Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F771668E5911F1BFE20E04CF1D38B0.roa
File:                     82F771668E5911F1BFE20E04CF1D38B0.roa (raw, json)
Hash identifier:          p5YqM9k6MoNU2BrFAWyVzm/dyBCzq2r3zNG+DkMXkSY=
Subject key identifier:   FA:13:BB:0A:48:35:5A:76:F1:B0:83:52:62:3F:D1:B0:F4:56:71:58
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C943
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F771668E5911F1BFE20E04CF1D38B0.roa
Signing time:             Sun 02 Aug 2026 10:04:13 +0000
ROA not before:           Sun 02 Aug 2026 10:04:09 +0000
ROA not after:            Tue 22 Sep 2026 10:04:09 +0000
asID:                     401696
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117059 (0x1c943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 10:04:09 2026 GMT
            Not After : Sep 22 10:04:09 2026 GMT
        Subject: CN=6a6f161d-bcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:ad:36:99:79:40:a5:e6:e0:2e:8f:d8:ef:
                    54:6f:c9:bc:31:47:bc:44:f8:92:2b:92:3c:f9:0b:
                    6a:9e:64:ef:34:30:b0:d7:c9:3c:01:47:b4:13:1e:
                    5f:65:0c:6e:26:3a:25:78:0f:0d:47:1c:7f:93:98:
                    62:fb:10:b5:2a:3e:fc:78:8e:31:2d:34:61:af:20:
                    c1:5a:5f:d2:d0:e7:6b:c0:9f:ff:a1:3d:5c:d4:38:
                    3a:62:0a:9d:21:22:ae:31:89:e5:63:e1:0d:b7:a6:
                    b9:d3:2e:6d:ef:0e:96:84:b3:28:a0:aa:c6:a2:cb:
                    d7:6e:01:d4:ec:63:cb:8c:2b:8f:ec:d6:ca:63:58:
                    bf:57:62:b7:f5:18:17:7b:19:e6:f9:84:c8:a8:6b:
                    08:1d:dc:35:8e:1f:7e:a2:cb:38:dc:1a:fb:83:48:
                    23:fc:16:67:df:4c:53:74:91:7d:b8:de:78:80:b2:
                    a9:1f:67:7c:f6:eb:f5:a8:73:c7:4b:53:00:14:3c:
                    4a:9b:87:a2:8c:1d:ce:72:b7:88:86:ac:71:d1:2c:
                    3a:ca:24:b0:e9:35:84:92:9a:14:1d:70:bc:1e:78:
                    8c:3d:8b:32:d8:f8:67:0c:e5:f5:0b:94:94:c0:fc:
                    35:f1:0e:37:0c:df:72:94:ea:21:4c:b3:f7:25:ea:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:13:BB:0A:48:35:5A:76:F1:B0:83:52:62:3F:D1:B0:F4:56:71:58
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F771668E5911F1BFE20E04CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:87:56:75:a3:53:c1:dc:fd:55:39:c3:c6:0c:bf:9f:bd:75:
         32:d1:7a:49:c2:68:ea:5d:26:df:ec:b6:41:fb:8b:68:4b:f2:
         db:79:de:62:04:4e:87:5b:1f:02:a4:c6:47:06:96:53:2d:09:
         d1:9e:08:6f:1e:e0:15:63:4a:8e:40:9c:87:94:06:dc:8f:d0:
         e3:91:f4:34:bf:05:ed:69:4a:d0:6c:8a:e7:5d:df:db:ac:dd:
         dc:af:1c:af:65:ea:5e:a2:f8:91:63:fc:aa:48:6d:be:d5:bb:
         e8:df:c8:7d:91:75:3e:7f:ab:36:37:57:70:55:80:7a:02:85:
         3f:be:8a:44:d7:b7:c3:c5:74:4d:d3:c4:5c:7a:4b:67:32:ed:
         31:e9:d7:92:ea:88:a7:ef:c1:90:5b:72:27:8e:b3:13:54:82:
         51:27:e3:fe:54:2e:f6:22:8b:30:60:14:eb:ad:ac:9b:8a:34:
         ce:ed:1a:32:28:17:dc:66:54:77:31:bc:84:e6:9f:04:b1:67:
         40:1f:47:90:11:c3:95:dd:83:8d:6f:cc:b2:f0:e3:ea:50:03:
         35:13:22:5b:c8:9a:5c:27:d8:76:2b:a3:50:f8:02:d0:39:11:
         58:2e:c3:0d:8b:7b:e1:3c:54:1d:84:3c:cb:0a:59:55:77:42:
         26:c6:e1:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAclDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODAyMTAwNDA5WhcNMjYwOTIyMTAwNDA5WjAYMRYw
FAYDVQQDEw02YTZmMTYxZC1iY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyAStNpl5QKXm4C6P2O9Ub8m8MUe8RPiSK5I8+QtqnmTvNDCw18k8AUe0
Ex5fZQxuJjoleA8NRxx/k5hi+xC1Kj78eI4xLTRhryDBWl/S0OdrwJ//oT1c1Dg6
YgqdISKuMYnlY+ENt6a50y5t7w6WhLMooKrGosvXbgHU7GPLjCuP7NbKY1i/V2K3
9RgXexnm+YTIqGsIHdw1jh9+oss43Br7g0gj/BZn30xTdJF9uN54gLKpH2d89uv1
qHPHS1MAFDxKm4eijB3OcreIhqxx0Sw6yiSw6TWEkpoUHXC8HniMPYsy2PhnDOX1
C5SUwPw18Q43DN9ylOohTLP3JerYRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPoT
uwpINVp28bCDUmI/0bD0VnFYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MkY3NzE2NjhFNTkxMUYxQkZFMjBFMDRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOEQMA0GCSqGSIb3DQEBCwUA
A4IBAQBlh1Z1o1PB3P1VOcPGDL+fvXUy0XpJwmjqXSbf7LZB+4toS/Lbed5iBE6H
Wx8CpMZHBpZTLQnRnghvHuAVY0qOQJyHlAbcj9DjkfQ0vwXtaUrQbIrnXd/brN3c
rxyvZepeoviRY/yqSG2+1bvo38h9kXU+f6s2N1dwVYB6AoU/vopE17fDxXRN08Rc
ektnMu0x6deS6oin78GQW3InjrMTVIJRJ+P+VC72IoswYBTrraybijTO7RoyKBfc
ZlR3MbyE5p8EsWdAH0eQEcOV3YONb8yy8OPqUAM1EyJbyJpcJ9h2K6NQ+ALQORFY
LsMNi3vhPFQdhDzLCllVd0ImxuFC
-----END CERTIFICATE-----