Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548004E0968A11F191B8361ECF1D38B0.roa
File:                     548004E0968A11F191B8361ECF1D38B0.roa (raw, json)
Hash identifier:          KmMB8kyALw8pQT65Z0IByqCi8G1B0x56A5jXfmfima4=
Subject key identifier:   1A:EC:BB:03:BD:BA:1B:C2:00:40:FB:5A:04:99:38:59:07:00:7B:8E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548004E0968A11F191B8361ECF1D38B0.roa
Signing time:             Wed 12 Aug 2026 20:13:50 +0000
ROA not before:           Wed 12 Aug 2026 20:13:44 +0000
ROA not after:            Sun 12 Aug 2029 20:13:44 +0000
asID:                     17561
IP address blocks:        156.226.207.0/24 maxlen: 24
                          156.226.208.0/24 maxlen: 24
                          156.226.209.0/24 maxlen: 24
                          156.226.210.0/24 maxlen: 24
                          156.226.211.0/24 maxlen: 24
                          156.226.212.0/24 maxlen: 24
                          156.226.213.0/24 maxlen: 24
                          156.226.214.0/24 maxlen: 24
                          156.226.215.0/24 maxlen: 24
                          156.226.216.0/24 maxlen: 24
                          156.226.217.0/24 maxlen: 24
                          156.226.220.0/24 maxlen: 24
                          156.226.221.0/24 maxlen: 24
                          156.226.222.0/24 maxlen: 24
                          156.226.223.0/24 maxlen: 24
                          156.226.224.0/24 maxlen: 24
                          156.226.225.0/24 maxlen: 24
                          156.226.226.0/24 maxlen: 24
                          156.226.227.0/24 maxlen: 24
                          156.226.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117826 (0x1cc42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 20:13:44 2026 GMT
            Not After : Aug 12 20:13:44 2029 GMT
        Subject: CN=6a7cd3fd-ae56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:0f:f9:be:80:ac:ea:07:1a:41:07:67:6f:
                    2c:e2:59:57:ce:11:2d:b2:a2:bc:7f:20:44:20:87:
                    ca:05:0f:92:89:6e:b0:4f:4a:58:44:be:1a:ff:24:
                    e0:06:c1:f4:b8:e4:a4:42:be:b8:26:08:bf:7b:5c:
                    5f:e6:9a:5c:27:9c:ce:c4:44:8f:b9:d8:6c:5d:bd:
                    00:51:fa:bc:2d:63:06:78:7d:99:6a:94:43:bb:62:
                    54:4c:2f:66:d1:90:d2:2c:78:c6:4f:76:06:49:9f:
                    71:eb:e9:8e:da:cd:2d:65:36:29:ad:43:6a:67:bc:
                    4e:ea:3f:49:f6:f6:86:af:34:79:b5:9d:48:da:37:
                    12:32:56:b2:43:61:e1:da:98:c5:d7:cb:32:e2:c5:
                    d4:2c:0e:d3:a1:05:4d:0d:62:d9:be:ca:ff:e1:df:
                    02:f6:f9:86:d4:ef:bb:ee:9a:2d:ca:d3:d5:f8:84:
                    75:6f:71:5e:36:70:0d:0f:87:0d:3f:d1:c4:f6:f2:
                    28:d8:9e:ef:69:b4:95:94:b0:79:47:46:f9:0d:45:
                    53:fc:18:e0:7a:bf:1f:c6:0d:3e:3e:ee:83:f2:c8:
                    ed:b8:9a:36:71:0f:50:3c:26:2f:d6:76:62:4e:8f:
                    4d:01:17:d2:f5:6b:94:4d:3f:4b:a0:5e:36:67:47:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EC:BB:03:BD:BA:1B:C2:00:40:FB:5A:04:99:38:59:07:00:7B:8E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548004E0968A11F191B8361ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.207.0-156.226.217.255
                  156.226.220.0-156.226.228.255

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:2f:b1:3a:7c:23:93:cf:f3:bf:ea:e3:98:25:cc:08:33:
         fe:f7:93:fa:e9:14:22:21:df:4a:48:f4:2b:4f:35:61:72:5a:
         64:3c:64:eb:4d:75:51:e0:c8:ea:f5:cc:75:3b:f6:62:b2:7c:
         08:00:62:4e:bf:14:01:ce:72:c1:41:9c:fe:45:a3:b3:ce:43:
         fe:99:88:fc:69:ee:93:c7:9a:4b:71:a2:4f:54:04:f5:bc:04:
         21:1f:81:84:e2:be:04:94:15:23:e6:b5:ea:bc:be:f4:cb:08:
         9c:05:e1:5c:18:c4:ad:fe:2e:a8:26:a7:45:5a:f7:15:2d:a0:
         83:dc:c1:67:6d:e7:1f:e1:11:f8:36:2f:58:94:85:dc:9b:1f:
         e4:0a:80:78:7e:22:1b:1b:27:f1:f6:93:30:8b:d6:59:2e:75:
         27:f8:e0:60:cf:73:68:37:fc:cc:2f:02:98:c8:4b:c7:99:21:
         20:2a:6b:22:a0:2c:87:c9:05:84:ce:f3:52:f2:88:ef:98:17:
         1c:a5:22:7e:2d:bb:24:e3:a5:31:8c:9e:12:9f:8f:a4:1e:79:
         77:f0:dd:5a:99:72:93:f2:33:e1:a7:11:d3:1b:63:bf:63:d3:
         d3:bc:b3:ee:8a:ef:c3:8b:16:f9:29:01:e6:be:ce:69:67:75:
         36:18:2f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----