Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE5BCB8C47E11F1BBC8830CCF1D38B0.roa
File:                     1EE5BCB8C47E11F1BBC8830CCF1D38B0.roa (raw, json)
Hash identifier:          z6qB2JZ/ZdvAEAG7G8W4GUEOc+x8yaTT8sa5S2AbESk=
Subject key identifier:   9B:8D:C1:33:39:CD:E0:23:40:C1:FC:C8:3D:6C:17:DE:88:E2:47:CF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE5BCB8C47E11F1BBC8830CCF1D38B0.roa
Signing time:             Sat 10 Oct 2026 07:42:19 +0000
ROA not before:           Sat 10 Oct 2026 07:42:14 +0000
ROA not after:            Tue 10 Nov 2026 07:42:14 +0000
asID:                     61112
IP address blocks:        156.226.168.0/23 maxlen: 24
                          156.226.170.0/23 maxlen: 24
                          156.226.172.0/23 maxlen: 24
                          156.226.174.0/23 maxlen: 24
                          156.229.160.0/21 maxlen: 24
                          156.229.160.0/22 maxlen: 24
                          156.231.111.0/24 maxlen: 24
                          156.231.112.0/22 maxlen: 24
                          156.231.116.0/23 maxlen: 24
                          156.243.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121938 (0x1dc52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 07:42:14 2026 GMT
            Not After : Nov 10 07:42:14 2026 GMT
        Subject: CN=6ac9ec5b-5f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:d7:12:a0:2f:d0:82:4f:ea:1b:d7:04:48:
                    70:79:5e:d6:4c:04:e7:1a:d1:29:13:fa:6e:3d:d1:
                    f1:10:64:6e:9f:55:f5:b8:c3:c3:af:f8:0c:0c:1b:
                    82:9a:6b:aa:c9:a1:34:5f:b5:7f:b3:af:af:ee:07:
                    87:20:43:c2:c7:3e:41:58:85:29:0b:72:47:8d:26:
                    61:d4:ef:2b:1b:7e:22:95:27:e0:0c:ac:01:51:b4:
                    28:a3:d2:83:e1:da:9d:86:2c:8a:ba:cb:f6:dc:55:
                    26:61:82:ef:e6:24:7c:10:01:77:b6:c6:4a:32:e2:
                    b5:ae:87:9c:4c:a3:9b:44:a3:4d:78:3a:7a:a1:6d:
                    f5:32:c1:e0:8d:cf:ce:31:fe:38:b8:cc:c9:71:6e:
                    1f:c4:86:c1:6d:3a:04:4f:c9:fc:f6:a1:59:29:4a:
                    ef:90:17:a0:0f:a7:57:76:39:e4:b4:21:a1:6c:15:
                    18:54:6e:ce:18:b1:2b:9c:e2:4a:78:6f:ad:0b:11:
                    34:99:c8:e4:06:e3:3a:1d:28:b2:04:d4:fb:9a:3c:
                    df:b1:23:ca:76:c4:4b:88:7c:43:5b:a9:10:3f:3b:
                    a8:8f:ab:77:63:8b:08:9e:b6:86:31:8c:77:2b:66:
                    27:aa:f2:37:6f:9f:1f:cf:7d:35:76:de:72:b7:00:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:C1:33:39:CD:E0:23:40:C1:FC:C8:3D:6C:17:DE:88:E2:47:CF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE5BCB8C47E11F1BBC8830CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.168.0/21
                  156.229.160.0/21
                  156.231.111.0-156.231.117.255
                  156.243.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:b9:40:78:95:7e:d4:4e:02:14:d5:f1:27:2c:7c:2e:dd:
         24:8c:a8:82:cc:93:8f:3b:84:ec:c0:c7:94:ca:1e:a0:70:4f:
         1e:4f:f0:e7:d7:9c:e6:ca:c5:ad:34:0e:47:20:1c:11:40:e2:
         93:98:83:77:70:0c:36:a3:63:62:0b:84:5e:97:3e:5f:cd:0f:
         d6:72:c6:f5:90:06:95:b3:f2:71:f1:be:f4:88:a0:7e:30:9e:
         82:b0:a7:28:7a:de:ff:44:82:e1:30:38:78:2a:e5:75:09:1e:
         c3:e3:9d:46:a6:cf:34:10:4e:55:e8:02:96:85:e0:c8:fd:d3:
         8c:14:ac:40:a6:e8:21:d6:28:d4:4a:56:bc:c8:2a:0b:bc:a8:
         8c:37:70:8e:d0:5f:ef:19:81:90:06:0c:ee:70:47:44:3f:8e:
         8f:fa:34:fe:62:55:69:f9:60:34:fd:40:45:f7:3a:43:04:f5:
         17:29:d1:c3:58:b6:b9:92:1e:9e:57:2c:8a:9e:5f:af:3a:48:
         1b:a4:b2:c5:64:d6:0f:7d:f0:ef:47:20:9f:1f:fd:76:d5:94:
         bd:b7:e5:2a:f9:eb:5a:4e:c4:39:0a:db:34:39:2d:b5:34:fc:
         7f:4a:76:38:78:6f:03:98:78:06:4b:03:7b:8d:1b:38:bd:a9:
         42:74:5a:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----