Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6293FC469BA111F192649109CF1D38B0.roa
File:                     6293FC469BA111F192649109CF1D38B0.roa (raw, json)
Hash identifier:          MyogggHEm6qkS5mB4DOnWiGs125fzbosKm99e1E4n0A=
Subject key identifier:   AE:8C:EE:8A:66:EA:08:17:8B:E1:EF:93:59:3D:02:7C:5B:68:22:82
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6293FC469BA111F192649109CF1D38B0.roa
Signing time:             Wed 19 Aug 2026 07:41:27 +0000
ROA not before:           Wed 19 Aug 2026 07:41:23 +0000
ROA not after:            Fri 25 Sep 2026 07:41:23 +0000
asID:                     271355
IP address blocks:        156.236.194.0/24 maxlen: 24
                          156.236.195.0/24 maxlen: 24
                          156.236.196.0/24 maxlen: 24
                          156.236.197.0/24 maxlen: 24
                          156.236.198.0/24 maxlen: 24
                          156.236.199.0/24 maxlen: 24
                          156.236.200.0/24 maxlen: 24
                          156.236.201.0/24 maxlen: 24
                          156.236.202.0/24 maxlen: 24
                          156.236.203.0/24 maxlen: 24
                          156.236.204.0/24 maxlen: 24
                          156.236.205.0/24 maxlen: 24
                          156.236.206.0/24 maxlen: 24
                          156.236.207.0/24 maxlen: 24
                          156.236.208.0/24 maxlen: 24
                          156.236.209.0/24 maxlen: 24
                          156.236.210.0/24 maxlen: 24
                          156.236.211.0/24 maxlen: 24
                          156.236.212.0/24 maxlen: 24
                          156.236.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118315 (0x1ce2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 07:41:23 2026 GMT
            Not After : Sep 25 07:41:23 2026 GMT
        Subject: CN=6a855e27-7392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:0b:13:a0:ba:b2:33:c0:37:13:69:49:55:
                    79:99:76:e8:e9:78:4b:02:8f:ab:2a:30:af:2a:d1:
                    26:13:1f:d3:fc:bc:f1:ae:9e:31:80:3c:b5:92:43:
                    4f:4f:a3:7e:19:5b:4b:6f:64:46:32:27:2a:0c:4a:
                    4e:02:02:4b:67:df:b4:98:94:ea:b8:2c:84:9e:09:
                    7c:2f:8e:e9:74:d3:76:03:6f:39:a8:9d:0a:eb:8e:
                    4f:eb:27:5d:35:1f:97:f2:6f:56:db:bf:5e:54:74:
                    f3:0a:4a:87:e1:b8:75:26:e8:ab:bb:4e:d5:90:a4:
                    29:fa:eb:44:d3:41:ed:e8:b2:77:3a:40:c1:d2:01:
                    b3:5c:23:38:0e:04:13:f6:c7:a1:c0:75:d1:ab:0e:
                    ef:d1:65:77:dd:16:54:f7:59:7d:7f:c9:4b:2f:22:
                    c1:c6:9b:94:93:33:9f:7c:90:52:ba:ed:ac:74:e1:
                    80:88:43:35:12:7d:d6:c1:4c:7b:0c:80:85:20:e1:
                    cf:b2:0e:80:9e:1b:55:31:12:7a:ba:26:c2:f7:ee:
                    49:12:c0:31:4a:da:a9:e6:10:08:66:5c:b6:18:6d:
                    c3:25:96:25:00:5b:80:f7:8c:08:33:18:40:63:c1:
                    b0:a1:e3:63:b2:cb:4d:ae:5f:cf:07:79:fb:74:67:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:EE:8A:66:EA:08:17:8B:E1:EF:93:59:3D:02:7C:5B:68:22:82
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6293FC469BA111F192649109CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.194.0-156.236.213.255

    Signature Algorithm: sha256WithRSAEncryption
         ba:ff:93:79:7a:80:69:c1:a9:1c:18:ae:d0:a1:fb:a7:23:f6:
         e2:20:4d:9e:42:df:87:c1:03:cf:57:3e:1b:14:18:50:ba:e0:
         91:b6:65:48:48:b1:4d:c1:e4:14:2d:af:c4:6c:d7:a3:bf:4c:
         ab:fb:e1:45:db:9e:f7:88:65:85:50:ce:d5:92:1f:ce:79:3d:
         65:87:de:51:90:66:a0:8b:0f:17:99:99:09:de:fc:20:27:e6:
         af:a9:b7:a8:05:13:47:e3:88:0d:87:a5:42:59:7f:3d:0a:42:
         9d:af:8b:a4:2b:bc:8e:af:b9:fb:41:34:b8:13:a8:96:5f:54:
         95:cf:91:1f:71:7f:32:99:d6:31:7a:c4:ae:be:89:19:de:85:
         a7:6e:a4:05:d5:24:20:37:69:a3:2f:4b:e7:7a:5a:c5:f1:f6:
         dc:89:64:c5:77:c7:6f:7a:0e:81:19:a2:f5:02:61:aa:f0:75:
         76:95:68:2d:8e:5b:23:ff:90:e9:e7:8d:3a:20:07:58:76:91:
         76:d5:e3:5f:5d:a7:11:d3:4c:b6:5d:35:84:fa:91:24:d7:e9:
         ae:16:8d:23:f0:e1:a5:85:3e:2a:74:06:ab:c4:2a:5c:92:bb:
         f7:22:19:88:85:7f:4d:98:d4:b6:b2:dd:48:a9:1d:9f:31:21:
         21:53:44:d5
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAc4rMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE5MDc0MTIzWhcNMjYwOTI1MDc0MTIzWjAYMRYw
FAYDVQQDEw02YTg1NWUyNy03MzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx8QLE6C6sjPANxNpSVV5mXbo6XhLAo+rKjCvKtEmEx/T/Lzxrp4xgDy1
kkNPT6N+GVtLb2RGMicqDEpOAgJLZ9+0mJTquCyEngl8L47pdNN2A285qJ0K645P
6yddNR+X8m9W279eVHTzCkqH4bh1Juiru07VkKQp+utE00Ht6LJ3OkDB0gGzXCM4
DgQT9sehwHXRqw7v0WV33RZU91l9f8lLLyLBxpuUkzOffJBSuu2sdOGAiEM1En3W
wUx7DICFIOHPsg6AnhtVMRJ6uibC9+5JEsAxStqp5hAIZly2GG3DJZYlAFuA94wI
MxhAY8GwoeNjsstNrl/PB3n7dGcdJwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFK6M
7opm6ggXi+Hvk1k9AnxbaCKCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MjkzRkM0NjlCQTExMUYxOTI2NDkxMDlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc7MIDBAGc7NQwDQYJKoZI
hvcNAQELBQADggEBALr/k3l6gGnBqRwYrtCh+6cj9uIgTZ5C34fBA89XPhsUGFC6
4JG2ZUhIsU3B5BQtr8Rs16O/TKv74UXbnveIZYVQztWSH855PWWH3lGQZqCLDxeZ
mQne/CAn5q+pt6gFE0fjiA2HpUJZfz0KQp2vi6QrvI6vuftBNLgTqJZfVJXPkR9x
fzKZ1jF6xK6+iRnehadupAXVJCA3aaMvS+d6WsXx9tyJZMV3x296DoEZovUCYarw
dXaVaC2OWyP/kOnnjTogB1h2kXbV419dpxHTTLZdNYT6kSTX6a4WjSPw4aWFPip0
BqvEKlySu/ciGYiFf02Y1Lay3UipHZ8xISFTRNU=
-----END CERTIFICATE-----