Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/383CED9AA83011F1A26125DDCE1D38B0.roa
File:                     383CED9AA83011F1A26125DDCE1D38B0.roa (raw, json)
Hash identifier:          cq4IbfyjmhzJr12n3nSBB3Tl/9Y0hl+cMYD9Bw3Y6rg=
Subject key identifier:   C8:AE:92:5C:5D:7F:61:47:9E:5A:E0:D2:91:6D:14:CF:BC:48:34:40
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D329
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/383CED9AA83011F1A26125DDCE1D38B0.roa
Signing time:             Fri 04 Sep 2026 07:14:08 +0000
ROA not before:           Fri 04 Sep 2026 07:14:04 +0000
ROA not after:            Sat 03 Oct 2026 07:14:04 +0000
asID:                     11427
IP address blocks:        156.243.184.0/22 maxlen: 24
                          156.243.236.0/22 maxlen: 24
                          156.244.132.0/22 maxlen: 24
                          156.244.200.0/22 maxlen: 24
                          156.244.212.0/22 maxlen: 24
                          156.248.16.0/22 maxlen: 24
                          156.248.88.0/22 maxlen: 24
                          156.249.68.0/22 maxlen: 24
                          156.249.84.0/22 maxlen: 24
                          156.249.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119593 (0x1d329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  4 07:14:04 2026 GMT
            Not After : Oct  3 07:14:04 2026 GMT
        Subject: CN=6a9a6fc0-de81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:e6:77:37:ab:0a:a5:e2:fb:f2:7a:73:85:
                    4d:c3:28:63:77:98:95:3e:54:1b:a2:74:56:1c:0d:
                    0a:32:af:8d:68:2a:bd:00:86:d4:f8:83:4a:03:bd:
                    91:e5:15:cf:d5:3d:89:0b:32:9b:97:df:a6:a5:6a:
                    ee:6c:04:2c:c0:1f:ba:58:d6:df:f6:0d:02:2c:4f:
                    43:55:88:1c:b6:e4:15:50:2a:53:20:7f:e3:0b:b0:
                    ef:95:22:49:75:98:82:76:fc:bd:e2:7f:4c:32:7c:
                    c7:e6:2d:15:5c:e0:14:a6:21:f0:27:6d:39:78:e2:
                    54:28:9d:7b:74:65:14:03:44:de:f3:2e:a3:7b:fa:
                    01:4c:54:9e:9e:ea:20:a6:f0:3e:55:f8:cf:e4:f4:
                    70:80:9a:e7:4e:b5:b6:93:64:1d:f0:08:5c:23:d9:
                    67:ea:d9:b5:3d:19:8b:90:6a:d4:a0:50:a4:d0:d1:
                    8b:10:51:82:05:64:a1:b2:cf:30:a9:17:47:39:b8:
                    ee:09:a3:56:76:d7:e7:da:76:f5:32:6b:35:f0:2e:
                    46:6e:bd:02:dc:6c:0e:7b:95:77:a8:48:ff:2d:cf:
                    20:d9:ed:14:8f:c2:b2:c3:dc:57:b3:4b:00:d4:e9:
                    f7:c3:e8:f2:f3:17:3e:27:ec:cd:13:0f:05:a2:a0:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AE:92:5C:5D:7F:61:47:9E:5A:E0:D2:91:6D:14:CF:BC:48:34:40
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/383CED9AA83011F1A26125DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.184.0/22
                  156.243.236.0/22
                  156.244.132.0/22
                  156.244.200.0/22
                  156.244.212.0/22
                  156.248.16.0/22
                  156.248.88.0/22
                  156.249.68.0/22
                  156.249.84.0/22
                  156.249.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:7f:af:f6:89:51:9e:a2:65:4c:be:69:3e:ac:70:13:41:c9:
         65:78:3c:f8:0e:38:84:70:80:72:9b:31:b3:d5:16:ce:5d:0f:
         92:6b:c3:fe:1e:65:0e:b0:8d:a0:1f:64:47:c1:59:79:42:f7:
         73:95:f9:49:85:11:5a:a0:a9:04:ed:ea:c6:c5:3a:6e:51:86:
         85:29:01:f5:eb:8a:4e:e7:e2:ea:ac:bc:1d:6d:08:70:d2:74:
         3a:43:bf:26:8a:55:37:34:b7:ca:56:35:f6:93:3d:c1:fd:5a:
         5e:14:89:3e:03:48:f7:d2:69:94:5b:23:e4:59:14:83:ba:e6:
         99:5c:ba:2b:11:c9:c0:53:d0:ac:20:e3:e6:c0:b1:10:45:f5:
         05:0f:01:dc:38:1e:08:43:b6:a6:7e:22:db:ca:c0:c7:79:c6:
         fb:20:ae:cc:5d:cb:fd:0c:36:7b:c6:6f:f4:53:cd:eb:c7:32:
         1c:4a:4f:3f:b7:98:34:1e:37:4d:61:e7:8f:de:b8:12:05:72:
         97:1d:a1:12:55:12:ee:a9:32:8a:68:54:a2:96:16:b6:8f:54:
         e6:ed:f7:46:74:69:01:0a:a8:68:a0:23:d3:cb:43:fd:0b:98:
         d7:2d:d4:8d:4d:5c:3d:b9:a5:4b:26:32:31:77:47:a1:9d:27:
         06:1e:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----