Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AEACDA4C94311F1ADC1E6A9CE1D38B0.roa
File:                     2AEACDA4C94311F1ADC1E6A9CE1D38B0.roa (raw, json)
Hash identifier:          QAhfNXamt9rfenS2sGNPvHQuSAsKEDa/LerNs3AxqMY=
Subject key identifier:   24:69:46:5D:6C:4D:D8:1D:52:CD:3A:5F:20:7F:11:E5:FC:FD:66:CC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AEACDA4C94311F1ADC1E6A9CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 09:22:55 +0000
ROA not before:           Fri 16 Oct 2026 09:22:50 +0000
ROA not after:            Fri 23 Oct 2026 09:22:50 +0000
asID:                     151206
IP address blocks:        156.230.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122354 (0x1ddf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 09:22:50 2026 GMT
            Not After : Oct 23 09:22:50 2026 GMT
        Subject: CN=6ad1ecef-7cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:40:c6:b4:9f:97:c8:d6:1c:69:89:a2:d8:95:
                    5a:f8:f3:1f:31:00:66:ae:73:4c:b3:ba:52:22:ca:
                    83:19:97:8a:9f:e4:60:98:c4:b0:d1:77:5d:9c:78:
                    ae:76:a4:ed:60:d0:80:ce:8a:05:a5:07:f3:7a:44:
                    1a:70:4b:57:06:b1:b1:aa:a9:a8:b8:8e:53:6e:b1:
                    00:ab:b9:f6:dc:77:3a:88:c6:9b:c3:6a:7a:8a:ac:
                    e7:35:b3:a7:c2:ec:a7:17:6d:19:fc:67:ec:97:56:
                    e8:27:75:e0:1e:9f:c6:f2:7c:04:47:d1:34:cc:6e:
                    7e:cd:8b:9f:2e:26:19:b4:39:77:98:84:d5:b6:a5:
                    47:e3:7f:9b:21:75:dc:5e:42:b1:58:4d:ef:f8:a4:
                    6a:4a:87:c8:15:34:bf:a4:86:d5:b1:ef:5a:4b:8e:
                    32:c1:a5:90:c4:e0:fb:4c:3a:6f:87:c8:f5:66:fc:
                    c7:14:46:9d:5d:de:69:87:ef:bc:2b:3e:06:64:9b:
                    f4:6c:4c:fb:59:b7:82:1b:4d:2f:ac:0b:51:18:3d:
                    86:40:10:01:ed:4e:2b:41:3f:f1:78:a8:1e:04:71:
                    9d:7d:e3:d1:96:95:23:57:45:55:de:34:20:b0:f2:
                    e8:60:82:ad:37:15:6f:db:23:e3:a0:0d:ad:46:c7:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:69:46:5D:6C:4D:D8:1D:52:CD:3A:5F:20:7F:11:E5:FC:FD:66:CC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AEACDA4C94311F1ADC1E6A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:15:8b:c7:28:50:37:71:63:23:63:bb:b4:05:d2:0c:45:
         90:83:b5:c2:18:59:06:de:39:24:fd:1d:b5:5f:1c:1a:a8:5c:
         e7:32:51:3e:53:db:2c:c6:8b:ac:a4:e7:d5:a0:6b:75:b2:12:
         4b:96:54:9d:38:11:28:e4:95:9a:76:05:c6:b6:71:51:89:ea:
         3e:be:1f:8d:9b:b9:cb:e8:b7:91:df:57:29:fb:4b:57:87:80:
         e0:a3:1e:d6:a5:b2:c5:8d:05:72:8c:09:dc:59:c7:7e:93:85:
         3f:08:d8:c7:a4:fa:6d:7e:c3:f9:27:07:d3:7f:67:b7:6e:23:
         c6:9d:50:f6:53:dc:7e:b9:d8:68:ab:6f:b3:41:78:68:98:85:
         7e:73:95:b1:38:e4:80:c4:19:a0:5a:5b:22:c4:09:2b:c3:5c:
         aa:aa:2c:fd:f2:39:c3:7f:58:63:c0:d3:19:d0:9c:24:7b:10:
         79:a0:a3:4e:97:7d:67:c4:cd:ee:ee:5e:a7:3d:e0:7f:f4:f8:
         20:ed:37:6f:54:fd:53:dc:35:38:61:e1:2f:51:72:1b:93:56:
         d9:ff:e6:7e:d2:13:71:ec:ca:66:e3:2b:03:69:d7:a7:0e:6c:
         56:85:4f:20:89:cc:59:f0:3c:30:9a:28:99:e4:a3:1f:3a:f2:
         31:9e:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----