Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7AE82BAADD211F1A9AC8CF9CE1D38B0.roa
File:                     D7AE82BAADD211F1A9AC8CF9CE1D38B0.roa (raw, json)
Hash identifier:          xqQetFnKe4Ajw45fTRF6vKVQPMXbsC5QXwpWyIDXcmg=
Subject key identifier:   26:F3:22:00:09:B3:29:2C:2A:D6:49:FA:48:62:F2:93:DA:F6:93:9C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D563
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7AE82BAADD211F1A9AC8CF9CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 11:20:50 +0000
ROA not before:           Fri 11 Sep 2026 11:20:46 +0000
ROA not after:            Sun 18 Oct 2026 11:20:46 +0000
asID:                     22773
IP address blocks:        156.229.63.0/24 maxlen: 24
                          156.233.63.0/24 maxlen: 24
                          156.233.126.0/24 maxlen: 24
                          156.238.188.0/24 maxlen: 24
                          156.238.190.0/23 maxlen: 24
                          156.239.57.0/24 maxlen: 24
                          156.239.58.0/23 maxlen: 24
                          156.239.61.0/24 maxlen: 24
                          156.239.62.0/23 maxlen: 24
                          156.239.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120163 (0x1d563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 11:20:46 2026 GMT
            Not After : Oct 18 11:20:46 2026 GMT
        Subject: CN=6aa3e412-0e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:39:6c:eb:b0:51:79:77:45:6b:93:ba:d1:
                    59:58:74:7f:f2:4c:26:73:e1:a5:c1:4a:34:8b:bc:
                    fa:d3:22:05:b1:ac:aa:a3:96:35:9b:cf:0a:d5:f3:
                    0c:51:39:41:b2:58:73:3e:9e:67:c5:09:b7:d5:70:
                    4e:ac:95:53:3f:ce:af:68:74:65:6d:14:59:e8:4d:
                    21:5e:95:cc:97:f5:14:5b:44:16:33:75:54:ce:76:
                    ac:32:79:e1:aa:33:24:7c:2b:76:00:d8:65:f7:14:
                    24:96:2d:cd:e6:d3:85:f3:29:9f:bc:8b:52:67:ca:
                    5c:aa:97:b9:b2:21:cd:66:a0:53:33:e4:73:02:fd:
                    58:87:4c:90:7d:4c:5c:9a:ee:37:bf:a7:91:b1:81:
                    b8:b4:16:a8:11:8d:08:82:73:f0:3d:37:98:d8:50:
                    1e:de:fb:4c:4c:8e:fa:3e:5f:74:3f:07:54:51:70:
                    6c:77:07:08:91:f0:b1:3f:11:86:f7:35:d2:03:d1:
                    db:99:e4:41:92:3f:c1:3b:1e:05:23:2b:47:c3:95:
                    a0:0d:c6:a9:51:f8:6d:fb:f1:a7:6e:c2:05:3b:27:
                    e0:6b:d4:c2:8f:25:f8:10:2c:b0:16:e3:f2:82:b1:
                    d4:b6:ae:b3:9b:5c:05:41:b3:c5:62:c5:44:02:7d:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F3:22:00:09:B3:29:2C:2A:D6:49:FA:48:62:F2:93:DA:F6:93:9C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7AE82BAADD211F1A9AC8CF9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.63.0/24
                  156.233.63.0/24
                  156.233.126.0/24
                  156.238.188.0/24
                  156.238.190.0/23
                  156.239.57.0-156.239.59.255
                  156.239.61.0-156.239.63.255
                  156.239.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:c0:2a:d0:91:79:1b:e4:03:58:f1:2b:43:b6:d3:5c:0a:4b:
         31:6b:42:ad:2c:92:17:4b:93:83:53:48:74:3e:f0:0e:e1:c2:
         b0:ab:ca:d8:0b:1f:e9:78:bd:e3:66:c1:b2:7e:a9:58:1c:40:
         e3:b0:b6:f1:21:a8:b6:a9:60:44:71:9f:95:96:3b:c0:67:b2:
         94:f8:a1:90:c4:bf:5f:08:2c:20:0f:37:6b:cf:91:e7:4d:56:
         2a:e0:5a:7f:a1:4b:36:bd:35:24:2b:b6:11:36:24:53:b3:95:
         67:5f:ea:1a:f5:6d:4a:31:04:37:0c:3d:9a:e4:52:8e:84:c7:
         8e:a0:2d:2a:d7:0c:2b:d9:8a:c3:e5:bf:28:cd:6e:7f:e6:57:
         4a:f7:45:3d:29:2b:89:a3:d8:e7:c3:20:21:7a:78:72:9d:19:
         8a:22:b7:11:25:25:f4:c6:6a:ac:fe:ed:0d:92:10:2e:4b:05:
         42:15:fc:5f:52:89:1e:0b:c7:85:6f:3a:99:a6:0c:49:b6:76:
         93:1e:c3:f1:80:b1:a2:32:cd:d6:ca:35:6a:e8:63:76:0a:8c:
         db:f7:98:d2:51:db:79:62:3b:76:71:50:0f:9a:75:86:0d:f2:
         35:e4:fe:6a:27:a4:ce:29:f2:6c:81:c3:9d:e4:fb:7d:48:2c:
         1d:a7:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----