Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/750ABCFA965D11F18C975C14CF1D38B0.roa
File:                     750ABCFA965D11F18C975C14CF1D38B0.roa (raw, json)
Hash identifier:          Z8RJSwOMvaKASh/WupOyltm/z0L9iw3pmtclpZvbM50=
Subject key identifier:   DC:56:04:B5:EF:4D:63:BD:37:8C:55:76:DE:48:E9:36:D7:9D:92:E0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/750ABCFA965D11F18C975C14CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 14:52:37 +0000
ROA not before:           Wed 12 Aug 2026 14:52:33 +0000
ROA not after:            Sun 12 Aug 2029 14:52:33 +0000
asID:                     17561
IP address blocks:        156.235.46.0/24 maxlen: 24
                          156.235.47.0/24 maxlen: 24
                          156.235.48.0/24 maxlen: 24
                          156.235.50.0/24 maxlen: 24
                          156.235.51.0/24 maxlen: 24
                          156.235.52.0/24 maxlen: 24
                          156.235.53.0/24 maxlen: 24
                          156.235.54.0/24 maxlen: 24
                          156.235.55.0/24 maxlen: 24
                          156.235.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117798 (0x1cc26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 14:52:33 2026 GMT
            Not After : Aug 12 14:52:33 2029 GMT
        Subject: CN=6a7c88b5-448e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:fb:c0:fc:23:ca:ec:c8:4b:06:67:fd:32:
                    5c:13:8d:34:a1:f4:ab:dc:77:6f:c2:1f:7a:bd:dc:
                    05:6a:96:15:4b:23:55:10:9a:94:02:10:4b:9a:05:
                    cf:05:64:39:d0:31:f9:7a:87:7a:7e:c2:67:31:da:
                    8d:4c:6d:22:23:38:27:60:85:c5:d3:88:e8:5d:58:
                    14:0c:ee:9b:f2:ce:d1:37:cc:f4:5e:06:bd:f0:ae:
                    90:d4:20:e0:14:3b:80:d3:65:65:68:0d:dc:5b:4e:
                    53:76:7c:fc:ff:91:c1:74:4d:6e:96:c1:1c:5e:bc:
                    78:72:f7:db:52:09:84:c1:aa:53:e6:c5:05:ac:a8:
                    fa:49:2b:f2:46:02:a5:33:2f:db:05:e9:ad:db:e4:
                    47:d8:3f:c9:d5:d5:b6:db:53:7c:dc:1e:5c:23:a5:
                    39:87:8b:3e:8a:8f:a3:59:29:bb:1d:0a:54:0a:e1:
                    b5:01:1a:9a:f8:81:a5:20:b5:ec:8a:90:36:aa:22:
                    32:aa:22:d5:8e:93:05:f3:97:09:07:51:04:c4:19:
                    06:3c:22:9f:e0:70:c2:f6:7b:34:62:ac:c2:36:c8:
                    4d:25:a9:01:fe:64:97:c4:65:d4:e7:fe:78:05:e0:
                    29:24:00:ae:02:ab:fc:f4:db:fb:03:b0:f7:15:85:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:56:04:B5:EF:4D:63:BD:37:8C:55:76:DE:48:E9:36:D7:9D:92:E0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/750ABCFA965D11F18C975C14CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.46.0-156.235.48.255
                  156.235.50.0-156.235.56.255

    Signature Algorithm: sha256WithRSAEncryption
         88:3e:c3:00:9d:87:b4:09:87:e1:3c:60:c8:3d:2b:00:fc:6d:
         0e:3b:08:ea:18:87:40:30:6c:96:0a:48:b1:5a:21:36:09:78:
         4b:59:ce:ef:cd:93:3e:69:63:e4:81:1f:44:08:45:a3:f0:20:
         3b:e4:a4:14:55:27:cc:4e:92:dc:b0:69:29:c9:f4:94:92:14:
         6f:e9:3c:4d:25:9a:d6:6c:ca:c0:66:a4:4d:e5:cc:f3:51:43:
         b0:26:05:88:fe:7b:ea:b7:bf:01:be:71:07:c3:c3:c2:be:df:
         9d:e0:e2:9f:47:e8:b7:63:1d:9f:d9:80:18:0d:05:ad:b3:f6:
         a1:40:15:3b:55:5d:d4:78:6b:1a:c1:7b:ec:9a:67:58:37:f9:
         74:68:92:a5:79:17:05:dc:3c:da:28:02:75:6d:26:02:65:4e:
         94:0d:b5:e2:6d:53:99:ae:15:b3:04:26:e8:1a:0f:e4:4e:f1:
         c4:92:02:f7:90:1a:6e:75:7c:1f:1c:c9:6e:74:51:c8:70:d0:
         f5:13:96:ec:1c:2a:c0:8e:52:00:f2:cf:ac:fa:76:6a:7c:7d:
         35:3a:f3:4d:64:e4:0c:cb:1f:49:a9:15:e3:2b:4a:e5:0f:ce:
         5a:9b:ed:ae:3c:dd:95:b8:12:60:95:1c:24:0f:e4:40:1e:17:
         02:5d:e1:c0
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAcwmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEyMTQ1MjMzWhcNMjkwODEyMTQ1MjMzWjAYMRYw
FAYDVQQDEw02YTdjODhiNS00NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArEr7wPwjyuzISwZn/TJcE400ofSr3Hdvwh96vdwFapYVSyNVEJqUAhBL
mgXPBWQ50DH5eod6fsJnMdqNTG0iIzgnYIXF04joXVgUDO6b8s7RN8z0Xga98K6Q
1CDgFDuA02VlaA3cW05Tdnz8/5HBdE1ulsEcXrx4cvfbUgmEwapT5sUFrKj6SSvy
RgKlMy/bBemt2+RH2D/J1dW221N83B5cI6U5h4s+io+jWSm7HQpUCuG1ARqa+IGl
ILXsipA2qiIyqiLVjpMF85cJB1EExBkGPCKf4HDC9ns0YqzCNshNJakB/mSXxGXU
5/54BeApJACuAqv89Nv7A7D3FYU0+wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFNxW
BLXvTWO9N4xVdt5I6TbXnZLgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NTBBQkNGQTk2NUQxMUYxOEM5NzVDMTRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGc6y4DBACc6zAwDAMEAZzr
MgMEAJzrODANBgkqhkiG9w0BAQsFAAOCAQEAiD7DAJ2HtAmH4TxgyD0rAPxtDjsI
6hiHQDBslgpIsVohNgl4S1nO782TPmlj5IEfRAhFo/AgO+SkFFUnzE6S3LBpKcn0
lJIUb+k8TSWa1mzKwGakTeXM81FDsCYFiP576re/Ab5xB8PDwr7fneDin0fot2Md
n9mAGA0FrbP2oUAVO1Vd1HhrGsF77JpnWDf5dGiSpXkXBdw82igCdW0mAmVOlA21
4m1Tma4VswQm6BoP5E7xxJIC95AabnV8HxzJbnRRyHDQ9ROW7BwqwI5SAPLPrPp2
anx9NTrzTWTkDMsfSakV4ytK5Q/OWpvtrjzdlbgSYJUcJA/kQB4XAl3hwA==
-----END CERTIFICATE-----