:e8:
                    43:e1:e9:be:56:5d:5c:4d:ac:91:99:d7:97:2e:30:
                    24:f5:2b:a4:75:50:bb:1b:cb:ed:f3:ef:94:e9:19:
                    13:e5:2b:43:ec:4a:0b:c0:cb:77:2b:d0:ca:d1:6f:
                    11:5d:bf:0b:a0:01:c7:94:82:76:bf:d2:dd:fe:5f:
                    13:d2:b4:ab:7d:51:bd:63:19:e7:93:fc:b2:32:02:
                    a5:8c:26:1a:c0:6f:bb:64:d5:0c:26:15:44:ed:bb:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:99:CF:E7:1A:10:F9:55:74:14:B9:CF:C0:CC:F3:CD:F5:F9:8E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D9C5F72AB5811F1A346FEF5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.25.0/24
                  156.229.28.0/24
                  156.229.50.0/24
                  156.229.54.0/24
                  156.229.236.0/24
                  156.229.247.0/24
                  156.242.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d3:7c:37:a0:10:2b:e3:9d:54:57:77:ba:91:bd:e9:cc:14:
         a1:fc:f7:e9:51:64:ec:94:5b:5f:0b:e1:18:3f:88:24:ce:5c:
         a1:70:07:7f:48:ad:92:b7:b4:c4:ba:b8:b4:e8:bc:56:d4:df:
         8b:6c:20:f9:41:00:4c:d7:12:aa:ba:d4:23:22:3f:f0:27:4f:
         aa:31:2a:9e:87:90:71:7c:05:ca:bd:c5:0d:1f:28:6e:10:d6:
         31:c7:3c:2a:ea:4d:9e:f8:94:7c:51:ad:58:8e:29:f7:17:17:
         a5:71:95:6f:49:2c:37:b7:96:f4:11:22:94:72:81:2a:90:70:
         5e:80:9f:1a:20:56:d8:74:2f:64:ec:89:e3:6a:fb:1a:2d:c5:
         d6:74:0f:7e:b4:0d:76:82:5d:b8:3f:d7:99:1e:35:71:81:b8:
         fd:63:30:a1:48:2d:e3:fd:2a:66:7f:dd:8e:19:49:68:5a:f6:
         61:bb:29:1c:53:ac:97:5b:10:97:02:b4:f6:34:bf:36:88:a9:
         70:e5:d0:49:13:58:e1:c6:2f:6e:44:36:04:25:73:bd:4c:cb:
         8d:99:88:4e:05:ce:b8:3b:37:39:89:92:96:09:ee:5e:23:f3:
         a4:07:a5:65:4f:9d:0a:62:51:96:a5:3d:c0:55:db:0b:0d:f0:
         4f:1e:78:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----