Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/518BA1DCC49C11F1B16AAACDCE1D38B0.roa
File:                     518BA1DCC49C11F1B16AAACDCE1D38B0.roa (raw, json)
Hash identifier:          uDr2G+JzawjWVBc6DOHHzjNT5jeSWIDH6AADxaM71Sg=
Subject key identifier:   1C:14:A3:9E:36:9F:E2:AF:7E:2E:96:CB:BD:D7:66:97:67:1E:CE:7B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/518BA1DCC49C11F1B16AAACDCE1D38B0.roa
Signing time:             Sat 10 Oct 2026 11:18:29 +0000
ROA not before:           Sat 10 Oct 2026 11:18:24 +0000
ROA not after:            Tue 17 Nov 2026 11:18:24 +0000
asID:                     22773
IP address blocks:        156.242.241.0/24 maxlen: 24
                          156.242.242.0/24 maxlen: 24
                          156.242.243.0/24 maxlen: 24
                          156.242.244.0/24 maxlen: 24
                          156.242.245.0/24 maxlen: 24
                          156.242.246.0/24 maxlen: 24
                          156.242.247.0/24 maxlen: 24
                          156.242.248.0/24 maxlen: 24
                          156.242.249.0/24 maxlen: 24
                          156.243.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121960 (0x1dc68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 11:18:24 2026 GMT
            Not After : Nov 17 11:18:24 2026 GMT
        Subject: CN=6aca1f05-44b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:2b:71:d5:87:d1:91:d1:e1:26:3c:4d:a9:
                    55:4f:40:eb:f2:d3:b4:ad:7c:bf:66:3d:85:fa:27:
                    bf:65:d8:ae:2d:00:d7:c6:a9:0a:8e:85:7b:f2:bf:
                    0b:e7:33:85:c5:e6:77:61:bd:43:27:30:16:2d:8d:
                    a4:c7:98:cb:2d:18:60:3d:44:13:07:f6:ad:38:92:
                    fc:f6:34:e4:00:ec:27:13:2e:4f:31:74:26:f1:c7:
                    24:01:e3:56:fd:ae:5d:84:44:c9:59:f6:1c:96:3b:
                    71:2d:c6:e8:b7:08:5c:0e:4c:77:1e:64:3a:22:36:
                    de:02:a9:6f:a2:a7:0b:a2:93:77:ea:15:35:ca:11:
                    af:e8:e9:9d:83:e7:3b:c8:ed:05:d1:b8:05:7f:e0:
                    87:bc:5f:2d:b5:ae:a9:69:41:7e:3b:85:ba:2d:04:
                    e8:da:97:e3:2c:b4:13:2d:13:85:da:5f:20:6d:fd:
                    d9:1b:49:0c:85:56:51:45:cb:0c:83:d5:c5:49:03:
                    00:04:f3:cd:d6:ad:63:35:f5:06:ba:82:30:b7:3c:
                    5f:ba:ca:d2:17:f4:fd:33:69:8b:d0:1e:3a:6c:b1:
                    ba:77:54:7b:11:c3:c4:9a:34:00:81:f9:a0:42:4e:
                    81:da:3c:7e:ab:0d:35:bc:33:8f:e3:16:ce:11:96:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:14:A3:9E:36:9F:E2:AF:7E:2E:96:CB:BD:D7:66:97:67:1E:CE:7B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/518BA1DCC49C11F1B16AAACDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.241.0-156.242.249.255
                  156.243.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:18:ad:b4:ab:a0:5a:2a:5d:b2:2e:6d:0a:5c:b6:ea:bf:42:
         80:93:53:05:a6:e6:85:5b:78:15:67:1a:92:00:5d:37:aa:a5:
         a6:25:a2:ad:91:36:4f:65:14:4d:12:fa:99:23:94:b4:95:8d:
         32:fc:55:35:37:19:b0:94:fb:63:54:f9:98:08:bb:87:14:dd:
         2c:86:56:87:70:a9:2b:08:55:a8:98:c7:6a:18:e8:79:2e:b7:
         99:58:c8:56:bd:66:49:85:89:83:9e:68:bc:d6:6a:6d:d0:8a:
         8b:4c:65:15:12:b0:c9:63:30:e7:30:91:30:7d:d5:93:b7:32:
         b9:bf:98:d6:cd:a1:e7:6f:53:73:8a:04:80:b8:c9:ba:3c:e7:
         cd:be:f3:1c:76:fd:7d:e9:7b:75:3a:57:77:34:83:d6:50:68:
         9f:2c:5c:59:a5:47:0d:77:98:9a:97:58:3d:cf:d0:22:57:bf:
         14:c5:db:7d:41:15:07:be:91:7c:e6:db:ce:c1:e0:b9:0a:3e:
         ec:df:aa:eb:bd:b8:91:fb:ea:f1:69:e6:82:7b:4e:99:27:58:
         b2:5e:1b:33:02:02:83:3b:af:38:27:6e:b2:3d:7a:66:b4:bd:
         d7:a2:65:ec:34:7a:52:ff:16:7f:d5:0f:7e:d0:78:1f:d1:d2:
         53:81:52:1e
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAdxoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDEwMTExODI0WhcNMjYxMTE3MTExODI0WjAYMRYw
FAYDVQQDEw02YWNhMWYwNS00NGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLArcdWH0ZHR4SY8TalVT0Dr8tO0rXy/Zj2F+ie/ZdiuLQDXxqkKjoV7
8r8L5zOFxeZ3Yb1DJzAWLY2kx5jLLRhgPUQTB/atOJL89jTkAOwnEy5PMXQm8cck
AeNW/a5dhETJWfYcljtxLcbotwhcDkx3HmQ6IjbeAqlvoqcLopN36hU1yhGv6Omd
g+c7yO0F0bgFf+CHvF8tta6paUF+O4W6LQTo2pfjLLQTLROF2l8gbf3ZG0kMhVZR
RcsMg9XFSQMABPPN1q1jNfUGuoIwtzxfusrSF/T9M2mL0B46bLG6d1R7EcPEmjQA
gfmgQk6B2jx+qw01vDOP4xbOEZb0cwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBwU
o542n+Kvfi6Wy73XZpdnHs57MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MThCQTFEQ0M0OUMxMUYxQjE2QUFBQ0RDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACc8vEDBAGc8vgDBACc82ww
DQYJKoZIhvcNAQELBQADggEBACIYrbSroFoqXbIubQpctuq/QoCTUwWm5oVbeBVn
GpIAXTeqpaYloq2RNk9lFE0S+pkjlLSVjTL8VTU3GbCU+2NU+ZgIu4cU3SyGVodw
qSsIVaiYx2oY6Hkut5lYyFa9ZkmFiYOeaLzWam3QiotMZRUSsMljMOcwkTB91ZO3
Mrm/mNbNoedvU3OKBIC4ybo8582+8xx2/X3pe3U6V3c0g9ZQaJ8sXFmlRw13mJqX
WD3P0CJXvxTF231BFQe+kXzm287B4LkKPuzfquu9uJH76vFp5oJ7TpknWLJeGzMC
AoM7rzgnbrI9ema0vdeiZew0elL/Fn/VD37QeB/R0lOBUh4=
-----END CERTIFICATE-----