Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B74C210B99911F190B36BDECE1D38B0.roa
File:                     8B74C210B99911F190B36BDECE1D38B0.roa (raw, json)
Hash identifier:          ACx8eXAQaC8FPrluw3RrVsLFEUPAXsPD2aH0y/v2ppE=
Subject key identifier:   7C:C6:08:8A:B5:14:66:2A:4A:27:17:B0:1A:7A:13:17:C0:8D:F5:87
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D900
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B74C210B99911F190B36BDECE1D38B0.roa
Signing time:             Sat 26 Sep 2026 11:00:55 +0000
ROA not before:           Sat 26 Sep 2026 11:00:51 +0000
ROA not after:            Mon 02 Nov 2026 11:00:51 +0000
asID:                     11427
IP address blocks:        156.233.200.0/22 maxlen: 24
                          156.238.172.0/22 maxlen: 24
                          156.239.136.0/22 maxlen: 24
                          156.241.44.0/22 maxlen: 24
                          156.242.84.0/22 maxlen: 24
                          156.242.96.0/22 maxlen: 24
                          156.242.108.0/22 maxlen: 24
                          156.243.116.0/22 maxlen: 24
                          156.243.140.0/22 maxlen: 24
                          156.243.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121088 (0x1d900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 11:00:51 2026 GMT
            Not After : Nov  2 11:00:51 2026 GMT
        Subject: CN=6ab7a5e7-2437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:2a:3c:2b:78:f9:5d:c1:48:3c:5b:37:9a:
                    c0:36:e6:17:11:45:96:18:45:a1:d7:0f:9a:35:b4:
                    1b:31:55:e2:6b:df:88:67:c0:88:e6:91:b8:cb:96:
                    56:8e:b1:55:f2:cf:ab:84:66:ca:e3:ef:fa:3b:e3:
                    f8:a7:b6:22:f9:47:03:48:f7:19:d1:af:04:96:ce:
                    49:30:8d:48:0d:10:0f:35:9b:ea:65:5a:aa:a2:10:
                    80:1c:16:7c:81:5b:6b:7e:3c:7d:72:c1:b6:10:19:
                    33:f2:a4:29:ff:87:b2:cd:39:a0:39:92:4b:c2:3a:
                    a4:b3:b5:f6:10:09:11:1e:91:b9:71:a8:c1:e9:57:
                    4f:ac:ce:9e:c0:7f:58:33:d7:73:5a:84:db:8b:ef:
                    5c:86:17:c0:6a:13:2e:62:04:ac:20:3a:3b:f9:4b:
                    a9:41:36:86:a4:18:90:95:4d:db:94:4e:13:21:d4:
                    10:2c:eb:cd:79:4f:d1:a7:b1:47:57:fe:98:02:c3:
                    89:8c:8d:a5:9c:75:54:83:78:8d:85:82:07:86:ec:
                    cd:0c:87:98:96:37:35:0b:b8:58:4d:f7:23:7e:d5:
                    49:a4:da:c1:35:4b:37:0e:3e:9b:8c:8d:c5:2f:98:
                    11:6e:17:52:ac:a8:8f:89:3e:4b:b5:16:10:ab:5a:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C6:08:8A:B5:14:66:2A:4A:27:17:B0:1A:7A:13:17:C0:8D:F5:87
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B74C210B99911F190B36BDECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.200.0/22
                  156.238.172.0/22
                  156.239.136.0/22
                  156.241.44.0/22
                  156.242.84.0/22
                  156.242.96.0/22
                  156.242.108.0/22
                  156.243.116.0/22
                  156.243.140.0/22
                  156.243.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:44:3e:10:16:16:54:12:a5:37:60:85:77:9d:3e:f7:15:
         5a:5b:f9:72:a3:f2:10:4e:c8:cc:fc:f7:d9:a7:3d:3b:f2:07:
         d4:73:25:35:62:d0:eb:28:ff:df:bd:3e:76:64:eb:65:bd:fc:
         fc:58:d1:da:19:06:45:e1:1e:4c:9a:27:0b:60:d1:72:4c:61:
         6e:3f:a5:ea:d9:77:35:ea:59:be:ea:4f:38:b7:bf:38:6b:dd:
         54:a9:ee:7f:96:ff:db:84:83:28:ca:f4:bc:4e:e8:a3:f8:a1:
         d5:20:17:96:9a:af:69:a0:f2:e2:d5:7d:20:90:db:38:de:48:
         46:a5:f2:2b:6f:17:d1:7e:07:d2:61:37:a6:29:e5:a0:6c:91:
         17:e1:aa:54:30:9f:1c:6d:ed:a7:3c:a8:5e:6f:79:ac:bd:1c:
         f4:bd:8d:67:b8:a2:93:fe:3e:c0:88:ae:9f:41:a6:95:99:3a:
         b5:3d:4e:a5:91:3b:af:09:2a:d0:42:91:e4:45:8b:29:28:df:
         59:f3:68:a2:16:e5:ee:2a:f4:fd:9b:21:58:7c:c5:dd:df:64:
         cf:f6:4d:a9:5a:d4:9c:8c:b4:17:c3:ab:c1:80:79:c6:b5:70:
         a2:56:ed:b2:51:01:a7:1e:75:fa:16:14:1a:73:e1:35:1c:5d:
         dd:16:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----