Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3956A102B98E11F19B78A516CF1D38B0.roa
File:                     3956A102B98E11F19B78A516CF1D38B0.roa (raw, json)
Hash identifier:          Q+zkiN89gLujjCDimcg0u+hF8r2Doz5UmHwptjKCHCI=
Subject key identifier:   EB:C8:A7:8F:1D:90:B1:28:E9:AD:7E:2B:52:50:B0:DA:FA:F6:DE:60
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3956A102B98E11F19B78A516CF1D38B0.roa
Signing time:             Sat 26 Sep 2026 09:39:53 +0000
ROA not before:           Sat 26 Sep 2026 09:39:49 +0000
ROA not after:            Sun 01 Nov 2026 09:39:49 +0000
asID:                     44559
IP address blocks:        156.233.53.0/24 maxlen: 24
                          156.233.55.0/24 maxlen: 24
                          156.233.57.0/24 maxlen: 24
                          156.233.59.0/24 maxlen: 24
                          156.233.62.0/24 maxlen: 24
                          156.233.67.0/24 maxlen: 24
                          156.233.81.0/24 maxlen: 24
                          156.233.82.0/24 maxlen: 24
                          156.233.83.0/24 maxlen: 24
                          156.233.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121066 (0x1d8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 09:39:49 2026 GMT
            Not After : Nov  1 09:39:49 2026 GMT
        Subject: CN=6ab792e9-7bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:2b:7d:8b:e6:f7:82:22:ec:87:08:39:0c:
                    76:55:54:97:5f:fe:c1:9c:e8:2c:e9:cc:47:51:c6:
                    2b:ed:68:67:26:19:22:6a:a9:a0:b9:5d:72:51:6e:
                    85:dc:fb:4f:0d:31:aa:ef:79:74:de:17:21:f7:72:
                    e2:36:69:cf:f3:6c:dc:e2:95:ab:de:08:3b:71:6a:
                    ee:1d:9e:42:1a:87:c7:3e:ac:12:7c:aa:c6:71:bb:
                    3f:f3:4d:6b:0f:81:37:90:b5:63:e7:09:bc:21:de:
                    22:fa:ce:68:5a:e9:3f:7f:cd:91:c0:f4:6f:2f:b3:
                    d4:14:99:a1:d8:7b:58:0f:69:33:65:1d:94:cf:90:
                    45:6b:bf:ff:56:16:42:e2:14:33:f9:60:0b:bd:99:
                    ae:cd:0b:c6:a9:d9:3b:dc:82:f9:58:49:72:17:2a:
                    36:71:e7:fa:ce:74:eb:3b:a0:1b:3a:4b:57:5a:f6:
                    2d:ac:f2:ae:cd:4a:9a:eb:33:66:8d:07:47:4f:20:
                    1c:45:71:e4:b0:76:83:c9:ae:ca:f8:b8:97:69:1d:
                    48:cc:97:6f:a9:c9:0f:b0:bb:ec:d5:1c:0a:c3:c7:
                    cb:44:16:ec:50:08:2a:24:5c:89:e5:e9:8b:82:67:
                    47:7d:5c:93:a7:0c:4f:57:c4:22:eb:c1:9f:cf:e9:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C8:A7:8F:1D:90:B1:28:E9:AD:7E:2B:52:50:B0:DA:FA:F6:DE:60
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3956A102B98E11F19B78A516CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.53.0/24
                  156.233.55.0/24
                  156.233.57.0/24
                  156.233.59.0/24
                  156.233.62.0/24
                  156.233.67.0/24
                  156.233.81.0-156.233.83.255
                  156.233.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:4a:a2:ea:6a:8c:62:ef:8c:97:e2:04:09:c1:9e:d5:ae:e2:
         57:21:b1:62:dd:af:87:86:b2:c3:1f:c9:eb:72:62:27:27:5b:
         2c:f3:a3:b7:4b:cf:86:18:21:9b:f0:e9:7d:0b:71:c6:80:3a:
         34:52:56:81:6b:63:d1:39:ac:93:ce:f3:9d:4b:84:78:42:11:
         6a:ca:66:da:81:f3:10:cc:f2:9c:98:49:9d:f0:61:bb:31:b3:
         73:78:3a:93:cf:ab:5f:3a:d9:64:b5:a1:d1:71:b7:9b:f6:f6:
         88:31:b5:5c:8c:38:9c:5b:ea:aa:f9:ec:be:31:7d:45:0f:53:
         ae:cc:d0:ff:fd:93:ef:7e:65:0c:68:51:cd:b1:5e:a3:b8:9e:
         12:13:40:f0:91:09:d7:f6:9c:ef:bf:2a:a2:da:37:6c:bc:3b:
         95:98:7d:3d:46:45:55:c8:9f:9c:62:94:82:37:3a:c3:c2:35:
         62:c1:dc:c5:1d:7d:0d:21:60:76:b7:0f:8f:99:f8:a7:e1:95:
         09:84:9b:90:fe:24:bd:19:d8:e6:fd:3c:39:12:1e:27:2e:31:
         50:10:c0:d8:f5:cd:bc:a6:40:d0:60:36:9c:67:51:c7:25:4b:
         fd:ea:1d:dd:d3:c8:33:21:44:d8:a0:bc:ef:49:72:57:04:81:
         67:25:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----