Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BEF7D5496E611F197BBA8DCCE1D38B0.roa
File:                     4BEF7D5496E611F197BBA8DCCE1D38B0.roa (raw, json)
Hash identifier:          q8McX8pGVc0D1xwZRZ5Lx+twoex9hTYUQwKXzJp1uJI=
Subject key identifier:   98:12:3A:29:28:C8:E4:78:77:37:03:A7:92:45:85:77:E6:8E:4E:86
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BEF7D5496E611F197BBA8DCCE1D38B0.roa
Signing time:             Thu 13 Aug 2026 07:12:09 +0000
ROA not before:           Thu 13 Aug 2026 07:12:05 +0000
ROA not after:            Thu 03 Sep 2026 07:12:05 +0000
asID:                     17497
IP address blocks:        156.248.80.0/21 maxlen: 24
                          156.248.80.0/24 maxlen: 24
                          156.248.81.0/24 maxlen: 24
                          156.248.82.0/24 maxlen: 24
                          156.248.83.0/24 maxlen: 24
                          156.248.84.0/24 maxlen: 24
                          156.248.85.0/24 maxlen: 24
                          156.248.86.0/24 maxlen: 24
                          156.248.87.0/24 maxlen: 24
                          156.255.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117849 (0x1cc59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 07:12:05 2026 GMT
            Not After : Sep  3 07:12:05 2026 GMT
        Subject: CN=6a7d6e49-0514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:00:3f:82:0a:49:2f:be:19:88:55:5a:63:
                    ab:39:5b:d3:eb:ee:4d:8d:81:6a:38:b0:7f:cd:7d:
                    72:9f:5d:b4:db:d9:97:64:be:df:09:36:c6:4b:95:
                    0f:a1:81:e4:50:23:b5:2c:8f:33:ba:ca:9b:fa:21:
                    4e:29:47:86:a8:99:a2:ab:9b:fb:20:6c:64:01:06:
                    3e:6a:25:1a:8e:c3:4a:91:15:21:f2:f6:99:b7:e8:
                    37:e0:92:48:70:be:7f:5d:22:63:0f:d8:45:08:ec:
                    07:56:18:da:db:83:f3:ee:05:73:f4:fb:c6:e7:7f:
                    82:64:16:06:10:17:9b:ed:f4:42:d1:99:2b:97:b8:
                    c7:39:7e:76:86:6f:0c:8c:29:06:4e:a1:26:88:d0:
                    ac:db:a5:3a:6f:7d:14:3b:72:dd:44:eb:af:49:82:
                    d0:6d:b1:25:89:76:52:06:9d:0f:c8:33:26:8a:32:
                    ff:2d:08:35:6d:f9:47:e1:89:9e:f3:af:18:2a:fa:
                    07:31:dd:fc:df:85:d5:e8:02:d9:1e:e6:97:68:b8:
                    45:01:d6:13:fb:97:b3:bc:a8:0d:84:ca:1f:d3:14:
                    b2:59:86:82:de:6d:c9:91:44:01:77:68:1e:eb:86:
                    98:79:23:9b:c5:94:d8:5e:61:e7:bb:0f:98:12:89:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:3A:29:28:C8:E4:78:77:37:03:A7:92:45:85:77:E6:8E:4E:86
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BEF7D5496E611F197BBA8DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.80.0/21
                  156.255.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:a6:65:2c:17:96:e0:d4:a3:74:c1:37:88:f4:4a:35:64:
         f2:4a:8d:ef:f6:0a:22:ed:f2:16:8c:5d:4b:7a:1d:d3:0d:31:
         04:b5:12:2b:2e:d3:bf:8b:eb:19:f7:00:fd:94:70:88:3d:03:
         ed:48:7e:cb:2c:06:a3:c5:d0:de:07:22:9f:66:e3:de:ef:12:
         c0:99:e0:b0:ca:46:09:74:fa:0d:25:2b:a5:8c:00:ab:d3:49:
         59:49:64:c9:c9:d4:f5:d0:90:fa:b3:1e:f7:f7:80:ab:c0:b6:
         fd:e7:d1:81:16:c8:e7:96:d8:50:11:ea:d3:26:56:fd:bd:e6:
         02:10:8f:1d:be:d0:d2:c0:f0:2d:50:ab:78:0f:8f:0f:63:1e:
         b3:77:dd:8f:a4:10:81:65:38:34:3e:b5:ef:8c:f3:85:92:f7:
         e4:f4:ea:51:37:d1:f0:4e:a2:e2:6a:d3:c6:82:80:85:fc:9c:
         f3:79:28:17:78:87:92:ec:0a:d0:70:11:72:96:05:03:d5:bd:
         86:3c:11:7b:7c:57:41:50:cb:27:a2:b9:e2:e5:6b:92:e2:39:
         07:25:5f:af:aa:12:c7:2d:bd:d8:91:a3:9d:d6:c0:2b:f9:70:
         39:98:73:ab:d9:cf:b9:c3:9c:c4:5d:40:c9:f5:81:de:e5:4b:
         e6:79:9c:de
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAcxZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEzMDcxMjA1WhcNMjYwOTAzMDcxMjA1WjAYMRYw
FAYDVQQDEw02YTdkNmU0OS0wNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxs8AP4IKSS++GYhVWmOrOVvT6+5NjYFqOLB/zX1yn12029mXZL7fCTbG
S5UPoYHkUCO1LI8zusqb+iFOKUeGqJmiq5v7IGxkAQY+aiUajsNKkRUh8vaZt+g3
4JJIcL5/XSJjD9hFCOwHVhja24Pz7gVz9PvG53+CZBYGEBeb7fRC0Zkrl7jHOX52
hm8MjCkGTqEmiNCs26U6b30UO3LdROuvSYLQbbEliXZSBp0PyDMmijL/LQg1bflH
4Yme868YKvoHMd3834XV6ALZHuaXaLhFAdYT+5ezvKgNhMof0xSyWYaC3m3JkUQB
d2ge64aYeSObxZTYXmHnuw+YEomFzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgS
OikoyOR4dzcDp5JFhXfmjk6GMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QkVGN0Q1NDk2RTYxMUYxOTdCQkE4RENDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDnPhQAwQAnP8VMA0GCSqGSIb3
DQEBCwUAA4IBAQBNCaZlLBeW4NSjdME3iPRKNWTySo3v9goi7fIWjF1Leh3TDTEE
tRIrLtO/i+sZ9wD9lHCIPQPtSH7LLAajxdDeByKfZuPe7xLAmeCwykYJdPoNJSul
jACr00lZSWTJydT10JD6sx7394CrwLb959GBFsjnlthQEerTJlb9veYCEI8dvtDS
wPAtUKt4D48PYx6zd92PpBCBZTg0PrXvjPOFkvfk9OpRN9HwTqLiatPGgoCF/Jzz
eSgXeIeS7ArQcBFylgUD1b2GPBF7fFdBUMsnorni5WuS4jkHJV+vqhLHLb3YkaOd
1sAr+XA5mHOr2c+5w5zEXUDJ9YHe5UvmeZze
-----END CERTIFICATE-----