Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/827CD5A09C9111F1AA84EDB4CE1D38B0.roa
File:                     827CD5A09C9111F1AA84EDB4CE1D38B0.roa (raw, json)
Hash identifier:          F/oZ4oR62oz325Mg6IxayF48aPBzgNQHpaGNMwciZPI=
Subject key identifier:   A6:3F:74:FC:99:5D:89:28:D4:9F:AB:11:F9:56:D3:9F:04:E7:86:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CEDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/827CD5A09C9111F1AA84EDB4CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 12:20:20 +0000
ROA not before:           Thu 20 Aug 2026 12:20:16 +0000
ROA not after:            Sat 26 Sep 2026 12:20:16 +0000
asID:                     63139
IP address blocks:        156.225.113.0/24 maxlen: 24
                          156.225.114.0/24 maxlen: 24
                          156.225.116.0/24 maxlen: 24
                          156.225.117.0/24 maxlen: 24
                          156.225.118.0/24 maxlen: 24
                          156.225.119.0/24 maxlen: 24
                          156.227.199.0/24 maxlen: 24
                          156.227.200.0/24 maxlen: 24
                          156.227.201.0/24 maxlen: 24
                          156.227.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118494 (0x1cede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 12:20:16 2026 GMT
            Not After : Sep 26 12:20:16 2026 GMT
        Subject: CN=6a86f104-68f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:11:2d:32:71:92:6c:38:89:bc:d7:a7:13:
                    84:74:e4:04:fe:79:49:f3:b5:83:b5:da:20:ed:06:
                    41:9d:58:37:b8:8b:77:7b:c0:82:4e:a2:5d:e5:1a:
                    50:11:b1:b9:ed:1e:5a:1f:ae:35:d0:d5:09:fb:18:
                    0d:00:f7:27:d9:1e:d3:82:b8:6b:55:be:9d:06:13:
                    b0:e0:78:03:6f:ce:5e:b1:f6:cb:cc:91:72:f9:f5:
                    a4:24:7e:59:85:e0:14:6c:70:60:d2:85:58:04:b0:
                    d0:0a:24:0a:ca:bb:ad:41:b5:9f:15:0d:a9:79:5e:
                    3f:cd:3b:a7:2f:5d:e2:f3:bc:1c:be:49:8a:65:98:
                    04:00:96:6d:3d:35:2c:c4:0e:33:93:f9:e1:ef:b7:
                    00:cd:aa:a7:51:a6:e1:9b:4c:30:56:88:c4:98:6a:
                    1d:aa:8d:b1:d4:20:db:24:6b:e0:f5:fd:c5:5f:60:
                    af:f1:50:9e:60:5f:94:b9:86:9f:e7:02:9e:9b:09:
                    41:96:3d:84:f3:20:e8:d2:7f:c5:25:e0:89:ff:b0:
                    a4:6b:de:90:4b:f9:e4:4c:33:4c:33:e2:86:20:67:
                    5f:c8:45:f0:b0:82:cf:10:eb:49:28:22:ab:49:a5:
                    30:dc:44:64:23:1a:b0:5a:e7:d6:99:b1:74:6b:fc:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3F:74:FC:99:5D:89:28:D4:9F:AB:11:F9:56:D3:9F:04:E7:86:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/827CD5A09C9111F1AA84EDB4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.113.0-156.225.114.255
                  156.225.116.0/22
                  156.227.199.0-156.227.202.255

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:4e:1f:ef:c7:75:d9:98:f5:51:8a:59:d8:d1:9e:92:7b:
         41:4b:df:d1:81:9e:80:18:47:e7:3a:f6:67:7d:75:4e:ba:b4:
         11:01:6d:43:32:d1:59:29:63:38:ad:40:d9:90:35:8d:e8:12:
         f3:af:e0:95:c1:6b:73:79:e6:a7:f0:f8:ed:dd:58:33:fc:ef:
         c3:9b:d6:1f:92:f4:b6:ee:1e:e3:3e:96:1b:dc:53:54:00:64:
         1c:f9:7e:8b:b4:40:47:e5:88:15:1d:f7:40:bb:e6:08:52:7c:
         fc:a5:63:8d:94:6f:30:22:ea:cd:81:24:2a:6b:69:f7:d8:fe:
         bd:e0:b3:47:af:02:9b:05:58:20:39:6b:ef:72:24:5b:8e:ac:
         52:08:2b:cc:0f:28:19:20:cb:ed:3f:9c:37:b0:0d:99:3a:ce:
         ee:e5:d9:ab:31:97:9e:20:c9:75:e3:ba:17:ce:88:96:49:7b:
         50:54:82:68:4c:f5:95:45:8f:e2:56:27:19:ce:49:b6:80:35:
         89:54:d4:91:4a:ab:10:28:c2:14:0d:45:08:cd:39:02:62:6a:
         37:5d:3b:d5:83:6b:6c:df:1a:a4:34:08:ac:5b:b0:48:25:42:
         67:90:9a:af:9c:ef:af:9b:22:f2:c6:4b:38:de:07:9f:b6:b0:
         6c:38:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----