Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FADFC22C3AD11F19A26C8BBCE1D38B0.roa
File:                     1FADFC22C3AD11F19A26C8BBCE1D38B0.roa (raw, json)
Hash identifier:          At1R8xjfdkxE3f4ewu1Wc7U22IaV+APSqfBwd6PWl4w=
Subject key identifier:   71:F3:97:46:0F:CE:C5:FF:41:5E:FE:33:DE:FD:58:8F:F4:E9:9C:1E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FADFC22C3AD11F19A26C8BBCE1D38B0.roa
Signing time:             Fri 09 Oct 2026 06:46:16 +0000
ROA not before:           Fri 09 Oct 2026 06:46:10 +0000
ROA not after:            Mon 08 Oct 2029 06:46:10 +0000
asID:                     17561
IP address blocks:        156.227.0.0/24 maxlen: 24
                          156.227.133.0/24 maxlen: 24
                          156.227.143.0/24 maxlen: 24
                          156.227.145.0/24 maxlen: 24
                          156.231.98.0/24 maxlen: 24
                          156.231.101.0/24 maxlen: 24
                          156.236.76.0/24 maxlen: 24
                          156.242.66.0/24 maxlen: 24
                          156.242.67.0/24 maxlen: 24
                          156.243.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121845 (0x1dbf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 06:46:10 2026 GMT
            Not After : Oct  8 06:46:10 2029 GMT
        Subject: CN=6ac88db8-1b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:45:f3:58:5b:b3:13:f2:2d:59:5d:e3:1f:
                    83:4a:ef:9e:d6:1e:5d:20:74:8f:1e:4c:f6:db:da:
                    6a:54:dc:45:3e:f7:48:99:4f:a9:ac:57:b3:21:6c:
                    97:b7:44:b6:20:af:d8:a1:dd:a3:6f:d8:73:fe:7e:
                    2f:43:c9:71:70:b0:fd:ac:4f:b0:7b:cf:b4:d5:0d:
                    e4:5d:ba:5c:8b:dd:1f:7b:b5:c3:ba:d2:1c:46:c1:
                    5e:17:d8:84:c0:97:aa:0b:71:62:90:9b:56:fe:19:
                    1c:39:d0:e8:1d:f4:d1:8a:b9:01:cb:d2:c1:89:e6:
                    4e:79:a7:f4:72:88:75:37:18:7f:53:91:c3:61:0e:
                    3b:5f:bb:ec:d1:87:fa:46:88:f2:f4:fe:96:4e:6c:
                    7b:92:21:f0:a0:aa:13:8e:d5:b1:36:f3:71:58:c0:
                    4a:29:12:ab:71:75:69:6c:fe:b6:6d:20:63:8c:f2:
                    71:a9:34:74:18:fb:7d:58:21:26:89:6a:f4:2f:91:
                    59:3d:ab:dc:81:04:a0:a2:25:03:e3:92:e8:1c:0a:
                    1a:6c:65:e9:e7:54:b3:cf:ea:56:50:4f:43:5e:38:
                    19:ba:96:12:ce:04:9c:fb:a9:38:67:34:ce:42:3d:
                    8f:17:ee:34:3d:f2:dd:cb:19:fa:ce:3e:27:d6:c7:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F3:97:46:0F:CE:C5:FF:41:5E:FE:33:DE:FD:58:8F:F4:E9:9C:1E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FADFC22C3AD11F19A26C8BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.0.0/24
                  156.227.133.0/24
                  156.227.143.0/24
                  156.227.145.0/24
                  156.231.98.0/24
                  156.231.101.0/24
                  156.236.76.0/24
                  156.242.66.0/23
                  156.243.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:e9:fb:4b:82:f2:1b:08:aa:c2:96:d9:f0:6d:c8:dc:bc:1b:
         21:a4:83:8a:0e:9b:48:8f:53:cf:7d:1f:e9:1f:94:28:0c:66:
         6b:63:17:ac:27:53:9e:fc:cb:fb:8c:4c:16:90:b0:8e:71:63:
         38:d1:a6:1e:59:36:9f:d9:71:78:7d:e2:04:7b:88:40:62:18:
         98:4e:80:92:a2:33:82:2f:3b:12:31:1c:46:a7:24:4b:f6:89:
         5a:24:54:83:17:cc:6d:83:0d:4a:ed:bf:49:2c:12:ff:1a:7f:
         3d:d2:43:08:86:97:33:2b:48:25:80:3a:bd:02:0a:c6:ae:9d:
         19:e7:83:51:0c:93:85:e5:20:47:8d:25:5c:1c:5c:57:11:c1:
         88:86:e2:0b:15:5d:90:61:49:f1:6b:23:18:f3:60:37:c2:69:
         d5:65:e6:93:8e:70:4e:7b:0a:7c:6f:62:a9:97:64:a7:0b:64:
         75:1c:b2:67:e8:3d:35:96:46:6f:90:91:22:e4:2f:9a:d8:55:
         a7:82:4e:ee:d6:fb:42:2d:ff:79:e4:c7:23:29:b4:f0:11:0d:
         bc:49:b5:0f:5f:f7:3a:d0:b0:00:c8:17:33:d7:a3:fe:b3:b1:
         1a:7e:a5:2f:8a:4a:ec:a4:79:12:9c:ba:fa:30:e5:75:b9:4d:
         ec:04:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----