Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9925BBD4A50E11F198EDE2E8CE1D38B0.roa
File:                     9925BBD4A50E11F198EDE2E8CE1D38B0.roa (raw, json)
Hash identifier:          aOQtpsN5PumueBRfmZu58fDeBvU+2wBG5Pa3gkWTA5s=
Subject key identifier:   BF:6C:3C:D6:46:90:A8:5C:94:E4:E5:02:33:73:78:C7:07:4F:A5:10
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D206
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9925BBD4A50E11F198EDE2E8CE1D38B0.roa
Signing time:             Mon 31 Aug 2026 07:35:55 +0000
ROA not before:           Mon 31 Aug 2026 07:35:51 +0000
ROA not after:            Fri 11 Sep 2026 07:35:51 +0000
asID:                     11427
IP address blocks:        156.229.180.0/22 maxlen: 24
                          156.229.232.0/22 maxlen: 24
                          156.229.240.0/22 maxlen: 24
                          156.233.4.0/22 maxlen: 24
                          156.243.208.0/21 maxlen: 24
                          156.244.136.0/21 maxlen: 24
                          156.248.96.0/21 maxlen: 24
                          156.249.72.0/21 maxlen: 24
                          156.249.88.0/21 maxlen: 24
                          156.249.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119302 (0x1d206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 31 07:35:51 2026 GMT
            Not After : Sep 11 07:35:51 2026 GMT
        Subject: CN=6a952edb-9dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:2d:d0:d5:3f:0a:fa:ba:3d:9e:53:59:1b:
                    1a:12:7d:cf:ce:54:40:2b:15:65:84:fb:9f:8f:fc:
                    4b:ec:15:fa:49:9a:71:8a:57:41:53:00:b0:ad:3c:
                    c7:d4:5e:00:48:6f:01:c7:34:a7:0f:34:8a:22:b7:
                    8d:20:32:d4:25:7b:f8:ca:81:27:0d:12:6a:cf:b6:
                    0c:2d:40:6a:fb:aa:2a:9a:0f:59:8a:d2:d8:84:44:
                    36:cf:cf:16:7b:c1:1a:6e:0f:3e:21:ee:2d:58:88:
                    ea:fc:2e:35:02:5f:ab:a6:ed:22:51:79:a0:a6:6b:
                    fb:71:a5:63:df:21:8e:6e:d0:75:d6:0a:40:76:a4:
                    08:18:d6:52:36:33:8c:54:66:44:53:ea:f3:68:77:
                    e1:ba:7b:99:9b:4d:98:2b:31:dc:05:a5:62:26:72:
                    6c:fb:e2:2f:93:c7:b1:ba:05:33:93:4d:0b:2a:77:
                    fb:34:24:b7:bc:d8:e1:e3:fd:fa:2b:89:1a:7b:b8:
                    d7:22:c1:05:f0:39:fc:59:20:74:35:0a:60:6c:af:
                    82:22:59:17:a5:b1:18:b5:37:e6:48:53:44:c6:ac:
                    b0:79:10:d3:aa:b2:77:e9:87:62:88:c2:7d:d5:16:
                    f0:f8:6f:a5:b8:be:2a:58:1a:85:0a:45:c4:26:fc:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6C:3C:D6:46:90:A8:5C:94:E4:E5:02:33:73:78:C7:07:4F:A5:10
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9925BBD4A50E11F198EDE2E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.180.0/22
                  156.229.232.0/22
                  156.229.240.0/22
                  156.233.4.0/22
                  156.243.208.0/21
                  156.244.136.0/21
                  156.248.96.0/21
                  156.249.72.0/21
                  156.249.88.0/21
                  156.249.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:ec:b8:c9:0f:ba:c7:01:1a:7a:e2:7c:9c:c0:c1:69:0a:1a:
         5b:da:e7:04:34:4f:f9:f0:6c:32:57:2e:0a:18:cc:fc:47:df:
         b4:77:de:c4:54:45:69:9e:4a:f9:4e:1d:03:aa:b4:1d:b9:a4:
         36:9a:bd:ba:d9:db:0a:d1:7a:84:c8:67:2a:46:46:c2:75:ce:
         b0:95:89:0c:f1:43:ae:74:0a:38:88:c0:1d:81:1d:20:32:7b:
         81:46:e0:fc:54:fd:1b:d6:8d:83:87:92:9a:27:1c:b5:3f:50:
         e7:7a:ba:82:d6:38:48:50:9e:03:99:36:f1:0f:4a:22:70:cd:
         eb:06:f6:f3:e7:8f:3d:b3:b8:5d:ac:c7:dc:38:f7:56:1b:86:
         91:61:44:67:1f:c7:84:44:6c:9f:62:bb:51:61:50:e2:e6:15:
         c9:b9:b0:0b:f8:dc:0c:e9:52:37:90:2e:89:93:3b:82:c5:73:
         da:81:9b:5f:18:e4:a9:11:79:06:d8:7b:5e:79:a3:8c:0a:c4:
         d1:11:6c:c4:5d:23:fd:94:06:71:f5:c9:cf:36:9c:00:dd:77:
         75:4a:2b:5a:6a:e3:01:cb:06:6b:9c:e0:51:d0:56:9a:0f:a7:
         9e:f6:c5:fa:d5:1c:03:17:22:94:5a:93:60:5d:be:e0:39:1c:
         c5:8e:2a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----