Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87E7E67CB4FD11F19DFA27C7CE1D38B0.roa
File:                     87E7E67CB4FD11F19DFA27C7CE1D38B0.roa (raw, json)
Hash identifier:          hI/RkGZRO6evC6qT5k0o1EO9KD+xNnsUxwP3yOCyCEk=
Subject key identifier:   2F:CF:6A:38:22:2C:19:63:B2:E9:07:13:9F:65:7D:15:63:DB:11:B0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D730
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87E7E67CB4FD11F19DFA27C7CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 14:14:03 +0000
ROA not before:           Sun 20 Sep 2026 14:13:59 +0000
ROA not after:            Sat 24 Oct 2026 14:13:59 +0000
asID:                     402169
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120624 (0x1d730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 14:13:59 2026 GMT
            Not After : Oct 24 14:13:59 2026 GMT
        Subject: CN=6aafea2b-f2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:2e:9d:5b:6f:3f:83:1a:13:11:4e:9c:6a:
                    fb:00:c5:28:98:ea:f5:b0:13:25:dc:c3:1c:d8:38:
                    0b:9e:52:59:94:1b:88:16:c9:02:ca:87:e8:41:b9:
                    76:25:ef:8b:05:50:84:75:87:9c:8c:66:5e:16:d9:
                    c8:5a:72:02:03:69:55:eb:fe:a0:a0:8c:f7:04:6c:
                    03:e3:9a:6c:29:ed:f9:fa:09:b1:6b:cf:55:78:f7:
                    b3:2d:af:d8:7f:c9:5f:be:88:3d:a6:d8:14:b1:22:
                    17:10:c0:78:83:d6:6c:48:28:20:f9:6e:32:28:03:
                    31:a5:3d:a5:bd:5f:b8:b5:f9:c1:40:16:4c:53:2c:
                    8f:bf:35:f6:d5:0a:08:13:a3:c4:97:6d:65:19:78:
                    19:05:4a:43:fa:a0:d6:01:d1:6e:81:20:ca:ee:5a:
                    15:18:0a:96:30:40:47:11:bf:19:e9:d1:3b:1d:3a:
                    13:18:db:8d:d2:53:72:58:de:7a:e7:fb:4d:b8:c1:
                    04:91:f7:49:e0:2b:28:93:7c:fd:86:4b:d9:9b:d6:
                    ae:80:ba:36:1c:0e:69:0e:a5:5b:59:16:2c:3b:9b:
                    2c:5f:d9:83:b8:c0:f2:c2:09:5c:d5:e5:6e:61:8d:
                    9c:a8:87:7d:09:cb:0f:5f:07:3c:5e:37:da:01:df:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CF:6A:38:22:2C:19:63:B2:E9:07:13:9F:65:7D:15:63:DB:11:B0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87E7E67CB4FD11F19DFA27C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0/21
                  156.239.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:79:78:06:9c:2e:3b:ef:69:02:cc:e4:99:ba:46:e3:81:26:
         a2:62:c6:bd:cd:87:0e:10:7f:50:1f:b8:dc:13:33:6a:66:17:
         71:56:98:aa:c1:64:29:fb:b3:91:2d:d9:08:ad:41:55:5a:da:
         33:af:85:22:9e:54:e5:52:31:58:a8:c9:dd:dc:1a:15:e9:5b:
         f2:73:01:87:8d:b3:19:99:b4:1f:56:ce:16:d5:35:e7:5c:74:
         f3:80:fa:c8:c7:8a:06:97:61:34:fc:2a:d3:09:b8:87:c1:d8:
         c2:d9:6c:4a:d0:8a:52:88:d5:46:5a:f4:bb:48:92:fa:99:4c:
         87:25:16:65:e5:ed:91:02:df:d1:a0:68:a0:52:52:3f:20:3e:
         0a:a2:99:5a:c1:dd:5e:ef:bc:f4:4a:73:97:b6:c2:ea:b5:98:
         46:8e:10:46:81:6d:50:02:e3:d6:03:8a:b7:5b:60:62:f3:d5:
         c5:ca:c5:da:ab:0f:12:bd:4f:2e:9e:d0:03:f7:9a:ee:5a:26:
         37:59:c9:cc:2e:80:9d:ae:0e:5c:d3:ba:c1:f3:06:f6:44:2f:
         35:c3:b9:cd:29:4a:e3:fa:9e:ef:d7:48:60:a2:17:66:b2:2e:
         aa:91:48:86:3b:1a:27:89:01:ce:03:0f:dc:54:ed:c6:f6:ae:
         e8:6b:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----