Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72958C14C79C11F1A50517E7CE1D38B0.roa
File:                     72958C14C79C11F1A50517E7CE1D38B0.roa (raw, json)
Hash identifier:          qn7k+sdUst8RYsyVFE/06itpEha+eDTZjIg0SH0dv0A=
Subject key identifier:   83:B9:99:E8:78:80:0F:CC:90:96:34:95:C6:2F:59:7E:C7:04:8A:1D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72958C14C79C11F1A50517E7CE1D38B0.roa
Signing time:             Wed 14 Oct 2026 06:56:58 +0000
ROA not before:           Wed 14 Oct 2026 06:56:53 +0000
ROA not after:            Sat 21 Nov 2026 06:56:53 +0000
asID:                     401783
IP address blocks:        156.252.9.0/24 maxlen: 24
                          156.252.177.0/24 maxlen: 24
                          156.252.178.0/24 maxlen: 24
                          156.252.179.0/24 maxlen: 24
                          156.252.180.0/24 maxlen: 24
                          156.252.181.0/24 maxlen: 24
                          156.252.182.0/24 maxlen: 24
                          156.252.183.0/24 maxlen: 24
                          156.252.184.0/24 maxlen: 24
                          156.252.186.0/24 maxlen: 24
                          156.252.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122174 (0x1dd3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 14 06:56:53 2026 GMT
            Not After : Nov 21 06:56:53 2026 GMT
        Subject: CN=6acf27ba-b171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:2f:72:d6:f1:d7:c8:36:74:e5:59:47:b3:
                    28:f4:f2:04:bb:9e:89:78:eb:31:1c:f3:89:e4:ef:
                    ca:ab:05:f6:73:66:b8:dc:46:6f:5b:0d:bc:3e:34:
                    a6:78:a7:dd:76:10:bd:5e:d3:d6:ba:a8:7b:dc:e1:
                    9d:9c:d8:10:46:88:ce:f2:d4:55:32:86:29:05:f0:
                    fc:ac:91:da:06:a4:7f:d0:66:8d:c7:38:bd:66:87:
                    f7:9b:ff:71:b8:1d:7e:45:cb:72:bd:4d:8d:d6:c5:
                    04:a3:45:e1:a2:6b:86:14:32:83:94:f9:11:54:95:
                    54:20:30:75:a9:0b:a3:8d:f4:5a:8d:3d:d8:7a:7d:
                    13:d9:6a:d4:a5:2c:fd:4a:6f:6e:57:15:6f:76:14:
                    09:85:69:1a:24:5e:54:b3:0b:22:10:a5:df:3f:80:
                    1b:74:57:a6:80:af:78:2f:ac:19:65:b4:5f:fa:42:
                    8e:b5:c6:a8:e4:7b:ac:d4:de:8f:6e:dd:aa:af:90:
                    cc:24:f8:12:54:c6:ee:1d:d4:c2:71:3f:50:0b:54:
                    a1:60:4f:76:84:60:81:6c:a7:ce:a6:84:df:ee:bd:
                    ca:c7:ab:27:58:78:4c:69:8f:7e:fa:5b:43:39:fc:
                    63:a8:23:2d:17:ea:89:ec:6d:56:1e:48:de:f3:d3:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B9:99:E8:78:80:0F:CC:90:96:34:95:C6:2F:59:7E:C7:04:8A:1D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72958C14C79C11F1A50517E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.9.0/24
                  156.252.177.0-156.252.184.255
                  156.252.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:8d:69:dc:22:7c:63:6e:9d:fc:ce:1d:16:79:a6:9d:b9:
         dc:a9:bb:50:c7:0d:76:bf:85:75:ad:3e:1d:78:98:c9:1a:81:
         f2:9d:a3:39:3f:2e:15:85:87:69:62:a9:ab:81:5b:b6:22:2d:
         65:54:5f:3b:e6:e7:4c:e0:38:7d:05:23:8f:d6:21:37:a7:fa:
         d6:4e:6f:f2:df:01:82:e6:bc:1e:73:d9:cd:2c:d9:7e:ba:63:
         52:0d:0f:a5:20:e8:be:f6:97:75:f1:aa:a6:da:b9:d1:32:a9:
         8c:16:01:7a:57:b5:34:1d:d5:87:da:79:ad:1a:db:c5:33:74:
         f0:b2:06:4f:e6:1c:21:1b:13:68:93:16:c6:12:52:12:4e:5b:
         23:62:1d:5b:39:8c:05:27:f8:b1:89:5e:72:ca:36:4e:4a:bd:
         2c:be:86:bd:6b:0c:23:7f:8e:4d:39:9a:72:83:7b:7c:eb:ef:
         e1:fb:d8:a2:4b:64:65:fe:f7:f8:d4:2f:54:e5:03:06:a1:7f:
         1a:a8:90:52:b0:02:5e:56:d7:1c:e8:58:5d:e1:54:7b:bb:b3:
         f1:ce:91:30:e7:e9:47:1e:9e:97:92:ef:7c:f5:5c:81:66:7d:
         82:6c:c2:7d:f6:29:13:04:7c:4f:e1:48:70:3f:71:4f:e5:74:
         6c:df:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----