Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76D1E492994011F1990EAEA7CE1D38B0.roa
File:                     76D1E492994011F1990EAEA7CE1D38B0.roa (raw, json)
Hash identifier:          uofZ2pkwUbjNgSZC+7Pih4bBgKFzdM3waokFuGaH+V4=
Subject key identifier:   12:D7:34:C4:12:E5:41:A2:0B:C6:45:BF:89:7E:BA:BB:25:5A:4C:BC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76D1E492994011F1990EAEA7CE1D38B0.roa
Signing time:             Sun 16 Aug 2026 07:02:38 +0000
ROA not before:           Sun 16 Aug 2026 07:02:34 +0000
ROA not after:            Tue 22 Sep 2026 07:02:34 +0000
asID:                     11404
IP address blocks:        156.235.16.0/21 maxlen: 24
                          156.235.24.0/22 maxlen: 24
                          156.235.36.0/22 maxlen: 24
                          156.235.40.0/21 maxlen: 24
                          156.235.52.0/22 maxlen: 24
                          156.235.56.0/21 maxlen: 24
                          156.235.64.0/21 maxlen: 24
                          156.235.80.0/21 maxlen: 24
                          156.235.92.0/22 maxlen: 24
                          156.235.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118025 (0x1cd09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 16 07:02:34 2026 GMT
            Not After : Sep 22 07:02:34 2026 GMT
        Subject: CN=6a81608e-e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:7d:cf:86:90:fb:34:bb:67:9b:aa:51:6a:
                    53:58:25:b4:70:d5:aa:dc:b4:ff:08:6a:af:d1:19:
                    07:ed:b6:76:38:0e:42:d8:bc:5f:20:90:0c:e7:06:
                    a1:f4:3a:6d:e0:3f:c8:5b:f1:87:86:1b:32:f8:e2:
                    1c:39:9c:90:57:5c:5d:c7:42:68:ce:6d:bc:1b:f5:
                    b0:f7:e8:6b:14:4a:0f:69:07:c6:be:0d:af:93:b7:
                    20:73:de:52:a4:d6:79:93:5b:b6:a6:d6:f0:0c:c4:
                    69:5a:4a:0f:bc:09:a7:cd:95:19:db:3d:34:54:e4:
                    8d:55:5b:0d:a9:19:0e:28:a4:a7:e7:15:96:ab:ec:
                    71:9a:5f:7e:24:29:19:14:ee:d6:bc:be:dd:af:5c:
                    c1:ed:e7:40:66:e4:2d:5f:93:c3:ce:77:d6:a6:8e:
                    c6:64:6b:1e:f6:64:e3:74:79:5c:f3:76:ad:c7:63:
                    37:18:2d:f7:92:53:28:6d:ca:b2:8a:00:54:a2:98:
                    05:f4:14:f8:30:c9:8d:5c:b9:16:18:42:7a:ef:28:
                    3e:e2:2b:35:33:6c:87:32:f2:48:6a:d6:6f:cf:84:
                    96:8c:59:86:eb:69:75:ed:ec:1d:a1:6f:60:c5:71:
                    1f:61:47:95:cd:b0:31:54:e0:b6:cc:24:a4:34:2b:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D7:34:C4:12:E5:41:A2:0B:C6:45:BF:89:7E:BA:BB:25:5A:4C:BC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76D1E492994011F1990EAEA7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.16.0-156.235.27.255
                  156.235.36.0-156.235.47.255
                  156.235.52.0-156.235.71.255
                  156.235.80.0/21
                  156.235.92.0/22
                  156.235.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:92:62:62:f4:72:a2:49:4c:57:a6:4a:a9:93:f8:8d:1c:22:
         4a:bb:e0:69:ec:f2:b1:bf:88:f1:cf:3a:6d:7d:2c:85:7f:fa:
         65:e3:5d:40:82:49:12:84:02:ef:76:a1:fc:48:f1:47:1b:84:
         97:13:9f:61:92:2e:f4:5c:22:29:c2:ac:ea:8e:0f:7e:ac:9e:
         34:4c:83:ba:60:26:e6:16:1d:50:63:af:3c:e1:f4:72:af:0f:
         f9:fb:44:aa:90:85:ae:23:a2:03:9f:20:60:8e:13:2f:76:fc:
         51:40:e9:bd:41:e2:29:c4:41:22:64:95:60:03:59:22:57:37:
         b3:16:07:b6:eb:a6:8a:fd:7b:0c:75:1c:3a:da:90:bf:af:8d:
         19:9b:c3:29:f8:63:a9:ea:d0:dc:dc:8f:a7:84:49:f5:d7:b2:
         6b:d2:82:c6:67:44:19:77:76:3c:1a:d7:ca:f7:08:3b:5d:74:
         e2:0d:ee:68:f8:f1:e4:f0:d1:15:00:b3:e6:2c:42:0f:3c:bb:
         6b:55:b4:96:6a:e5:dc:b7:c8:87:7b:83:a3:ff:83:8e:2a:25:
         7d:95:a2:77:be:b2:85:4b:ea:4c:9e:85:4e:30:02:43:ab:27:
         a8:a1:7a:5e:4a:f6:7f:83:9e:4e:08:14:82:74:d1:6e:b8:9b:
         df:33:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----