Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5FBC0DEB58711F1935F6CD6CE1D38B0.roa
File:                     C5FBC0DEB58711F1935F6CD6CE1D38B0.roa (raw, json)
Hash identifier:          yyWtMQlSB0wMv45o4Vbdpl7ycZECVksg4rRU0Sq5Q/8=
Subject key identifier:   AB:FB:A2:5F:2A:5A:F7:D0:37:75:B6:DB:BA:F0:9E:82:31:99:7B:88
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D74D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5FBC0DEB58711F1935F6CD6CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 06:43:37 +0000
ROA not before:           Mon 21 Sep 2026 06:43:33 +0000
ROA not after:            Thu 20 Sep 2029 06:43:33 +0000
asID:                     17561
IP address blocks:        156.229.172.0/24 maxlen: 24
                          156.229.173.0/24 maxlen: 24
                          156.233.64.0/24 maxlen: 24
                          156.233.65.0/24 maxlen: 24
                          156.233.98.0/24 maxlen: 24
                          156.233.99.0/24 maxlen: 24
                          156.233.118.0/24 maxlen: 24
                          156.233.119.0/24 maxlen: 24
                          156.233.120.0/24 maxlen: 24
                          156.233.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120653 (0x1d74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 06:43:33 2026 GMT
            Not After : Sep 20 06:43:33 2029 GMT
        Subject: CN=6ab0d219-2d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:be:97:38:5b:f8:f6:1e:2a:08:69:91:0e:
                    1c:af:8e:ed:b9:de:6a:fc:4f:05:61:a6:34:93:2a:
                    66:ff:b4:fd:db:fc:f2:70:7f:17:72:0c:50:b4:0d:
                    a1:04:04:1c:42:3e:bc:f7:2f:d7:73:92:eb:f1:92:
                    e3:9b:9d:df:e4:84:e3:9f:85:e2:e3:4a:38:1a:3a:
                    bd:21:19:89:1a:7a:17:25:a2:c2:86:d3:f5:3e:c0:
                    d8:83:4b:7c:7e:00:7e:11:55:bd:14:a2:93:83:0d:
                    a0:74:75:e0:1d:63:c9:4a:ae:53:09:11:18:e8:e0:
                    56:9d:5e:62:23:f6:f3:81:74:1f:9d:3e:e6:59:cf:
                    c6:9b:4c:ec:ff:01:30:3a:c1:37:56:cd:39:c6:d8:
                    95:2b:6e:e2:19:56:26:b1:93:f9:ba:83:04:2f:ba:
                    cc:ab:05:bd:f7:90:b9:8b:75:d8:11:08:4a:13:04:
                    47:e2:a2:21:a6:4f:d6:34:04:d5:64:e3:33:d8:94:
                    b7:49:97:bf:06:a5:45:5e:24:b2:83:97:c7:61:b6:
                    1d:8c:60:24:60:b4:a0:e8:54:a2:81:97:ac:d5:51:
                    1f:96:41:5d:2f:cd:b1:5d:d8:2f:d5:5d:74:c1:f3:
                    7c:d2:d5:20:16:90:d0:20:29:bf:60:d2:a8:40:d3:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FB:A2:5F:2A:5A:F7:D0:37:75:B6:DB:BA:F0:9E:82:31:99:7B:88
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5FBC0DEB58711F1935F6CD6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.172.0/23
                  156.233.64.0/23
                  156.233.98.0/23
                  156.233.118.0-156.233.121.255

    Signature Algorithm: sha256WithRSAEncryption
         38:e5:a5:26:35:9a:af:2a:27:cd:c8:0d:62:aa:60:6d:43:81:
         b9:ff:f5:a7:9b:ed:7e:b9:50:6a:18:ee:51:d6:ff:b1:00:aa:
         68:9c:70:b4:f8:c4:f8:8b:ee:36:4a:2c:0a:c6:04:22:fc:f0:
         ae:f1:a4:cf:da:d1:8f:9c:66:9c:a9:b1:27:11:28:13:16:6a:
         b6:d4:76:d3:b5:7b:98:12:07:b5:22:35:7e:8b:36:57:f2:c3:
         8c:18:2a:d5:a2:26:1f:20:c9:ea:b4:f0:8b:19:9f:79:d9:9a:
         e4:80:fc:fa:79:eb:4e:bf:8b:99:0b:e0:b6:66:2b:8f:10:85:
         50:4f:a0:8d:b6:ee:d8:59:80:77:c2:09:a0:da:68:c9:19:5c:
         1b:cb:f1:1e:0c:ac:c6:f8:cd:e0:8a:e0:8d:dc:1d:9a:91:aa:
         54:7d:6a:b8:46:2c:10:34:64:a5:19:65:25:f4:d0:4b:f3:d8:
         74:ee:33:cb:9f:31:b5:f6:55:95:05:36:73:33:38:0a:b8:a4:
         5e:65:f7:36:64:fc:10:df:d9:cf:04:1f:13:05:f1:b0:f2:4e:
         17:c2:c8:15:9e:4a:c4:77:04:1b:40:95:82:a1:7d:02:30:9d:
         d7:40:87:18:3c:c9:bc:aa:2a:f5:e4:08:3b:1a:f6:bb:7d:4d:
         0d:65:06:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----