Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9125BCAABEF311F1B5103DD0CE1D38B0.roa
File:                     9125BCAABEF311F1B5103DD0CE1D38B0.roa (raw, json)
Hash identifier:          iHRunUTQIkCyw+iIim2bIq9I1L1e/R7qMqfXqiRfcAs=
Subject key identifier:   09:6C:B6:EB:5F:A5:86:35:1B:30:FF:9C:72:9A:92:D6:93:19:FF:95
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9125BCAABEF311F1B5103DD0CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 06:27:55 +0000
ROA not before:           Sat 03 Oct 2026 06:27:51 +0000
ROA not after:            Tue 10 Nov 2026 06:27:51 +0000
asID:                     139646
IP address blocks:        156.225.76.0/22 maxlen: 24
                          156.238.120.0/21 maxlen: 24
                          156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.245.144.0/22 maxlen: 24
                          156.245.204.0/22 maxlen: 24
                          156.245.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121389 (0x1da2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 06:27:51 2026 GMT
            Not After : Nov 10 06:27:51 2026 GMT
        Subject: CN=6ac0a06b-9d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:ea:59:4b:00:f7:b3:c4:a2:a6:44:15:5f:
                    c2:54:f7:43:9b:7f:f5:cf:11:d4:7a:40:c9:2d:e1:
                    a3:45:72:d6:6f:05:46:d7:bd:1a:fc:dd:16:1e:d3:
                    39:e3:b9:dd:60:9a:15:b5:79:c2:3e:8d:34:e6:04:
                    bf:76:c4:b7:b4:41:37:7f:c5:1a:c9:06:1e:00:40:
                    33:f2:53:28:cd:72:0f:8e:e0:84:a2:a3:95:6e:48:
                    84:3f:ba:df:6d:7b:57:d4:5b:65:a2:e0:db:e3:16:
                    2c:00:e3:ab:76:f1:0a:a1:8f:64:c9:65:28:37:63:
                    4a:92:45:5d:a0:0a:63:b4:7f:6b:24:61:44:4f:d6:
                    7a:6f:da:25:d6:ee:9b:3c:f1:c9:26:2c:f0:0b:55:
                    e5:4b:9d:bc:bf:e4:5b:f4:1f:b9:a0:7a:c1:ad:e3:
                    de:40:d4:9b:85:ea:75:ac:f6:e2:2b:d5:a7:52:bc:
                    e8:de:1a:54:52:f9:d8:ff:e3:f3:84:60:2e:a4:04:
                    d0:10:24:06:2d:ff:ca:6e:31:c0:08:ba:a5:a6:45:
                    c2:ed:18:f0:04:cc:23:6f:d4:7c:bd:c7:d6:86:17:
                    0e:c3:d6:05:ba:38:a3:4d:a5:f9:c7:da:71:6e:93:
                    8c:56:3c:a0:23:1c:c1:88:40:dc:e4:d8:cb:55:58:
                    73:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6C:B6:EB:5F:A5:86:35:1B:30:FF:9C:72:9A:92:D6:93:19:FF:95
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9125BCAABEF311F1B5103DD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.76.0/22
                  156.238.120.0/21
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.245.144.0/22
                  156.245.204.0/22
                  156.245.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:85:be:61:dd:f0:1d:ea:92:bc:ee:3d:d1:ea:03:53:b4:ed:
         ec:5b:03:be:8e:1f:8c:38:ec:00:09:00:f4:2b:4c:d0:40:15:
         95:cd:14:c3:5f:df:dd:37:81:32:c9:f5:d5:6c:a7:51:78:f7:
         ab:26:e6:80:67:cd:eb:aa:14:bc:c9:e4:78:82:d5:7f:ee:1d:
         1b:12:a1:37:64:f6:64:ba:0d:7e:94:9b:9d:39:87:ff:ef:36:
         50:5a:c1:d1:15:b5:cf:50:34:be:85:45:7e:65:68:b4:96:c7:
         0d:0a:b5:9d:83:f6:b8:52:80:d2:13:ee:32:c4:8c:2e:7a:56:
         02:e4:56:65:7c:d1:2f:93:f7:08:00:e0:e1:e9:bb:ff:ab:f9:
         e8:1d:86:49:f1:d3:0e:5d:5f:39:1c:6d:d5:90:2a:93:a6:92:
         de:0d:48:ed:c2:8c:cd:e1:cd:c2:4e:0a:de:7b:a8:7b:02:56:
         9f:72:9a:11:f1:f0:01:60:37:5e:91:5c:5d:07:d0:99:0c:b7:
         e7:2d:68:e6:2b:95:43:46:85:98:88:33:70:ed:b7:07:53:90:
         4d:0d:2a:7c:fb:2e:f7:3d:7b:99:b2:be:3e:95:19:e9:a6:ae:
         82:ae:a9:ab:79:9d:d8:81:21:36:3b:de:72:05:53:c2:79:91:
         68:c3:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----