Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F710A1BCACFE11F1A810D7F5CE1D38B0.roa
File:                     F710A1BCACFE11F1A810D7F5CE1D38B0.roa (raw, json)
Hash identifier:          i4UwsmME9GLskwSCkpleIkbozrdSQTIObiFrEC+1PP0=
Subject key identifier:   A2:E9:F7:7C:B8:61:42:6C:18:A4:39:19:E1:9A:A9:6E:3D:2E:CF:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F710A1BCACFE11F1A810D7F5CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 10:04:09 +0000
ROA not before:           Thu 10 Sep 2026 10:04:05 +0000
ROA not after:            Sat 17 Oct 2026 10:04:05 +0000
asID:                     22773
IP address blocks:        156.238.163.0/24 maxlen: 24
                          156.238.164.0/24 maxlen: 24
                          156.238.165.0/24 maxlen: 24
                          156.238.166.0/24 maxlen: 24
                          156.238.167.0/24 maxlen: 24
                          156.238.168.0/24 maxlen: 24
                          156.242.120.0/24 maxlen: 24
                          156.243.194.0/24 maxlen: 24
                          156.243.195.0/24 maxlen: 24
                          156.248.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120003 (0x1d4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 10:04:05 2026 GMT
            Not After : Oct 17 10:04:05 2026 GMT
        Subject: CN=6aa28099-77c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:22:ca:e7:31:3c:a0:b5:aa:56:c1:40:2a:
                    11:ec:75:f2:74:24:4a:33:26:bd:18:ca:ff:ed:77:
                    7c:89:7e:44:ee:03:75:ac:f7:dd:a1:37:58:e0:81:
                    1e:dd:c4:50:a7:00:fd:67:cc:c2:1e:d7:25:2c:bf:
                    31:19:9d:bc:17:87:1e:e7:f5:7f:25:60:01:a0:1b:
                    26:84:1d:56:2e:86:76:4d:a2:bf:84:1a:4f:48:bd:
                    b2:af:ab:52:63:46:91:fd:da:e9:9c:cb:02:58:45:
                    d6:3b:fd:82:e0:4b:95:f4:df:73:86:0c:e7:a3:2f:
                    da:f5:f8:4d:88:9d:28:f3:68:72:ec:39:be:fd:45:
                    08:fc:7e:44:f6:31:71:82:21:e4:bb:c3:7f:3f:dc:
                    93:a0:d6:1a:7d:3c:73:02:75:e9:64:5e:f1:5b:3b:
                    61:9e:01:c3:49:ad:5e:2e:71:69:c5:30:d3:3e:a5:
                    66:26:a0:9a:b4:c4:5f:16:c5:a7:cc:d4:e6:f9:e1:
                    60:8f:bb:32:2a:91:33:0b:65:26:96:39:da:ff:a2:
                    53:23:46:b4:78:b6:8a:f2:d6:76:17:e8:6d:06:a0:
                    af:59:3c:08:f3:d4:de:f4:9b:45:96:9c:21:e7:04:
                    e2:57:db:dc:51:1e:13:8e:f3:1d:2c:52:c3:88:11:
                    74:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E9:F7:7C:B8:61:42:6C:18:A4:39:19:E1:9A:A9:6E:3D:2E:CF:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F710A1BCACFE11F1A810D7F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.163.0-156.238.168.255
                  156.242.120.0/24
                  156.243.194.0/23
                  156.248.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b1:52:9b:ff:a0:47:68:1b:66:0d:e8:98:06:c9:d5:5a:50:
         2e:bc:45:a7:e4:37:2c:27:ac:c1:a6:d4:17:5d:c7:6e:1f:b8:
         3a:12:b9:2c:59:fc:10:c9:3c:f0:78:9b:aa:b7:14:8a:fb:c7:
         75:96:ba:7e:93:af:4e:52:6c:89:c4:62:61:e9:ec:89:c0:ca:
         ed:eb:84:d4:05:48:c2:01:c4:1c:44:64:56:db:75:54:0f:2c:
         11:84:77:f2:1e:71:29:0a:13:71:11:db:94:e0:36:96:71:15:
         0c:e4:b4:28:94:2e:2e:0e:d4:b9:12:1c:f9:e1:9d:a2:7a:8c:
         a1:9e:4f:b5:3b:53:1f:ea:52:d5:c3:53:35:c8:88:b9:78:10:
         c3:17:4e:cf:c4:00:10:32:24:7b:ed:56:1d:c2:b6:c8:67:5e:
         bf:27:e1:43:8c:91:54:8f:63:27:bb:5c:11:a4:97:48:8d:95:
         b6:50:a6:b2:b7:b7:d7:d3:89:ec:fd:f3:7f:2a:77:ea:a6:d4:
         5c:09:97:86:40:b5:c8:85:78:48:e0:11:33:4c:98:dd:92:80:
         67:4e:2b:55:b9:5b:3b:3c:10:76:16:2a:a2:1b:9c:fc:e9:2a:
         60:64:bc:57:36:26:a9:e8:93:cf:a2:dd:68:b8:e2:a8:a6:23:
         29:74:63:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----