Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B12CEA6B9A511F1B361DDAACE1D38B0.roa
File:                     2B12CEA6B9A511F1B361DDAACE1D38B0.roa (raw, json)
Hash identifier:          h5hDvbvzWvaiho52RhM67tyzUKxjQ+bCB8LJdSuIJ7s=
Subject key identifier:   8B:BA:55:94:A0:D4:DC:52:B2:8A:83:D7:2E:3D:CF:59:40:AA:9C:26
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D914
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B12CEA6B9A511F1B361DDAACE1D38B0.roa
Signing time:             Sat 26 Sep 2026 12:24:07 +0000
ROA not before:           Sat 26 Sep 2026 12:24:03 +0000
ROA not after:            Sun 25 Oct 2026 12:24:03 +0000
asID:                     271355
IP address blocks:        156.236.194.0/24 maxlen: 24
                          156.236.196.0/24 maxlen: 24
                          156.236.197.0/24 maxlen: 24
                          156.236.198.0/24 maxlen: 24
                          156.236.199.0/24 maxlen: 24
                          156.236.200.0/24 maxlen: 24
                          156.236.210.0/24 maxlen: 24
                          156.236.211.0/24 maxlen: 24
                          156.236.212.0/24 maxlen: 24
                          156.236.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 18:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121108 (0x1d914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 12:24:03 2026 GMT
            Not After : Oct 25 12:24:03 2026 GMT
        Subject: CN=6ab7b967-5688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:54:f5:26:bd:8b:d5:33:e1:40:c3:5e:2d:
                    0b:f0:31:4d:39:cc:e1:9b:32:03:55:93:1f:f2:12:
                    4c:3e:19:d9:61:0e:c4:8e:48:80:dc:f1:24:f6:bd:
                    bf:60:56:64:77:f9:70:cf:af:84:96:15:ee:3d:f5:
                    b8:69:92:18:01:e8:15:a7:fe:57:e7:1c:c1:f9:cb:
                    04:b0:44:ae:f8:93:c5:25:e0:80:0f:4b:20:59:76:
                    34:23:0e:b7:96:4e:8e:eb:5f:0d:77:29:0a:df:f4:
                    8c:0d:38:02:7b:54:50:ea:1b:b6:06:c8:b2:c5:34:
                    bc:70:b8:73:3f:2c:bf:53:41:68:a0:bb:43:82:8c:
                    3d:36:35:12:18:14:63:82:53:70:ed:93:d7:c6:a8:
                    4c:f3:f1:86:3b:4d:d0:29:b8:14:85:44:34:f6:62:
                    9f:63:21:8d:45:31:56:b0:2a:de:cf:7d:8d:b2:3d:
                    21:e1:2e:de:cf:c5:51:2b:4b:51:4e:34:f7:41:70:
                    91:5f:1e:0e:30:93:42:09:5a:50:dc:ee:e8:bf:6a:
                    9c:6a:e3:3b:24:63:90:d0:aa:46:58:d6:a1:1c:e9:
                    b6:b2:e5:7e:5f:87:cb:51:3b:a1:09:a8:32:0a:98:
                    3b:ff:d1:d9:11:1d:75:48:0c:46:e1:a7:ba:ce:23:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:55:94:A0:D4:DC:52:B2:8A:83:D7:2E:3D:CF:59:40:AA:9C:26
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B12CEA6B9A511F1B361DDAACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.194.0/24
                  156.236.196.0-156.236.200.255
                  156.236.210.0-156.236.213.255

    Signature Algorithm: sha256WithRSAEncryption
         5a:5b:ab:85:4f:6d:de:78:d3:a9:39:e5:98:ca:39:a4:79:a8:
         38:ac:6d:d9:09:61:26:c3:ac:cb:53:7c:19:b3:7c:ce:61:61:
         48:6c:17:b5:8a:f8:7b:10:38:e9:7f:05:78:04:72:97:47:9f:
         e8:d4:da:72:40:ef:7b:00:04:3e:4b:4c:31:d5:e0:ff:74:9d:
         1d:76:b6:5a:70:66:70:92:7b:c9:34:7b:79:44:65:1f:41:64:
         b9:61:1b:db:bb:22:13:3c:a4:03:1b:df:9b:42:b3:0c:fe:60:
         af:d3:60:e8:9e:f1:2a:4c:92:f0:f9:15:1e:5d:2a:0e:48:51:
         32:ea:e9:2b:5a:89:fa:f3:59:bb:2c:1b:17:e0:ec:24:9d:08:
         6e:9b:ea:84:7d:21:a1:5e:8d:de:43:e9:2b:30:29:d5:a8:da:
         09:03:3f:c4:cc:13:da:d0:f1:d0:c0:e0:16:78:66:0b:3e:b1:
         9a:9d:9a:57:a1:04:fb:49:18:07:3b:b1:be:d5:bb:bc:28:67:
         fe:e3:b2:fd:20:1e:70:61:69:33:b3:44:00:15:b3:61:04:e8:
         f2:9d:aa:53:99:c1:87:c7:26:5e:03:27:e4:ff:9f:f0:ee:a2:
         f0:67:d0:d3:f0:9b:45:df:5c:04:2c:98:41:7a:7d:8a:05:2d:
         52:58:b1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----