Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/230CC432A69F11F197AB41E0CE1D38B0.roa
File:                     230CC432A69F11F197AB41E0CE1D38B0.roa (raw, json)
Hash identifier:          FCYB6G8PH3we5ZgjqcIGCmDbqDqhP3QkyegrxRvqFLg=
Subject key identifier:   7B:2F:52:7A:CE:7B:23:A9:19:0D:91:C1:48:13:87:4F:A8:07:CF:3A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D24E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/230CC432A69F11F197AB41E0CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 07:23:05 +0000
ROA not before:           Wed 02 Sep 2026 07:23:01 +0000
ROA not after:            Sat 01 Sep 2029 07:23:01 +0000
asID:                     17561
IP address blocks:        156.251.15.0/24 maxlen: 24
                          156.251.16.0/24 maxlen: 24
                          156.251.17.0/24 maxlen: 24
                          156.251.18.0/24 maxlen: 24
                          156.251.19.0/24 maxlen: 24
                          156.251.20.0/24 maxlen: 24
                          156.251.21.0/24 maxlen: 24
                          156.251.22.0/24 maxlen: 24
                          156.251.23.0/24 maxlen: 24
                          156.251.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119374 (0x1d24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 07:23:01 2026 GMT
            Not After : Sep  1 07:23:01 2029 GMT
        Subject: CN=6a97ced8-0e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:a4:de:b2:55:e9:ee:d7:41:0b:9f:8b:97:
                    a3:3e:71:a2:74:6b:6f:17:85:ea:02:94:7d:d9:2e:
                    b8:43:03:c6:7f:22:5b:aa:b6:04:04:a1:0b:76:52:
                    39:a0:50:4f:50:23:d3:8b:b7:71:e8:e5:37:4a:a5:
                    1f:26:5c:c4:7a:34:83:27:7f:be:61:17:bf:5c:d3:
                    1e:44:9e:6f:0b:26:f3:8d:1a:8a:b4:83:59:a9:3f:
                    8e:b2:7e:70:bb:4d:6b:87:33:57:2d:79:01:9b:fb:
                    cf:33:8b:5a:ba:ed:b4:4e:da:8d:68:c5:26:aa:39:
                    08:1d:13:bc:37:ca:dd:59:57:1c:ae:94:71:c9:fe:
                    ad:09:e6:6b:fc:63:03:1e:26:ca:b7:86:42:be:cb:
                    45:41:2c:f1:3e:02:e8:6d:33:05:07:a8:5a:d8:bc:
                    e1:c9:35:0e:0a:d1:68:4d:d1:c2:e1:5b:2c:be:af:
                    0a:d4:05:78:71:59:74:7e:64:0d:52:aa:f2:59:e1:
                    c2:47:c7:8e:d9:2e:38:bc:99:3c:f4:03:5c:94:b0:
                    ce:16:d6:69:a2:ec:5e:a5:69:85:13:38:68:c8:c9:
                    0e:5e:97:6c:08:0b:39:1a:ed:95:a3:27:8a:4a:f6:
                    36:59:6a:e2:9a:0d:06:39:48:89:9c:2b:bd:a4:53:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2F:52:7A:CE:7B:23:A9:19:0D:91:C1:48:13:87:4F:A8:07:CF:3A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/230CC432A69F11F197AB41E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.15.0-156.251.24.255

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:68:66:2a:9b:e5:fa:ee:9d:05:60:5e:54:38:87:8c:c3:
         86:86:3e:98:8b:73:41:27:f1:73:3b:9b:fd:b9:49:1f:08:93:
         e1:be:64:2b:48:3d:39:cc:c8:36:5d:70:14:ab:6b:70:cc:94:
         3b:55:c2:f5:ed:ae:ba:98:4e:0c:01:91:a1:c6:bf:45:80:74:
         23:02:9b:7e:d9:fe:4f:54:32:92:af:11:34:bd:33:e4:1f:ea:
         a9:b2:9b:56:70:98:f8:b9:56:5b:f3:19:11:f9:a1:e5:cb:bb:
         15:c4:ce:4e:ca:13:ac:fa:f1:32:3f:b9:82:da:1e:55:f3:d5:
         a8:df:0b:d0:36:3c:f4:3a:5f:82:97:7b:9e:65:cf:ed:a7:99:
         11:20:1a:70:ee:b8:43:41:bf:09:dc:c8:a7:6b:14:33:90:a7:
         06:41:4a:c7:51:55:96:58:1f:e7:7f:12:98:0e:1e:cb:bf:b2:
         74:dd:a1:db:7d:15:d5:31:56:c5:3d:93:10:8b:f6:f6:8f:ca:
         91:ea:1d:cd:be:04:b8:50:a6:19:dd:35:0f:16:e5:49:0d:28:
         43:fe:f2:d0:8a:1b:8d:2c:0e:9f:9b:c1:38:88:78:75:c8:9f:
         40:62:0f:24:90:78:05:ad:d8:6e:fd:a9:bd:c2:65:30:89:eb:
         d2:88:ea:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----