Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC1E45C9D5611F1B4AEA1E4CE1D38B0.roa
File:                     9DC1E45C9D5611F1B4AEA1E4CE1D38B0.roa (raw, json)
Hash identifier:          xCS1guoo8HaqRfDZwYke/As4X0RxotR9sgRE4ej+aWw=
Subject key identifier:   FA:9B:DD:E5:D8:23:54:06:56:72:95:26:EE:FC:3E:7B:66:C9:8A:D8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC1E45C9D5611F1B4AEA1E4CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 11:51:17 +0000
ROA not before:           Fri 21 Aug 2026 11:51:12 +0000
ROA not after:            Tue 24 Aug 2027 11:51:12 +0000
asID:                     13335
IP address blocks:        156.247.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118728 (0x1cfc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 11:51:12 2026 GMT
            Not After : Aug 24 11:51:12 2027 GMT
        Subject: CN=6a883bb5-acbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:4c:eb:2d:2b:3f:33:05:1a:af:87:98:31:
                    85:a7:45:1c:04:90:84:0f:fd:32:39:18:ea:77:7b:
                    fc:31:41:15:54:ee:69:ea:17:3d:d7:92:a4:5d:47:
                    45:69:3d:87:19:c5:a6:dd:b2:2f:6d:95:df:74:0d:
                    ba:30:1f:20:45:8f:78:03:29:1f:93:b2:19:03:2d:
                    0c:7d:df:8f:02:10:8a:07:fe:76:31:87:2a:ac:48:
                    c9:3a:49:b2:a8:3b:ef:10:d6:73:d8:49:f7:34:19:
                    8a:8f:d7:24:4c:c3:ab:19:66:5b:a7:37:3c:36:68:
                    91:22:ec:cd:a2:3b:09:1a:aa:26:9f:44:94:fe:82:
                    91:48:be:0e:c0:f6:22:27:12:b9:9b:8e:32:de:48:
                    7e:a9:aa:cb:2f:24:e0:19:3d:8d:d8:11:25:ef:71:
                    7e:a1:ab:c9:95:bf:de:42:63:b0:08:de:2f:96:c0:
                    2f:8a:c0:aa:74:c3:18:48:d8:dc:fd:c9:2a:36:38:
                    8b:47:c3:01:c4:77:bb:fc:8b:ef:96:4a:b1:22:26:
                    e1:38:03:a7:e5:8f:0a:73:44:ab:d7:ec:ea:c8:28:
                    f3:07:7a:fb:da:cb:91:4b:46:1a:9b:b3:6f:f4:01:
                    af:06:4b:97:9b:7a:8e:ea:7e:4c:02:3b:37:42:95:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:DD:E5:D8:23:54:06:56:72:95:26:EE:FC:3E:7B:66:C9:8A:D8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC1E45C9D5611F1B4AEA1E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:52:d9:fa:2d:f3:c1:87:04:9b:30:fc:97:fa:69:d4:21:ba:
         27:0c:4c:1f:fa:50:75:2a:34:4c:51:60:65:9f:ad:27:09:92:
         03:58:83:4c:cf:79:d1:da:52:62:a0:61:9f:b7:37:cf:d9:40:
         e4:fb:62:61:e5:a4:0e:7f:49:f0:72:19:7e:35:70:e8:01:d7:
         bc:34:d7:1b:d0:b9:f2:7a:7b:88:fc:2f:f6:13:9c:c8:7f:43:
         88:13:8e:90:41:15:41:8a:1f:ab:7b:8a:6a:01:07:94:0d:f4:
         00:20:2c:82:b2:fd:af:3e:02:f5:86:ab:d0:0c:cd:98:b4:91:
         1c:60:71:ff:29:9c:14:0f:1d:2c:94:7c:2b:99:20:4f:bf:b0:
         56:50:9d:c0:7e:b6:60:48:c9:93:33:b7:99:22:bf:10:ea:7d:
         13:09:cb:ed:97:23:d5:63:da:26:f1:8b:7e:93:66:80:a2:2f:
         3d:98:52:73:b8:2b:4d:8c:26:de:40:e2:91:63:bc:8c:bb:04:
         9f:a7:ce:87:49:3e:0d:59:e5:ec:42:6b:92:5f:52:04:5c:da:
         ff:cd:b1:38:d5:a0:84:10:4e:76:e0:32:ab:c2:d0:57:60:e9:
         93:b2:9e:fc:b2:7a:d8:ad:cc:dc:e4:9a:62:6b:72:df:6b:43:
         16:9b:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----