Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81B2ABC2C57C11F18F820B00CF1D38B0.roa
File:                     81B2ABC2C57C11F18F820B00CF1D38B0.roa (raw, json)
Hash identifier:          Z7WxnXd6fJxpsa3O4FHH01g/qgfMUrn92OS6dICiAaU=
Subject key identifier:   63:91:52:C8:33:A4:97:64:BF:84:B1:1F:5E:E3:39:75:A7:5B:E2:1D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81B2ABC2C57C11F18F820B00CF1D38B0.roa
Signing time:             Sun 11 Oct 2026 14:03:17 +0000
ROA not before:           Sun 11 Oct 2026 14:03:13 +0000
ROA not after:            Fri 20 Nov 2026 14:03:13 +0000
asID:                     211265
IP address blocks:        156.231.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122069 (0x1dcd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 14:03:13 2026 GMT
            Not After : Nov 20 14:03:13 2026 GMT
        Subject: CN=6acb9725-d236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:93:0d:59:89:e7:d5:6d:fc:e1:4e:73:11:
                    62:3b:76:d5:f6:20:56:12:3d:a8:74:11:09:3d:1d:
                    0f:cd:0d:47:36:cc:47:f8:db:b8:1b:33:15:83:8d:
                    80:33:06:c7:f5:28:21:7d:b7:63:df:a8:78:13:1a:
                    34:3e:09:fa:ff:8d:87:88:1b:7b:1c:f2:d2:84:a2:
                    ea:4d:7f:c7:68:56:d9:87:96:cf:96:4a:49:f7:b7:
                    60:b4:96:34:72:e2:ff:d4:51:8e:d4:ac:99:b1:cd:
                    0b:b7:92:c8:cb:a1:48:17:3f:29:3c:65:ee:56:56:
                    c0:65:70:e4:81:25:3a:29:f1:e5:21:f6:23:4d:f5:
                    3e:df:6c:30:f1:45:3b:9d:bc:04:53:40:c0:e9:78:
                    5b:65:8a:c6:df:54:2c:7f:89:e8:d0:99:88:c4:ca:
                    1e:72:39:51:88:71:ad:24:31:84:53:47:12:88:51:
                    6f:09:a7:f4:85:ce:96:fe:31:40:d9:c7:49:45:f4:
                    45:c8:a9:fe:f3:55:26:32:45:4c:5f:59:87:8c:b4:
                    aa:2c:cf:f9:d4:e6:bd:db:c2:37:18:aa:0b:c9:0a:
                    7f:39:88:8b:83:15:06:ad:8f:67:3f:b4:e1:77:0e:
                    29:c5:be:82:6c:a1:d0:5e:6d:69:fe:62:95:7a:f2:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:91:52:C8:33:A4:97:64:BF:84:B1:1F:5E:E3:39:75:A7:5B:E2:1D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81B2ABC2C57C11F18F820B00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:5c:57:34:d4:7c:12:d8:a1:88:f0:9d:44:e5:50:6b:b6:db:
         96:e9:93:9a:84:6e:51:9b:e5:65:17:3a:23:da:1d:5a:7e:75:
         2f:37:2a:6b:bf:7c:8e:a6:63:4c:8c:a3:02:48:c0:47:ee:75:
         16:14:5e:c1:c3:07:98:60:a3:52:bd:af:20:4a:2c:2b:8b:a8:
         d2:44:8a:b6:4b:ae:96:81:2e:d4:0e:1c:06:1b:d7:1c:e2:f1:
         c1:e2:18:37:08:a5:64:98:6f:41:81:bf:c1:04:83:40:9d:a6:
         10:97:50:96:80:8e:90:b1:ae:41:e0:c3:95:f3:e7:08:69:e8:
         b7:40:af:ef:6b:9b:82:81:10:cc:4b:22:13:ec:b2:e9:3a:4a:
         3f:98:05:b5:08:39:8d:c1:48:c9:79:6a:2c:e9:da:7f:e5:83:
         f3:e2:ff:34:48:20:7b:33:e6:69:c8:4a:bc:23:bd:5e:df:7c:
         34:60:65:5d:3b:ed:40:3e:f3:4e:a4:fa:dd:ac:06:d9:09:bc:
         13:5c:dc:ec:1b:11:e1:07:91:b0:aa:9f:35:da:30:66:ef:68:
         65:36:96:1d:80:dc:9e:8e:6a:e7:8c:4d:62:02:c7:90:18:1a:
         7f:0a:55:6c:ae:31:b8:3b:aa:3f:95:0f:bb:51:02:62:4e:48:
         7d:35:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----