Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09B1878AA31011F1BEF1E9CCCE1D38B0.roa
File:                     09B1878AA31011F1BEF1E9CCCE1D38B0.roa (raw, json)
Hash identifier:          0QKcVESYnPWUTuRfo/ljEuf76gZePte3E2koXrxCBvc=
Subject key identifier:   F8:E0:6E:19:CE:8D:68:3A:97:07:AE:A2:32:8B:AC:FB:1F:37:92:E1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09B1878AA31011F1BEF1E9CCCE1D38B0.roa
Signing time:             Fri 28 Aug 2026 18:41:11 +0000
ROA not before:           Fri 28 Aug 2026 18:41:06 +0000
ROA not after:            Fri 04 Dec 2026 18:41:06 +0000
asID:                     211392
IP address blocks:        156.239.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119251 (0x1d1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 18:41:06 2026 GMT
            Not After : Dec  4 18:41:06 2026 GMT
        Subject: CN=6a91d646-2a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:26:87:3f:d1:a5:df:0a:61:d7:d4:0d:85:
                    44:f1:e5:94:db:09:09:1f:bb:b0:ff:ba:06:97:5d:
                    a0:49:aa:08:dd:a3:fd:60:02:60:0a:00:83:6a:04:
                    9b:00:dd:05:b2:ad:5e:dc:31:80:7b:05:58:d0:58:
                    37:92:6e:19:21:68:9e:0f:de:a5:a2:f7:b9:ed:28:
                    4d:92:e3:53:b5:ca:f9:83:e3:22:84:cb:36:53:d5:
                    86:17:55:db:92:fb:24:55:aa:ae:8e:13:87:a7:5d:
                    2a:05:1d:5d:fe:39:92:73:57:2c:c6:fb:00:7e:54:
                    07:48:bb:11:55:a4:f2:cb:ca:12:5a:3c:08:c5:23:
                    b1:d2:91:5d:1d:ed:1f:d5:15:69:d8:b5:7e:6b:b3:
                    33:12:5a:59:df:c4:f3:cb:70:2b:eb:c4:0f:7f:82:
                    cb:2b:4e:ca:8d:76:f8:1d:dc:75:a5:c1:b2:93:de:
                    13:eb:ae:16:c2:43:8e:3c:b5:54:e3:c2:24:2a:3c:
                    44:b2:11:d8:35:e7:bb:7e:52:a3:53:91:0b:d9:89:
                    e9:de:9b:36:fa:26:e2:a5:f2:fe:8f:cb:66:82:c9:
                    6e:13:f8:b9:d0:3c:17:d7:d5:a6:1f:0d:d5:79:22:
                    88:bd:29:38:5e:35:71:ed:76:d9:77:7f:94:09:5e:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E0:6E:19:CE:8D:68:3A:97:07:AE:A2:32:8B:AC:FB:1F:37:92:E1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09B1878AA31011F1BEF1E9CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:2e:e7:2b:11:db:68:b0:ea:c6:06:1c:21:5a:a1:4f:a4:
         5f:5f:74:fe:ef:94:cd:9c:da:03:43:cc:89:da:37:4c:3c:e3:
         99:9a:a5:b0:b1:89:3f:e6:13:99:be:e0:47:9b:12:d7:24:61:
         0f:17:5f:89:2d:74:44:07:e9:97:ab:3e:7a:0a:4d:f8:b1:4e:
         b5:65:18:2a:99:ba:90:db:ab:88:57:b5:00:93:8b:18:5e:88:
         80:e2:4f:e9:d9:95:e3:12:a4:91:82:e3:bf:dd:d6:4f:84:6d:
         19:01:b8:e9:90:ef:fe:92:5a:99:f4:92:42:94:19:43:e7:5c:
         91:d3:37:93:9c:bd:3b:f8:63:f1:34:8f:2a:65:d8:b5:bd:c1:
         86:12:58:7b:95:05:48:0c:6e:a7:23:23:1c:15:5b:c4:ec:75:
         0e:64:6c:66:13:22:09:94:73:99:3a:6e:a5:ef:7a:ad:cc:4b:
         76:db:0d:d6:27:8f:ca:0f:b2:af:bc:21:9c:41:62:3e:05:7e:
         d9:e8:25:4c:ae:27:e5:53:72:9e:b2:3d:78:16:31:e8:2c:ee:
         f1:f2:bb:16:5e:14:9a:4b:a6:bc:23:2c:6a:6a:cd:2c:cf:e8:
         b6:61:9a:fa:8a:6c:4a:14:2a:0b:db:83:aa:58:c9:e8:14:c5:
         0f:fa:bb:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdHTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI4MTg0MTA2WhcNMjYxMjA0MTg0MTA2WjAYMRYw
FAYDVQQDEw02YTkxZDY0Ni0yYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv1wmhz/Rpd8KYdfUDYVE8eWU2wkJH7uw/7oGl12gSaoI3aP9YAJgCgCD
agSbAN0Fsq1e3DGAewVY0Fg3km4ZIWieD96love57ShNkuNTtcr5g+MihMs2U9WG
F1XbkvskVaqujhOHp10qBR1d/jmSc1csxvsAflQHSLsRVaTyy8oSWjwIxSOx0pFd
He0f1RVp2LV+a7MzElpZ38Tzy3Ar68QPf4LLK07KjXb4Hdx1pcGyk94T664WwkOO
PLVU48IkKjxEshHYNee7flKjU5EL2Ynp3ps2+ibipfL+j8tmgsluE/i50DwX19Wm
Hw3VeSKIvSk4XjVx7XbZd3+UCV51mwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPjg
bhnOjWg6lweuojKLrPsfN5LhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wOUIxODc4QUEzMTAxMUYxQkVGMUU5Q0NDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO/tMA0GCSqGSIb3DQEBCwUA
A4IBAQBmfS7nKxHbaLDqxgYcIVqhT6RfX3T+75TNnNoDQ8yJ2jdMPOOZmqWwsYk/
5hOZvuBHmxLXJGEPF1+JLXREB+mXqz56Ck34sU61ZRgqmbqQ26uIV7UAk4sYXoiA
4k/p2ZXjEqSRguO/3dZPhG0ZAbjpkO/+klqZ9JJClBlD51yR0zeTnL07+GPxNI8q
Zdi1vcGGElh7lQVIDG6nIyMcFVvE7HUOZGxmEyIJlHOZOm6l73qtzEt22w3WJ4/K
D7KvvCGcQWI+BX7Z6CVMriflU3Kesj14FjHoLO7x8rsWXhSaS6a8Iyxqas0sz+i2
YZr6imxKFCoL24OqWMnoFMUP+rv0
-----END CERTIFICATE-----