Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F51502DC6FB911F0998E3692DAE4EC9C.roa
File:                     F51502DC6FB911F0998E3692DAE4EC9C.roa (raw, json)
Hash identifier:          2R5e9ljSkYN60JPNIeMELTnjRzyUF4JEc91uP3CCsjw=
Subject key identifier:   5A:97:58:5F:55:43:FD:95:D5:FA:05:8A:21:3B:28:D6:72:5B:07:EE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0168AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F51502DC6FB911F0998E3692DAE4EC9C.roa
Signing time:             Sat 02 Aug 2025 16:01:32 +0000
ROA not before:           Sat 02 Aug 2025 16:01:26 +0000
ROA not after:            Tue 09 Sep 2025 16:01:26 +0000
asID:                     200373
IP address blocks:        156.228.95.0/24 maxlen: 24
                          156.228.96.0/24 maxlen: 24
                          156.233.90.0/24 maxlen: 24
                          156.233.91.0/24 maxlen: 24
                          156.233.92.0/24 maxlen: 24
                          156.233.93.0/24 maxlen: 24
                          156.233.94.0/24 maxlen: 24
                          156.233.95.0/24 maxlen: 24
                          156.239.156.0/23 maxlen: 24
                          156.239.192.0/20 maxlen: 24
                          156.239.208.0/20 maxlen: 24
                          156.240.99.0/24 maxlen: 24
                          156.249.137.0/24 maxlen: 24
                          156.249.138.0/24 maxlen: 24
                          156.253.164.0/24 maxlen: 24
                          156.253.165.0/24 maxlen: 24
                          156.253.166.0/24 maxlen: 24
                          156.253.167.0/24 maxlen: 24
                          156.253.168.0/24 maxlen: 24
                          156.253.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92332 (0x168ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 16:01:26 2025 GMT
            Not After : Sep  9 16:01:26 2025 GMT
        Subject: CN=688e365c-5834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:b4:0f:7a:15:bb:02:8c:99:d1:2d:8a:02:
                    7b:27:98:48:05:75:b8:91:30:58:89:89:b5:08:67:
                    52:9f:ca:86:d1:cc:85:33:ff:5a:0c:c5:ec:53:a0:
                    08:14:1e:2c:40:7d:f3:e5:b6:02:ca:1a:bb:31:0b:
                    cd:8d:08:0b:07:b9:fa:2b:a6:e5:78:85:a9:e7:a0:
                    c0:ab:62:98:30:64:02:45:f8:84:4f:93:da:b6:8a:
                    59:1e:2e:06:95:86:fd:89:c4:6e:43:34:f6:25:4d:
                    b1:4f:1d:af:b8:5e:fe:d2:b6:a9:bc:28:84:93:16:
                    c5:76:13:91:23:23:52:8d:3a:81:a2:e4:7c:ba:42:
                    3b:ac:20:58:2b:62:36:57:fa:9e:3c:16:94:33:07:
                    f2:59:a6:d7:c4:38:69:ad:8a:dd:6a:ad:f9:69:51:
                    48:eb:e5:e2:1f:9f:d3:40:f4:0b:89:bd:e7:b4:37:
                    b8:41:41:a8:e7:f1:75:4a:ed:bb:81:3d:2b:99:cc:
                    ee:85:c6:4f:ef:10:81:97:16:77:09:02:24:b3:9c:
                    93:a8:0f:2e:31:3b:35:bf:96:76:68:b7:b3:0e:78:
                    1a:92:8f:02:8d:1a:c6:07:57:4e:32:0e:fc:8f:a0:
                    ff:d5:e7:a9:40:5c:ae:d8:b1:1f:33:6f:1c:7e:9c:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:97:58:5F:55:43:FD:95:D5:FA:05:8A:21:3B:28:D6:72:5B:07:EE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F51502DC6FB911F0998E3692DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.95.0-156.228.96.255
                  156.233.90.0-156.233.95.255
                  156.239.156.0/23
                  156.239.192.0/19
                  156.240.99.0/24
                  156.249.137.0-156.249.138.255
                  156.253.164.0-156.253.169.255

    Signature Algorithm: sha256WithRSAEncryption
         0a:f6:4d:2d:06:11:2a:31:a3:17:b6:c3:08:3a:ab:03:f3:76:
         0d:5d:c9:db:77:21:ee:da:2a:fd:dc:79:45:dd:cf:9b:3d:ab:
         56:e4:23:1e:76:74:6b:60:9f:1d:3f:8b:f0:5a:43:ab:c8:6e:
         ae:db:b3:2b:a1:51:d9:f2:0e:78:14:f8:06:c5:dc:f6:d5:6f:
         04:2a:85:89:bd:33:d3:3b:54:68:fe:be:83:a5:05:32:66:2f:
         dd:24:d4:64:32:95:00:c1:ba:84:16:e9:06:16:d9:38:fd:b4:
         26:9a:e8:6f:0b:0c:d0:b7:2c:0f:4a:9b:38:f6:dc:ed:3f:35:
         41:2a:e2:47:1b:db:0b:cc:7e:08:98:07:16:37:c7:10:51:52:
         25:ef:25:a2:a5:b2:66:30:0f:a5:cb:12:34:f4:44:86:c9:7b:
         eb:1c:48:0f:d6:ef:a7:b0:fa:f0:4f:75:75:0b:c5:cd:c1:1c:
         fd:8f:1a:15:3a:ce:04:29:1a:7b:f7:20:4b:ef:96:e6:c6:b5:
         0d:bf:7c:5f:57:c9:cf:8f:39:43:74:60:0e:10:46:f9:8d:4c:
         44:53:6d:67:1a:01:29:70:48:18:6e:39:eb:80:fe:98:d6:1b:
         8a:d4:de:db:60:4e:35:ec:bf:7b:3c:94:29:3e:16:7c:66:97:
         f7:1e:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:12 2025 by rpki-client