Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D0B3A589ADF11F1AFE84CF0CE1D38B0.roa
File:                     1D0B3A589ADF11F1AFE84CF0CE1D38B0.roa (raw, json)
Hash identifier:          CVTbxlaaqVu8s7rfoQSf66p0p8nfyShI5kc1WvCG35U=
Subject key identifier:   E4:CC:67:ED:B2:D4:D3:E0:A3:D4:7D:08:8F:C0:BB:B8:F7:B3:27:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D0B3A589ADF11F1AFE84CF0CE1D38B0.roa
Signing time:             Tue 18 Aug 2026 08:30:48 +0000
ROA not before:           Tue 18 Aug 2026 08:30:44 +0000
ROA not after:            Fri 25 Sep 2026 08:30:44 +0000
asID:                     271355
IP address blocks:        156.236.214.0/24 maxlen: 24
                          156.236.216.0/24 maxlen: 24
                          156.236.217.0/24 maxlen: 24
                          156.236.218.0/24 maxlen: 24
                          156.236.219.0/24 maxlen: 24
                          156.236.220.0/24 maxlen: 24
                          156.236.221.0/24 maxlen: 24
                          156.236.222.0/24 maxlen: 24
                          156.236.223.0/24 maxlen: 24
                          156.236.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118150 (0x1cd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 08:30:44 2026 GMT
            Not After : Sep 25 08:30:44 2026 GMT
        Subject: CN=6a841838-b513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:ee:aa:c1:c7:16:80:a8:af:45:1f:bf:3a:
                    81:cb:48:65:8b:c2:c7:16:8c:6b:d5:8b:93:2c:29:
                    7d:d6:3e:28:1e:e6:81:ef:76:32:06:62:ab:5d:9b:
                    a7:ea:88:5f:c3:7b:83:ba:36:3f:88:38:41:92:6e:
                    79:4b:8f:81:23:09:61:10:3a:73:b6:b5:59:73:98:
                    5c:12:a7:25:ee:34:87:9d:d4:04:f8:6e:bd:3d:8b:
                    d3:5d:9f:0b:dd:7f:76:e2:66:29:b9:5b:0b:88:8d:
                    fa:2d:f9:3f:99:31:0b:d3:e2:04:eb:3d:30:20:cb:
                    67:03:9f:1e:71:9f:2d:c3:f9:8c:03:96:fa:48:31:
                    ae:99:73:dc:59:0f:5d:11:04:76:bd:d3:f2:d5:b2:
                    d9:ff:93:e5:a6:69:29:a8:83:47:0c:f1:bc:c8:ac:
                    02:62:09:e0:84:16:70:dc:3f:7a:47:9f:38:a8:26:
                    9d:f7:67:f3:ad:54:f2:12:6d:c6:67:0c:45:f4:46:
                    4b:68:68:3a:fb:9d:24:b2:84:06:52:b6:9a:94:ed:
                    18:32:f5:1d:45:32:45:3b:ba:a1:4d:5e:dc:8e:85:
                    a8:0c:d2:02:15:8b:d8:22:8d:65:f2:73:2c:ac:bc:
                    6d:7e:0c:5c:ee:6d:89:0a:9e:70:e1:8a:25:61:b3:
                    96:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CC:67:ED:B2:D4:D3:E0:A3:D4:7D:08:8F:C0:BB:B8:F7:B3:27:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D0B3A589ADF11F1AFE84CF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.214.0/24
                  156.236.216.0/21
                  156.236.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:b7:92:e4:35:a6:bb:45:04:78:ff:38:c4:63:cd:07:dc:
         fe:ec:52:00:60:21:01:39:5d:64:12:46:a5:20:f3:51:f8:a7:
         e9:c5:a4:41:1c:f3:a4:ec:5e:b1:8b:15:ca:f7:01:8e:81:31:
         c4:6b:0c:66:04:d3:81:58:85:6e:9d:bb:27:18:db:a8:84:84:
         85:05:1c:98:2a:14:50:7a:7e:5f:6b:87:9d:47:c2:21:15:13:
         92:c3:ff:0f:34:83:68:2b:48:04:0e:c4:c0:6f:de:b0:ab:04:
         02:ac:53:15:08:42:12:28:54:6a:b9:35:01:ce:4f:6d:80:92:
         8e:27:57:90:9f:f9:b9:59:fd:69:d7:73:4f:ca:8c:a0:d9:4e:
         31:be:02:9f:7b:d2:0d:a7:af:1b:cc:f6:9c:5b:6b:66:02:ed:
         f8:bb:dd:69:5f:94:8c:8b:ef:c5:c8:6f:3b:04:9c:e8:7b:ef:
         e8:71:4e:a9:89:9d:2e:1d:fd:b8:98:cc:43:b9:21:9e:09:09:
         1f:94:77:fb:5c:98:1c:60:d5:1c:30:0f:f5:fa:59:da:36:f4:
         5f:c1:09:00:13:14:d2:09:2d:d7:8e:db:20:8b:87:28:ed:b7:
         9b:bc:a7:a0:08:47:84:a4:dc:a4:e2:96:ab:5f:df:f8:6e:0d:
         5e:13:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----