Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445FBEC29FA211F188412309CF1D38B0.roa
File:                     445FBEC29FA211F188412309CF1D38B0.roa (raw, json)
Hash identifier:          XiSRwFqIW7n8FQmtyUkArwAzoNcFJZARL9e3VtOsVK0=
Subject key identifier:   B6:C9:77:CB:44:46:27:A6:13:90:51:19:BC:EE:51:8B:69:87:F9:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D085
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445FBEC29FA211F188412309CF1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:57:51 +0000
ROA not before:           Mon 24 Aug 2026 09:57:47 +0000
ROA not after:            Fri 02 Oct 2026 09:57:47 +0000
asID:                     44559
IP address blocks:        156.233.53.0/24 maxlen: 24
                          156.233.55.0/24 maxlen: 24
                          156.233.57.0/24 maxlen: 24
                          156.233.59.0/24 maxlen: 24
                          156.233.62.0/24 maxlen: 24
                          156.233.67.0/24 maxlen: 24
                          156.233.81.0/24 maxlen: 24
                          156.233.82.0/24 maxlen: 24
                          156.233.83.0/24 maxlen: 24
                          156.233.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118917 (0x1d085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 09:57:47 2026 GMT
            Not After : Oct  2 09:57:47 2026 GMT
        Subject: CN=6a8c159f-c9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:00:97:de:10:af:30:9d:3e:02:2e:93:2e:ed:
                    93:d9:4a:d1:4e:31:a7:1c:72:a5:f1:c4:c8:5d:4d:
                    a5:07:4f:42:ec:13:b5:6d:bd:5a:68:f4:a4:06:f2:
                    66:59:4a:49:7b:2c:ac:b8:d6:25:5b:52:0c:0c:77:
                    95:70:10:80:25:5f:37:6c:de:fa:ef:97:c8:66:b0:
                    fc:cc:06:d3:19:99:12:eb:60:3d:97:77:19:21:34:
                    80:f0:f4:70:cf:e8:ca:72:e3:be:13:55:f4:83:d7:
                    ad:d0:5e:d7:4b:23:72:49:f6:2f:be:16:a0:bd:fa:
                    2b:f5:1d:5b:66:ac:41:7b:79:ca:11:70:6b:77:8c:
                    85:e5:da:a9:af:1b:bd:54:15:86:ab:7a:f9:ae:f7:
                    9e:80:cc:d5:54:db:aa:7d:33:67:61:eb:f4:04:64:
                    b8:6f:67:02:cd:41:30:c7:21:4d:03:5a:80:a6:a1:
                    3d:0d:0d:cc:e0:fb:de:1f:76:be:33:55:43:1c:5a:
                    90:6a:ad:82:b3:71:ff:4b:85:1c:b5:d3:24:ea:ee:
                    15:9a:2b:d5:6e:cb:90:31:9f:97:9a:74:6c:b6:88:
                    bc:7b:7b:00:1d:e7:33:28:ed:68:bf:26:a6:e1:20:
                    b6:c1:d1:fa:3f:84:26:9a:96:56:9c:bd:c8:2a:8a:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C9:77:CB:44:46:27:A6:13:90:51:19:BC:EE:51:8B:69:87:F9:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445FBEC29FA211F188412309CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.53.0/24
                  156.233.55.0/24
                  156.233.57.0/24
                  156.233.59.0/24
                  156.233.62.0/24
                  156.233.67.0/24
                  156.233.81.0-156.233.83.255
                  156.233.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:b9:05:49:80:15:a6:a6:2f:fc:5c:86:12:e7:37:db:b2:
         a6:c5:d2:49:4c:d1:4f:fa:45:a7:d8:37:03:0e:fc:73:8c:6a:
         57:0e:6c:8a:39:ae:87:c8:be:98:29:f3:91:0e:84:61:6c:bc:
         fa:e0:0a:ea:34:28:13:d7:3e:3b:47:fb:61:0e:af:92:c4:92:
         77:cb:88:07:d9:0f:96:cb:bd:6f:9d:5f:2e:fd:ae:5d:47:b5:
         1f:80:3a:8a:67:5c:ee:d9:bf:d1:e0:e7:66:f2:c6:5a:f1:ca:
         89:3f:ea:de:4b:8d:a1:1f:d1:e5:65:a4:45:88:9b:8c:b5:93:
         f9:60:29:a3:ca:ca:37:26:fd:fd:16:e8:b4:18:d3:da:f1:d9:
         5d:fb:8f:f2:fa:f1:1d:0a:a4:65:0e:ca:4c:80:18:ba:72:3a:
         15:57:0d:64:22:2b:7d:e7:08:be:03:0d:ea:9a:5b:d0:0d:ca:
         bb:03:1f:f2:3f:8e:7e:0a:0b:fd:cf:2b:23:80:bc:2e:39:03:
         f1:86:5a:b1:a8:22:a2:f3:26:d3:a6:0a:23:0d:00:52:ff:08:
         66:88:91:6d:8a:2d:6b:58:32:98:8f:d1:82:00:26:aa:c5:d7:
         39:ad:c5:82:c3:81:0f:98:d1:08:62:d7:b6:7b:65:87:76:6d:
         c7:5a:41:29
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIDAdCFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI0MDk1NzQ3WhcNMjYxMDAyMDk1NzQ3WjAYMRYw
FAYDVQQDEw02YThjMTU5Zi1jOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3gCX3hCvMJ0+Ai6TLu2T2UrRTjGnHHKl8cTIXU2lB09C7BO1bb1aaPSk
BvJmWUpJeyysuNYlW1IMDHeVcBCAJV83bN7675fIZrD8zAbTGZkS62A9l3cZITSA
8PRwz+jKcuO+E1X0g9et0F7XSyNySfYvvhagvfor9R1bZqxBe3nKEXBrd4yF5dqp
rxu9VBWGq3r5rveegMzVVNuqfTNnYev0BGS4b2cCzUEwxyFNA1qApqE9DQ3M4Pve
H3a+M1VDHFqQaq2Cs3H/S4UctdMk6u4VmivVbsuQMZ+XmnRstoi8e3sAHeczKO1o
vyam4SC2wdH6P4QmmpZWnL3IKoo7twIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFLbJ
d8tERiemE5BRGbzuUYtph/kBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NDVGQkVDMjlGQTIxMUYxODg0MTIzMDlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAnOk1AwQAnOk3AwQAnOk5AwQA
nOk7AwQAnOk+AwQAnOlDMAwDBACc6VEDBAKc6VADBACc6cEwDQYJKoZIhvcNAQEL
BQADggEBACTCuQVJgBWmpi/8XIYS5zfbsqbF0klM0U/6RafYNwMO/HOMalcObIo5
rofIvpgp85EOhGFsvPrgCuo0KBPXPjtH+2EOr5LEknfLiAfZD5bLvW+dXy79rl1H
tR+AOopnXO7Zv9Hg52byxlrxyok/6t5LjaEf0eVlpEWIm4y1k/lgKaPKyjcm/f0W
6LQY09rx2V37j/L68R0KpGUOykyAGLpyOhVXDWQiK33nCL4DDeqaW9ANyrsDH/I/
jn4KC/3PKyOAvC45A/GGWrGoIqLzJtOmCiMNAFL/CGaIkW2KLWtYMpiP0YIAJqrF
1zmtxYLDgQ+Y0Qhi17Z7ZYd2bcdaQSk=
-----END CERTIFICATE-----