Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/E353A304C70211F1B154D6F4CE1D38B0.roa
File:                     E353A304C70211F1B154D6F4CE1D38B0.roa (raw, json)
Hash identifier:          GrFKRwVT6pDX4fF3BmOTg5dXE3blFQpECnvCE6CToPs=
Subject key identifier:   68:77:FD:A3:72:77:19:13:D1:2A:42:04:81:4D:AC:72:E7:83:16:8A
Certificate issuer:       /CN=F3660C14AR/serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
Certificate serial:       0AA4
Authority key identifier: 06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
Authority info access:    rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/E353A304C70211F1B154D6F4CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 12:37:44 +0000
ROA not before:           Sun 01 Nov 2026 12:37:29 +0000
ROA not after:            Tue 31 Oct 2028 12:37:29 +0000
asID:                     328213
IP address blocks:        156.0.234.0/23 maxlen: 23
Validation:               Failed, certificate is not yet valid

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724 (0xaa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AR, serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
        Validity
            Not Before: Nov  1 12:37:29 2026 GMT
            Not After : Oct 31 12:37:29 2028 GMT
        Subject: CN=6ace2618-1d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:d8:65:de:e9:2b:62:97:9c:a4:b9:cd:8e:
                    98:bc:13:13:98:20:8e:f4:40:3b:20:c4:3f:88:b4:
                    88:7a:86:5f:fa:b7:90:f1:cf:15:e9:63:b4:42:b7:
                    93:7f:55:77:d0:0c:ab:9a:9e:33:0e:0b:b6:9b:fd:
                    18:e4:cd:8f:b5:9e:12:d4:84:3e:95:05:b5:84:97:
                    96:94:5d:95:c9:d2:04:50:79:9b:7b:7e:3d:41:e7:
                    15:57:0b:00:2c:99:1e:1f:fb:81:b2:32:51:b6:5d:
                    f2:e3:10:85:f0:1c:ce:5f:ff:bb:cf:99:81:75:55:
                    b4:d0:d3:0e:5b:bd:1b:ad:18:ff:d9:00:7c:2f:fb:
                    ef:97:c5:e2:f9:46:79:10:29:6c:2e:c7:1d:39:f2:
                    02:0d:ae:f5:3f:12:38:36:91:0f:2d:65:bb:db:dc:
                    13:0e:e8:03:47:88:db:57:e3:7e:88:65:d9:a6:3f:
                    e6:6f:44:08:13:11:b4:1e:7b:6a:b0:07:37:c4:e5:
                    86:08:72:1e:e0:81:dc:1e:ab:b2:94:ad:80:b7:13:
                    75:ad:12:69:e4:8b:3d:88:e8:47:14:ae:1c:6f:4f:
                    78:8e:f5:b6:d7:b8:20:93:fa:21:fb:ba:e4:10:ea:
                    3b:92:52:a5:69:5e:bd:ca:41:5b:23:b9:60:c2:bf:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:77:FD:A3:72:77:19:13:D1:2A:42:04:81:4D:AC:72:E7:83:16:8A
            X509v3 Authority Key Identifier:
                keyid:06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/E353A304C70211F1B154D6F4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:77:c0:8b:21:6d:82:16:f5:ea:e3:27:20:11:03:da:09:0b:
         d3:3e:4f:a8:d9:71:d2:fe:e9:7b:08:61:fc:8c:30:5a:69:2f:
         fd:56:8b:06:da:1c:30:de:e6:85:31:9b:a6:d4:b1:14:e2:a3:
         9b:99:75:3b:d9:d2:40:c0:da:84:30:f7:b7:98:cf:e8:76:3f:
         08:5e:01:3f:aa:e4:7b:c5:66:3d:b7:f0:a3:f8:15:5d:ca:ca:
         f0:74:d1:07:dc:f3:3b:7e:ae:5f:68:76:0f:51:ae:66:5e:f8:
         c6:71:73:42:ed:d6:13:6e:2c:10:cf:fe:82:91:be:b9:10:c4:
         da:fc:7b:a7:59:a9:03:5c:6e:71:bf:46:f2:43:d6:77:25:5f:
         99:4b:47:b3:1b:cd:1a:6f:6b:a9:44:2e:fc:5a:ec:6a:55:fe:
         17:eb:00:d3:ae:d0:35:01:6b:23:65:6c:89:44:92:bb:93:9c:
         24:da:c2:f9:ca:80:ea:36:b4:ad:1d:e4:d8:61:3c:64:42:c8:
         2d:10:24:d5:72:34:05:4d:45:26:e1:a7:80:de:a4:fe:4b:99:
         ec:24:55:3f:a5:ff:82:be:89:5e:38:87:15:50:f6:b7:e5:03:
         eb:bc:4f:58:ba:d9:b7:5e:fb:e7:cf:13:71:21:a7:9d:a2:12:
         f0:d8:82:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----