Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ECF56069AE411F182EF860ECF1D38B0.roa
File:                     3ECF56069AE411F182EF860ECF1D38B0.roa (raw, json)
Hash identifier:          PL4tAoEUp2g1NZfmi6JBBYVnw+VEdL6MAquoc+z+2us=
Subject key identifier:   5F:B3:4F:81:04:3B:95:ED:BB:74:89:94:9E:19:E6:7D:F1:62:95:26
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ECF56069AE411F182EF860ECF1D38B0.roa
Signing time:             Tue 18 Aug 2026 09:07:32 +0000
ROA not before:           Tue 18 Aug 2026 09:07:28 +0000
ROA not after:            Fri 17 Aug 2029 09:07:28 +0000
asID:                     17561
IP address blocks:        156.236.96.0/24 maxlen: 24
                          156.236.97.0/24 maxlen: 24
                          156.236.98.0/24 maxlen: 24
                          156.236.99.0/24 maxlen: 24
                          156.236.108.0/24 maxlen: 24
                          156.236.109.0/24 maxlen: 24
                          156.236.110.0/24 maxlen: 24
                          156.236.111.0/24 maxlen: 24
                          156.236.112.0/24 maxlen: 24
                          156.236.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118161 (0x1cd91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 09:07:28 2026 GMT
            Not After : Aug 17 09:07:28 2029 GMT
        Subject: CN=6a8420d4-4350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:0d:71:bd:30:90:37:1d:e2:31:bf:dc:1e:
                    21:40:c3:17:72:42:24:ae:d8:b6:b4:41:c0:e4:5e:
                    e3:b9:28:73:bb:99:d3:32:54:2d:eb:68:0e:84:71:
                    4f:67:5a:37:66:96:96:2e:9e:f5:d3:66:35:4d:d6:
                    d0:61:91:e7:61:cf:13:c3:5c:14:92:7f:62:39:67:
                    f2:b9:aa:10:37:97:6f:65:9a:d3:d0:c0:b1:55:05:
                    79:6b:04:b3:67:36:1d:f0:bb:91:f1:c5:e1:31:be:
                    3b:ef:80:81:f5:74:1e:1d:02:81:78:ff:ff:6c:31:
                    46:16:5c:cc:ea:41:f2:83:05:1f:77:a7:d0:f5:19:
                    6c:2b:76:e5:24:39:4f:d4:04:b4:88:ba:d4:88:ca:
                    44:6a:cf:fc:62:79:64:8c:2d:3f:e1:c4:0f:ba:23:
                    46:14:b0:d3:36:cc:e9:a6:cc:15:27:5a:44:d8:a5:
                    6e:9d:ad:c0:57:5f:a7:f4:31:ec:2d:18:90:d5:a3:
                    35:98:d4:38:08:6b:1d:1b:1f:65:9c:3c:f5:46:13:
                    e8:3b:4b:30:68:91:89:ca:1f:4a:a9:55:ab:65:51:
                    1a:ea:43:6d:3f:d9:ea:a0:cb:02:b6:08:9f:6b:ab:
                    7c:5b:23:e0:8e:3a:f7:f2:e9:0a:6e:5f:37:84:1b:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B3:4F:81:04:3B:95:ED:BB:74:89:94:9E:19:E6:7D:F1:62:95:26
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ECF56069AE411F182EF860ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.96.0/22
                  156.236.108.0-156.236.113.255

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:f2:df:db:83:d3:07:79:ad:27:44:9b:95:28:45:ec:f9:
         b8:fb:5c:35:2f:13:e6:d1:92:1d:43:31:3c:f7:82:07:68:b8:
         78:96:8f:06:20:7b:e5:b1:63:28:dd:65:25:57:a6:6b:67:f9:
         3b:36:f5:d8:cb:b5:c9:0a:8e:0d:8b:cf:64:24:cf:b1:59:fc:
         dc:e6:7d:f7:c0:06:63:f0:99:e9:ae:c9:88:56:ed:e8:8d:e0:
         25:0b:bd:4b:46:29:d7:3f:f4:cb:89:f3:11:ff:00:b6:e8:67:
         e5:60:b2:cd:a0:88:3f:6a:a0:ba:7d:d0:f1:7e:3f:51:dc:99:
         d7:20:0a:b3:f7:cb:62:2c:c2:47:ab:70:ad:a6:7b:e0:2e:44:
         61:aa:d8:f9:a6:ea:32:54:35:33:06:58:69:0a:0b:93:ab:52:
         dc:43:55:a1:39:45:36:5c:df:81:7c:02:71:cb:63:a1:24:6d:
         e0:39:07:b1:a4:40:e9:9e:62:ac:8f:c4:dc:b4:11:73:3e:d8:
         2c:ad:d4:a4:aa:1d:58:b2:a0:99:9a:df:15:79:b3:05:bd:57:
         e9:f9:8a:06:58:ea:5f:cc:f5:0b:75:54:80:8c:56:81:38:e7:
         f2:c9:98:f8:07:d7:2c:76:7f:c8:f7:14:d9:56:b6:21:00:62:
         c7:0f:d0:7d
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAc2RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE4MDkwNzI4WhcNMjkwODE3MDkwNzI4WjAYMRYw
FAYDVQQDEw02YTg0MjBkNC00MzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0LkNcb0wkDcd4jG/3B4hQMMXckIkrti2tEHA5F7juShzu5nTMlQt62gO
hHFPZ1o3ZpaWLp7102Y1TdbQYZHnYc8Tw1wUkn9iOWfyuaoQN5dvZZrT0MCxVQV5
awSzZzYd8LuR8cXhMb4774CB9XQeHQKBeP//bDFGFlzM6kHygwUfd6fQ9RlsK3bl
JDlP1AS0iLrUiMpEas/8YnlkjC0/4cQPuiNGFLDTNszppswVJ1pE2KVuna3AV1+n
9DHsLRiQ1aM1mNQ4CGsdGx9lnDz1RhPoO0swaJGJyh9KqVWrZVEa6kNtP9nqoMsC
tgifa6t8WyPgjjr38ukKbl83hBseGQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFF+z
T4EEO5Xtu3SJlJ4Z5n3xYpUmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRUNGNTYwNjlBRTQxMUYxODJFRjg2MEVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCnOxgMAwDBAKc7GwDBAGc7HAw
DQYJKoZIhvcNAQELBQADggEBAHWo8t/bg9MHea0nRJuVKEXs+bj7XDUvE+bRkh1D
MTz3ggdouHiWjwYge+WxYyjdZSVXpmtn+Ts29djLtckKjg2Lz2Qkz7FZ/NzmfffA
BmPwmemuyYhW7eiN4CULvUtGKdc/9MuJ8xH/ALboZ+Vgss2giD9qoLp90PF+P1Hc
mdcgCrP3y2IswkercK2me+AuRGGq2Pmm6jJUNTMGWGkKC5OrUtxDVaE5RTZc34F8
AnHLY6EkbeA5B7GkQOmeYqyPxNy0EXM+2Cyt1KSqHViyoJma3xV5swW9V+n5igZY
6l/M9Qt1VICMVoE45/LJmPgH1yx2f8j3FNlWtiEAYscP0H0=
-----END CERTIFICATE-----