Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01DFE44C923111F18842C0D0CE1D38B0.roa
File:                     01DFE44C923111F18842C0D0CE1D38B0.roa (raw, json)
Hash identifier:          pAydMeNRP5kDs3Ou7cLOrBcmlUbl80Uoqczrhw1JpDE=
Subject key identifier:   98:1E:8F:E1:81:77:C9:05:6D:6D:0E:10:DF:86:64:AE:59:05:8F:1B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01DFE44C923111F18842C0D0CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 07:24:21 +0000
ROA not before:           Fri 07 Aug 2026 07:24:17 +0000
ROA not after:            Sat 05 Sep 2026 07:24:17 +0000
asID:                     264750
IP address blocks:        156.248.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117278 (0x1ca1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 07:24:17 2026 GMT
            Not After : Sep  5 07:24:17 2026 GMT
        Subject: CN=6a758825-9ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:75:63:97:ff:52:49:90:d5:5b:c2:15:a9:
                    b3:47:84:3b:92:e6:f7:19:ee:08:76:70:4b:1c:51:
                    8c:cf:3a:c3:e0:7e:34:17:94:91:02:61:9a:85:cc:
                    a2:78:45:4f:d3:c8:aa:5b:c0:e8:e7:79:bf:76:d5:
                    23:45:cc:08:02:cc:92:6f:df:f1:f4:44:7d:9d:34:
                    75:6a:85:aa:ed:97:fa:03:5f:ec:f5:68:9d:a2:bb:
                    dc:9f:1d:ca:63:95:93:fb:4c:c5:db:ff:83:ea:89:
                    af:94:be:29:fb:e9:d8:5c:a8:de:d6:ec:51:06:35:
                    3c:d9:59:ea:67:22:ac:65:09:f6:72:87:30:7f:9e:
                    df:0e:32:58:5b:40:cb:66:69:8b:5d:b2:85:1e:75:
                    9e:61:b4:12:33:21:d0:98:30:56:42:0d:43:33:8b:
                    8f:5b:50:03:cd:83:80:b2:ef:74:b3:33:24:dc:b6:
                    2e:d1:26:1f:05:ea:48:8b:ca:a1:8b:b2:3e:71:f8:
                    5a:c6:01:e5:33:09:4a:2b:a9:27:d2:81:46:f3:89:
                    a4:ec:00:95:c3:fd:94:bf:42:9b:f7:d0:e3:55:be:
                    3a:23:90:e2:59:17:f3:66:1a:dc:3d:5b:55:16:32:
                    bd:16:6c:ad:bb:5c:4d:3d:6f:7c:87:6a:c5:81:05:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1E:8F:E1:81:77:C9:05:6D:6D:0E:10:DF:86:64:AE:59:05:8F:1B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01DFE44C923111F18842C0D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:3f:dc:77:e1:2a:e6:3b:31:25:b4:77:7a:ab:bd:3d:1e:84:
         c3:60:b8:02:e0:e7:0c:f8:3e:5b:48:d0:87:e9:97:88:d9:0d:
         49:4f:98:d3:8b:66:cf:d4:82:93:cf:99:70:28:88:34:f5:af:
         18:e1:45:59:60:45:59:9e:d1:47:2b:85:67:c0:df:f4:13:c6:
         f1:4e:46:a5:2f:af:5e:f7:d5:6b:d1:b2:ff:af:86:0d:26:8f:
         17:60:de:83:eb:e2:79:54:f2:aa:37:8d:42:0f:4d:92:e0:68:
         7e:14:88:16:f4:0a:b4:43:f3:0e:c8:a0:e1:ac:62:06:a1:1e:
         c4:c1:cb:c3:a8:b0:88:09:7f:c6:56:03:58:10:eb:5f:d3:e5:
         2f:0a:b6:44:58:66:10:92:45:2a:d1:70:e5:fc:8c:c5:c5:f3:
         2b:1e:f2:98:c4:d9:09:66:a1:d7:14:c5:b8:a2:aa:5b:82:24:
         4e:e7:66:7e:0d:a9:4f:a5:96:c3:56:c7:fa:d2:4b:53:db:0c:
         f4:73:5d:8e:0e:db:eb:ca:70:41:58:cc:a0:59:9b:9c:cd:a3:
         ac:50:a3:1b:12:ba:1d:b3:8d:22:85:88:a2:f8:15:0e:e8:2e:
         ba:99:b7:6a:10:85:1f:96:99:42:84:51:97:d0:f2:cc:ed:7a:
         48:22:0d:41
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcoeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODA3MDcyNDE3WhcNMjYwOTA1MDcyNDE3WjAYMRYw
FAYDVQQDEw02YTc1ODgyNS05ZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoLF1Y5f/UkmQ1VvCFamzR4Q7kub3Ge4IdnBLHFGMzzrD4H40F5SRAmGa
hcyieEVP08iqW8Do53m/dtUjRcwIAsySb9/x9ER9nTR1aoWq7Zf6A1/s9Widorvc
nx3KY5WT+0zF2/+D6omvlL4p++nYXKje1uxRBjU82VnqZyKsZQn2cocwf57fDjJY
W0DLZmmLXbKFHnWeYbQSMyHQmDBWQg1DM4uPW1ADzYOAsu90szMk3LYu0SYfBepI
i8qhi7I+cfhaxgHlMwlKK6kn0oFG84mk7ACVw/2Uv0Kb99DjVb46I5DiWRfzZhrc
PVtVFjK9Fmytu1xNPW98h2rFgQXKeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJge
j+GBd8kFbW0OEN+GZK5ZBY8bMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMURGRTQ0QzkyMzExMUYxODg0MkMwRDBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPjAMA0GCSqGSIb3DQEBCwUA
A4IBAQACP9x34SrmOzEltHd6q709HoTDYLgC4OcM+D5bSNCH6ZeI2Q1JT5jTi2bP
1IKTz5lwKIg09a8Y4UVZYEVZntFHK4VnwN/0E8bxTkalL69e99Vr0bL/r4YNJo8X
YN6D6+J5VPKqN41CD02S4Gh+FIgW9Aq0Q/MOyKDhrGIGoR7EwcvDqLCICX/GVgNY
EOtf0+UvCrZEWGYQkkUq0XDl/IzFxfMrHvKYxNkJZqHXFMW4oqpbgiRO52Z+DalP
pZbDVsf60ktT2wz0c12ODtvrynBBWMygWZuczaOsUKMbErods40ihYii+BUO6C66
mbdqEIUflplChFGX0PLM7XpIIg1B
-----END CERTIFICATE-----