Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/659383F69D6011F1AE625D1DCF1D38B0.roa
File:                     659383F69D6011F1AE625D1DCF1D38B0.roa (raw, json)
Hash identifier:          AkBxRFmNoWNwcMvVloNLn8EBt9nHXRVJptINQRGj60k=
Subject key identifier:   0A:E1:85:3B:A7:6A:59:AA:6E:57:CB:B1:79:35:BD:5A:1A:DF:A8:31
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/659383F69D6011F1AE625D1DCF1D38B0.roa
Signing time:             Fri 21 Aug 2026 13:01:17 +0000
ROA not before:           Fri 21 Aug 2026 13:01:14 +0000
ROA not after:            Tue 29 Sep 2026 13:01:14 +0000
asID:                     202656
IP address blocks:        156.246.161.0/24 maxlen: 24
                          156.246.162.0/24 maxlen: 24
                          156.246.163.0/24 maxlen: 24
                          156.246.164.0/24 maxlen: 24
                          156.246.165.0/24 maxlen: 24
                          156.246.174.0/24 maxlen: 24
                          156.246.175.0/24 maxlen: 24
                          156.246.179.0/24 maxlen: 24
                          156.246.180.0/24 maxlen: 24
                          156.246.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118756 (0x1cfe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 13:01:14 2026 GMT
            Not After : Sep 29 13:01:14 2026 GMT
        Subject: CN=6a884c1d-ff12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:f7:a6:29:ee:3d:04:81:02:ad:71:49:a9:
                    24:2e:8b:93:cf:e4:8b:2e:b4:31:48:69:18:fb:eb:
                    35:ba:a7:89:38:e0:ca:c9:f8:36:e5:a5:e6:70:cf:
                    98:44:8b:80:c6:93:01:0c:97:f7:0d:d1:b4:66:90:
                    c4:df:29:80:12:fd:b8:a8:1c:52:f5:a0:e9:b5:d2:
                    9b:4c:44:aa:67:94:e8:26:e8:2b:ec:f8:fb:35:40:
                    4c:7d:3b:1a:ad:42:0f:ea:c4:c3:26:d6:5e:6e:bc:
                    e3:1c:92:da:2b:85:e1:1d:fe:2d:d9:df:bc:ce:1a:
                    b8:02:0d:d4:99:b4:5e:ce:cb:09:3b:2c:a8:31:fb:
                    68:a7:0b:29:75:bf:a4:4c:c2:f4:9e:03:49:1e:08:
                    18:b0:c1:df:22:fb:36:31:34:c6:42:02:b6:cd:32:
                    2d:c8:19:59:44:0b:6b:82:cd:6c:80:1a:63:58:c1:
                    0e:f5:e9:72:bd:c0:4e:a5:a3:39:92:ae:22:45:04:
                    bc:b4:92:10:71:cc:8d:40:7b:c9:50:12:e1:03:4a:
                    72:b6:82:a3:af:26:24:78:a8:f0:1b:d2:b9:44:8e:
                    9f:15:24:26:d8:1f:e2:04:07:65:77:0f:5a:ca:1d:
                    02:d2:f0:1b:3e:60:17:1d:a6:d0:70:62:bf:31:de:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E1:85:3B:A7:6A:59:AA:6E:57:CB:B1:79:35:BD:5A:1A:DF:A8:31
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/659383F69D6011F1AE625D1DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.161.0-156.246.165.255
                  156.246.174.0/23
                  156.246.179.0-156.246.181.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:17:f0:9d:6b:6b:32:a9:0c:7a:ec:93:2b:96:3c:7e:c9:
         d8:0b:3c:86:9d:73:b2:a5:a6:99:ec:e5:30:72:ef:0d:da:a9:
         0d:0d:f4:06:4b:6b:c3:8a:bb:84:d2:fb:d4:39:cc:e5:48:f6:
         bd:6d:e5:53:6e:84:1f:bf:03:8b:14:44:60:77:09:d5:5b:3c:
         23:1e:e8:17:c6:2d:3f:7c:df:1c:1f:cd:51:a6:04:59:a5:3c:
         f6:5b:c2:ff:85:ca:a3:91:82:49:8f:18:33:e6:6a:80:bd:75:
         b5:4b:4b:7d:3f:ae:50:0e:83:c8:1c:e8:a4:96:70:85:ff:3c:
         b3:fb:79:c7:bc:66:8a:7d:88:02:62:f0:75:66:0c:13:7f:20:
         5c:ff:2b:4f:03:2c:f2:a9:b2:46:c2:fa:59:ea:17:ed:7c:aa:
         ab:dd:db:dd:e8:aa:ed:30:44:56:9f:f5:f5:cd:71:d1:0b:f9:
         4d:fe:d1:7f:e7:07:70:cc:fc:42:92:8b:97:6a:c5:8d:90:a0:
         b8:a0:e4:b2:0d:a5:61:57:4a:93:10:2a:3e:b7:e3:cf:0f:ce:
         4e:e8:76:05:a5:15:8b:03:00:5e:6b:26:7c:05:b0:53:29:37:
         34:aa:ed:a6:14:74:78:c6:c6:fe:8b:2b:a5:a4:6c:d2:27:67:
         d2:5d:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----