Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BB444E964711F19C06B610CF1D38B0.roa
File:                     63BB444E964711F19C06B610CF1D38B0.roa (raw, json)
Hash identifier:          /F4yQWP5d8tj1S19VBd4vUeyxksuKy1FF6fJxKQ7XcE=
Subject key identifier:   57:D6:DA:94:3B:73:29:4C:C5:45:CC:7C:30:D9:37:48:5A:70:4C:5C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BB444E964711F19C06B610CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:14:39 +0000
ROA not before:           Wed 12 Aug 2026 12:14:35 +0000
ROA not after:            Sun 12 Aug 2029 12:14:35 +0000
asID:                     17561
IP address blocks:        156.251.134.0/24 maxlen: 24
                          156.251.135.0/24 maxlen: 24
                          156.251.136.0/24 maxlen: 24
                          156.251.137.0/24 maxlen: 24
                          156.251.138.0/24 maxlen: 24
                          156.251.139.0/24 maxlen: 24
                          156.251.140.0/24 maxlen: 24
                          156.251.141.0/24 maxlen: 24
                          156.251.142.0/24 maxlen: 24
                          156.251.143.0/24 maxlen: 24
                          156.251.144.0/24 maxlen: 24
                          156.251.145.0/24 maxlen: 24
                          156.251.146.0/24 maxlen: 24
                          156.251.147.0/24 maxlen: 24
                          156.251.148.0/24 maxlen: 24
                          156.251.149.0/24 maxlen: 24
                          156.251.150.0/24 maxlen: 24
                          156.251.151.0/24 maxlen: 24
                          156.251.152.0/24 maxlen: 24
                          156.251.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117760 (0x1cc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 12:14:35 2026 GMT
            Not After : Aug 12 12:14:35 2029 GMT
        Subject: CN=6a7c63af-45fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:1d:0d:a5:f9:8e:70:fc:07:52:bb:c3:ab:
                    8e:9d:b0:05:64:18:80:ac:b1:44:53:ab:8d:7b:9a:
                    1e:11:02:fa:fd:f9:4b:11:41:1c:f2:32:18:63:ab:
                    15:65:65:de:3b:a0:06:cc:56:1a:28:69:6b:71:c1:
                    fb:6e:48:b6:7b:eb:5a:b4:c8:9f:54:ec:4a:75:df:
                    4b:de:66:06:79:e4:e7:52:32:bc:3a:4c:86:e1:a8:
                    b7:c3:0f:c9:39:39:09:b8:eb:90:a6:74:ff:48:b5:
                    2e:96:16:22:33:73:29:d0:27:be:a3:4c:14:2c:51:
                    ee:67:5f:f8:6f:01:c4:21:d6:22:c0:fe:27:33:82:
                    f8:69:f0:f5:30:ea:21:d3:e0:db:45:9b:96:72:48:
                    d0:b1:bb:b9:cd:0e:e0:28:d4:5d:8f:e7:cb:a5:e9:
                    86:f7:ae:8c:fb:a8:b8:9a:e9:90:f6:90:d8:b1:d9:
                    e9:35:be:8f:54:2c:85:a0:db:64:d0:f3:79:3f:f1:
                    4c:d1:00:05:65:0b:8a:26:a3:d0:39:fc:ee:1d:22:
                    86:22:67:cc:ca:bd:e6:35:8f:39:98:95:4f:37:36:
                    74:61:0f:e9:a0:11:b3:63:3a:8e:b7:8e:9d:ac:8a:
                    af:25:3d:97:a1:b3:11:bb:2c:66:22:ed:73:30:9a:
                    86:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D6:DA:94:3B:73:29:4C:C5:45:CC:7C:30:D9:37:48:5A:70:4C:5C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BB444E964711F19C06B610CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.134.0-156.251.153.255

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:98:a2:9f:5f:77:f9:6b:fc:bd:b2:94:f3:b7:43:b0:69:
         4a:a4:f5:c1:f5:67:11:14:50:91:b9:d3:c0:9f:0a:b7:4d:4c:
         54:cd:3a:f5:80:bc:f1:9e:a4:12:2c:e1:8d:d1:d7:a7:f0:0c:
         de:6d:84:3d:d8:16:46:b4:c5:34:67:e8:9f:d2:22:44:36:3e:
         1f:c7:5a:fd:12:8f:fc:15:5d:5d:4e:13:16:5b:37:63:63:4e:
         55:b6:90:ff:67:f4:d8:31:4c:a3:70:a5:e7:31:0c:ac:a8:65:
         8a:9e:68:e3:47:f6:16:27:42:17:fd:49:f2:a6:ad:1e:a2:e0:
         c3:ee:ea:b4:f8:a7:77:03:30:7f:bd:25:be:3a:1b:a5:34:fd:
         44:05:a4:84:72:1c:65:2d:f3:62:9b:0a:dc:80:d6:7f:95:be:
         63:b9:35:2d:87:df:18:6b:2d:c1:0b:37:55:00:5a:f6:7e:c6:
         e7:cd:d8:18:ce:94:f8:21:59:cb:82:d7:8d:a9:42:4b:59:c9:
         f8:0e:e4:18:c2:de:ab:99:9f:0a:ee:fe:1c:c5:9c:c4:a4:b1:
         f4:47:4c:a8:87:35:6a:b4:7b:d9:24:f6:cf:7f:3e:47:38:04:
         fe:b9:b2:aa:55:37:1d:ce:bc:9f:d6:16:5b:d4:47:cf:82:d0:
         2e:62:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----