Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0870FCC0988E11F1A8952CE7CE1D38B0.roa
File:                     0870FCC0988E11F1A8952CE7CE1D38B0.roa (raw, json)
Hash identifier:          8pmbDZFmgZNvfPbsBVPjqwD+cvxoo/cIFMGhLwcy/9c=
Subject key identifier:   98:2B:25:5A:69:73:9A:39:F0:98:B5:21:33:02:31:9A:18:6E:A3:07
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0870FCC0988E11F1A8952CE7CE1D38B0.roa
Signing time:             Sat 15 Aug 2026 09:45:22 +0000
ROA not before:           Sat 15 Aug 2026 09:45:18 +0000
ROA not after:            Tue 22 Sep 2026 09:45:18 +0000
asID:                     17561
IP address blocks:        156.226.136.0/21 maxlen: 24
                          156.226.160.0/21 maxlen: 24
                          156.226.184.0/21 maxlen: 24
                          156.226.192.0/21 maxlen: 24
                          156.226.204.0/22 maxlen: 24
                          156.226.208.0/21 maxlen: 24
                          156.226.220.0/22 maxlen: 24
                          156.226.224.0/20 maxlen: 24
                          156.226.248.0/21 maxlen: 24
                          156.227.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117982 (0x1ccde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 09:45:18 2026 GMT
            Not After : Sep 22 09:45:18 2026 GMT
        Subject: CN=6a803532-ec67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5d:23:42:fb:9b:0e:9b:77:79:1b:7c:58:1a:
                    e1:27:f8:37:56:38:44:c2:bf:95:7b:26:00:94:5d:
                    61:04:9b:d8:14:0b:2a:3e:1a:02:3a:ed:d3:83:eb:
                    aa:59:1c:4d:16:8e:4f:17:30:ef:c2:93:32:02:e6:
                    b2:27:c7:67:ae:71:a7:44:d3:87:10:ac:3b:10:c0:
                    72:b6:f0:1a:f5:68:17:76:92:56:ee:05:7f:2a:10:
                    89:c2:77:fb:3d:82:9a:62:36:d9:43:dc:c2:18:cc:
                    72:f9:39:e3:5e:2d:22:db:75:38:74:89:de:0b:2c:
                    86:d9:49:f2:0b:d8:71:62:ad:f7:31:25:1a:12:ec:
                    94:6b:f6:b7:71:ff:96:55:a5:3a:66:3e:b9:07:5c:
                    f1:23:d6:9e:88:bf:35:e8:9a:16:90:6b:a5:98:f2:
                    f1:2c:d4:66:06:de:2a:db:48:a0:2e:94:5c:0e:b2:
                    ae:2e:be:f6:d3:25:5c:bf:e5:87:3a:f0:67:62:1f:
                    ed:25:71:d0:09:17:74:b0:d0:f2:9f:f0:63:12:27:
                    c1:44:79:7a:df:b7:2e:5c:19:d0:63:aa:3b:3c:4f:
                    94:04:75:d1:da:d3:68:e0:04:ed:d8:2d:fd:3d:18:
                    08:ec:1e:45:43:87:aa:87:31:d4:90:65:3a:cd:75:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2B:25:5A:69:73:9A:39:F0:98:B5:21:33:02:31:9A:18:6E:A3:07
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0870FCC0988E11F1A8952CE7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.136.0/21
                  156.226.160.0/21
                  156.226.184.0-156.226.199.255
                  156.226.204.0-156.226.215.255
                  156.226.220.0-156.226.239.255
                  156.226.248.0/21
                  156.227.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:ba:44:3a:c5:b7:eb:75:e1:4c:b7:3c:53:3f:cf:1f:fa:9b:
         5d:48:6b:39:bf:06:30:a7:a9:6d:41:17:cb:76:11:5c:ed:b9:
         46:15:33:d5:4c:e4:75:f5:94:ba:41:b1:89:25:0c:dd:6d:5b:
         42:09:61:5a:bf:68:35:65:ac:95:32:b5:30:97:64:1a:07:0a:
         3c:71:63:58:57:ba:e0:ce:f6:ae:de:02:2c:a4:30:08:14:51:
         4f:78:f5:65:8d:1b:7c:ad:51:9d:55:ac:57:a4:08:e9:05:e0:
         62:5e:12:b0:b6:bb:7e:77:e9:af:35:17:22:ee:1e:60:03:4b:
         87:94:90:2f:f1:dd:da:9d:f5:db:b2:1c:d8:3d:9b:8a:ac:d3:
         fb:36:69:75:39:ed:ec:0d:42:df:a6:66:79:2a:38:6a:be:15:
         00:a1:34:41:fd:e7:11:de:a6:e0:df:e2:dc:0a:45:62:ff:1a:
         13:9d:c4:ac:c2:2d:b7:13:07:e7:77:9e:6d:b8:10:87:69:a5:
         48:44:6c:1c:2c:60:b2:c8:77:2f:09:16:7b:9c:0c:a8:52:c8:
         3e:37:6b:38:c1:ba:b3:97:94:41:b7:99:7a:5d:af:19:d3:52:
         a0:ac:c4:aa:a0:cf:67:ca:17:9e:8e:4f:94:6f:af:ea:18:d0:
         d1:27:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----