Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918B6A0A964911F1BEEB6A1DCF1D38B0.roa
File:                     918B6A0A964911F1BEEB6A1DCF1D38B0.roa (raw, json)
Hash identifier:          r6gFwy+faU6L5HcJOqD6G6CzaNP3jDsd91sVnG5SWsM=
Subject key identifier:   D6:3A:4D:6B:2E:59:5F:BA:5D:2C:6C:6C:1B:FA:A4:A0:1F:FB:EA:44
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918B6A0A964911F1BEEB6A1DCF1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:30:15 +0000
ROA not before:           Wed 12 Aug 2026 12:30:10 +0000
ROA not after:            Sun 12 Aug 2029 12:30:10 +0000
asID:                     17561
IP address blocks:        156.251.174.0/24 maxlen: 24
                          156.251.175.0/24 maxlen: 24
                          156.251.176.0/24 maxlen: 24
                          156.251.177.0/24 maxlen: 24
                          156.251.178.0/24 maxlen: 24
                          156.251.179.0/24 maxlen: 24
                          156.251.180.0/24 maxlen: 24
                          156.251.181.0/24 maxlen: 24
                          156.251.182.0/24 maxlen: 24
                          156.251.183.0/24 maxlen: 24
                          156.251.184.0/24 maxlen: 24
                          156.251.185.0/24 maxlen: 24
                          156.251.186.0/24 maxlen: 24
                          156.251.187.0/24 maxlen: 24
                          156.251.188.0/24 maxlen: 24
                          156.251.189.0/24 maxlen: 24
                          156.251.190.0/24 maxlen: 24
                          156.251.191.0/24 maxlen: 24
                          156.251.192.0/24 maxlen: 24
                          156.251.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117764 (0x1cc04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 12:30:10 2026 GMT
            Not After : Aug 12 12:30:10 2029 GMT
        Subject: CN=6a7c6757-16d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:f6:4a:89:9f:cc:3e:cd:9f:a7:ff:60:bb:
                    6d:67:d0:8e:74:26:4e:63:df:72:24:3a:8e:e9:06:
                    a8:76:76:5a:1a:7a:f3:75:14:77:28:07:b4:8d:09:
                    02:28:94:ff:96:ce:6b:ab:4c:7d:68:9c:ba:fb:29:
                    7c:92:f7:16:b7:4f:b5:35:29:24:9a:bc:61:28:f4:
                    43:d4:c6:3d:ae:93:18:25:17:f4:92:6c:cb:c7:ae:
                    30:da:ae:d2:d9:5c:4d:0e:09:fa:55:3c:b7:a3:0a:
                    26:ea:d9:69:dd:7a:58:e0:62:33:ee:f8:b8:b5:66:
                    6d:b1:6c:87:a1:36:22:dd:73:6e:8d:6a:76:ff:5a:
                    c0:ee:12:c9:79:f9:cf:ca:bf:dc:ff:5a:c8:a0:0b:
                    f5:a5:d7:22:2e:ae:e9:1a:b6:37:a9:8c:01:78:b4:
                    40:b5:04:a5:16:70:b6:86:0e:d4:ac:4a:2d:31:48:
                    7e:6f:81:a5:74:42:52:9a:ef:9f:5e:1b:3d:ac:42:
                    81:bf:6e:9b:5b:90:a5:47:16:65:21:cf:c2:cc:21:
                    38:14:de:f1:eb:da:01:c7:01:19:e5:15:00:76:52:
                    17:6f:f2:82:d3:3d:5e:4b:26:0e:e6:1c:9c:c6:1e:
                    f0:d8:1d:23:08:18:3f:68:9f:cd:0d:39:73:99:39:
                    95:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3A:4D:6B:2E:59:5F:BA:5D:2C:6C:6C:1B:FA:A4:A0:1F:FB:EA:44
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918B6A0A964911F1BEEB6A1DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.174.0-156.251.193.255

    Signature Algorithm: sha256WithRSAEncryption
         45:5a:6c:40:28:0c:67:32:75:b1:47:b9:11:8f:38:33:5d:aa:
         40:98:0a:84:d2:63:fc:d7:a7:ab:3b:4f:7a:69:98:80:10:1f:
         0c:80:59:bb:14:8c:ab:29:e6:3a:fc:86:1c:59:98:2d:e3:d1:
         39:b8:e8:92:a1:40:c6:1e:71:2b:f3:58:ef:38:c9:67:ea:b7:
         5b:6c:6d:e6:cb:fb:63:d2:05:8c:3f:d9:d4:66:d5:db:c4:98:
         c9:43:57:86:ff:12:81:11:c9:a9:fd:20:3b:b0:9a:aa:43:2e:
         c6:ec:bc:3b:66:87:c2:8f:c9:2b:32:87:ae:76:4e:cf:fd:46:
         3d:83:b0:f7:1a:9e:5c:bc:70:81:f2:22:fc:cc:bb:d8:7f:df:
         68:85:2f:69:3e:8f:ca:8a:b4:01:55:ec:5a:40:07:d5:c2:f1:
         3d:09:25:ca:03:2f:64:84:8d:7e:ff:6c:e3:96:8b:ca:04:c0:
         98:5a:bd:ee:65:02:49:38:ef:e1:5b:01:b8:b2:ed:db:98:49:
         c2:9b:1d:15:63:15:d8:ee:61:48:05:f6:1f:b1:4c:fc:74:4b:
         fc:6f:86:8e:c4:fb:73:7c:d1:a5:1e:3c:f4:20:e8:af:38:cf:
         77:e0:15:73:79:d4:88:c3:2c:5a:fc:a8:ee:95:95:51:7f:fa:
         fa:f8:55:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----