Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7DC6DBAB3F411F18D200DFCCE1D38B0.roa
File:                     D7DC6DBAB3F411F18D200DFCCE1D38B0.roa (raw, json)
Hash identifier:          CV+1aeFQ99nXUhRwH2CL5DvN3ThgAWDe+YgX72A+2iM=
Subject key identifier:   93:0A:BD:42:3E:F2:C7:3D:15:CF:C4:BE:2C:26:37:2C:BC:49:4A:4F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7DC6DBAB3F411F18D200DFCCE1D38B0.roa
Signing time:             Sat 19 Sep 2026 06:39:21 +0000
ROA not before:           Sat 19 Sep 2026 06:39:16 +0000
ROA not after:            Tue 06 Oct 2026 06:39:16 +0000
asID:                     264750
IP address blocks:        156.248.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120551 (0x1d6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 19 06:39:16 2026 GMT
            Not After : Oct  6 06:39:16 2026 GMT
        Subject: CN=6aae2e19-3b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:95:3d:87:ea:43:4b:69:1a:ae:fb:65:e4:
                    38:2c:de:e6:5b:98:2a:ba:10:96:c7:8b:fb:2f:c0:
                    9f:9f:81:87:a2:dd:6e:70:78:35:3c:bf:f0:43:ed:
                    4a:73:a0:fe:4e:e5:6d:3e:ef:93:88:cb:7d:47:24:
                    8e:93:57:1e:2c:a3:6d:ef:d8:36:81:b0:4d:43:9c:
                    dc:99:fe:24:c5:be:0e:48:fc:9b:63:b5:b0:c2:fc:
                    4f:81:69:bd:07:94:72:78:c6:c8:df:61:a2:90:91:
                    f4:09:6e:97:78:9f:e7:e1:be:9a:20:2c:53:e2:d2:
                    cc:0d:ed:e8:75:77:57:99:ce:8f:79:b7:e7:44:ba:
                    5b:79:b3:47:5c:fb:6c:e9:ed:21:35:59:b4:a0:88:
                    ea:a5:06:63:87:3e:0f:47:28:4e:eb:39:6f:13:ce:
                    62:f6:06:eb:e6:ef:fd:75:37:a2:f5:93:5e:07:3c:
                    a5:f8:26:05:2e:86:44:f7:d9:bc:c3:77:c7:36:02:
                    ff:47:02:9e:5e:60:3f:36:f7:90:27:99:1f:03:f2:
                    d6:f5:8b:f3:b2:bb:2c:85:6e:1d:11:1c:b4:cb:ca:
                    f7:cb:79:a6:4f:4c:bd:1d:2b:c2:bf:e5:5e:63:4e:
                    85:07:bb:30:b4:f2:b3:92:11:70:67:58:2b:16:5d:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0A:BD:42:3E:F2:C7:3D:15:CF:C4:BE:2C:26:37:2C:BC:49:4A:4F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7DC6DBAB3F411F18D200DFCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:96:7a:5b:b9:83:7e:f6:20:06:13:f0:a2:eb:43:9b:b1:52:
         0d:3d:61:8b:61:e9:68:3e:39:43:13:aa:2a:bd:7a:c6:03:e0:
         2b:2d:24:a3:42:86:98:f6:74:51:61:b3:78:aa:74:2a:64:0a:
         04:97:f1:55:0e:cc:af:87:6d:62:39:a6:fe:79:60:ea:c1:7f:
         3c:c8:b3:a9:e2:d1:93:b1:94:02:03:02:0f:14:fc:6f:a7:f5:
         02:21:4f:b0:1a:22:bd:a8:77:e6:07:bc:83:c6:55:49:6f:42:
         23:4a:80:8e:ac:13:a4:91:c4:56:f3:49:9e:89:b9:66:f6:a5:
         b1:67:b2:b2:59:ac:e9:2b:75:e4:75:13:6e:ba:87:d9:b9:e3:
         86:5c:a2:02:c5:76:4a:c2:59:84:74:e0:c0:9c:af:c2:70:ae:
         3c:5e:c0:07:5b:22:87:b8:44:8f:9f:34:93:a1:ad:98:42:67:
         7d:79:95:8b:13:0b:79:c4:ca:44:56:2b:69:b6:57:72:9a:43:
         b8:b2:df:0f:61:a3:94:d3:bb:5d:b5:fb:c0:55:91:58:2d:ef:
         6a:e6:24:b8:44:c8:90:cb:9e:66:ff:4a:d8:e7:28:cf:30:26:
         75:55:37:8c:b3:73:e4:4f:27:a5:f8:83:d0:93:da:ce:b6:13:
         13:0b:3d:31
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdbnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE5MDYzOTE2WhcNMjYxMDA2MDYzOTE2WjAYMRYw
FAYDVQQDEw02YWFlMmUxOS0zYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzfWVPYfqQ0tpGq77ZeQ4LN7mW5gquhCWx4v7L8Cfn4GHot1ucHg1PL/w
Q+1Kc6D+TuVtPu+TiMt9RySOk1ceLKNt79g2gbBNQ5zcmf4kxb4OSPybY7WwwvxP
gWm9B5RyeMbI32GikJH0CW6XeJ/n4b6aICxT4tLMDe3odXdXmc6PebfnRLpbebNH
XPts6e0hNVm0oIjqpQZjhz4PRyhO6zlvE85i9gbr5u/9dTei9ZNeBzyl+CYFLoZE
99m8w3fHNgL/RwKeXmA/NveQJ5kfA/LW9YvzsrsshW4dERy0y8r3y3mmT0y9HSvC
v+VeY06FB7swtPKzkhFwZ1grFl19/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJMK
vUI+8sc9Fc/EviwmNyy8SUpPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EN0RDNkRCQUIzRjQxMUYxOEQyMDBERkNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPjAMA0GCSqGSIb3DQEBCwUA
A4IBAQB2lnpbuYN+9iAGE/Ci60ObsVINPWGLYeloPjlDE6oqvXrGA+ArLSSjQoaY
9nRRYbN4qnQqZAoEl/FVDsyvh21iOab+eWDqwX88yLOp4tGTsZQCAwIPFPxvp/UC
IU+wGiK9qHfmB7yDxlVJb0IjSoCOrBOkkcRW80meiblm9qWxZ7KyWazpK3XkdRNu
uofZueOGXKICxXZKwlmEdODAnK/CcK48XsAHWyKHuESPnzSToa2YQmd9eZWLEwt5
xMpEVitptldymkO4st8PYaOU07tdtfvAVZFYLe9q5iS4RMiQy55m/0rY5yjPMCZ1
VTeMs3PkTyel+IPQk9rOthMTCz0x
-----END CERTIFICATE-----