Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A60907C09FA511F1859AB61DCF1D38B0.roa
File:                     A60907C09FA511F1859AB61DCF1D38B0.roa (raw, json)
Hash identifier:          lqXzrXXQx6RtRjunLXBj16Y5dqVghNeJzOPsCu7P93Y=
Subject key identifier:   2F:DF:E2:E0:4E:DE:FF:2D:2B:7D:26:EE:98:F5:66:8C:56:92:BE:A3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D092
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A60907C09FA511F1859AB61DCF1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:22:03 +0000
ROA not before:           Mon 24 Aug 2026 10:21:59 +0000
ROA not after:            Fri 02 Oct 2026 10:21:59 +0000
asID:                     44559
IP address blocks:        156.243.220.0/24 maxlen: 24
                          156.243.221.0/24 maxlen: 24
                          156.243.222.0/24 maxlen: 24
                          156.243.224.0/24 maxlen: 24
                          156.243.226.0/24 maxlen: 24
                          156.243.227.0/24 maxlen: 24
                          156.243.228.0/24 maxlen: 24
                          156.243.231.0/24 maxlen: 24
                          156.243.232.0/24 maxlen: 24
                          156.243.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118930 (0x1d092)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 10:21:59 2026 GMT
            Not After : Oct  2 10:21:59 2026 GMT
        Subject: CN=6a8c1b4b-f2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:72:be:a6:00:91:d4:1c:17:f1:f6:38:c2:c5:
                    da:da:8f:18:71:71:68:df:e6:5a:ae:e1:46:59:d8:
                    b4:01:fe:6a:7b:cd:5e:5d:fd:a3:c4:f1:79:42:f4:
                    5e:ce:0c:a6:db:ed:ac:af:24:30:12:aa:ea:64:02:
                    3b:af:b5:f5:c5:12:72:30:3e:94:ab:23:5b:31:7a:
                    15:94:67:41:10:b6:42:e3:2c:f9:6f:b7:89:36:11:
                    5e:88:59:9e:4e:fa:42:7e:a2:2d:f3:aa:41:8d:8c:
                    49:a5:0b:51:5e:b2:cd:bc:78:ff:42:42:a7:ee:ae:
                    86:e2:23:bd:74:a7:84:1f:5b:51:92:96:26:d6:5a:
                    af:21:85:5a:41:e4:f6:81:70:66:dc:5d:53:a4:73:
                    16:01:8a:0f:b1:9c:ee:9a:ee:9e:11:31:96:af:15:
                    e3:e9:32:d6:92:55:22:2f:7f:14:52:dc:d5:d4:0e:
                    e2:8c:05:77:2e:26:db:4b:de:9e:26:55:ee:b8:a5:
                    d5:0a:2e:b6:04:1c:42:2d:db:96:90:71:09:33:7f:
                    32:73:b4:ce:c9:1e:21:6f:9d:d7:c3:46:e9:ff:0d:
                    50:e6:c4:8b:c9:2e:79:79:4a:8d:56:19:43:2b:92:
                    d4:be:7d:4a:96:a6:2f:f4:41:01:f2:f5:f7:91:0e:
                    58:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:E2:E0:4E:DE:FF:2D:2B:7D:26:EE:98:F5:66:8C:56:92:BE:A3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A60907C09FA511F1859AB61DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.220.0-156.243.222.255
                  156.243.224.0/24
                  156.243.226.0-156.243.228.255
                  156.243.231.0-156.243.233.255

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:8e:9b:8c:1d:b7:21:32:52:e5:91:7c:9b:7c:91:14:dd:
         1a:0b:3b:63:e9:ff:29:e4:b5:30:d5:06:c9:af:59:9c:39:69:
         cc:18:e6:0b:74:73:03:1e:04:0b:14:d1:5f:e1:f4:aa:c2:9c:
         44:da:02:aa:b5:48:eb:9b:a2:fb:1d:6b:a0:ba:f2:59:94:69:
         30:50:54:c1:1e:79:fb:25:31:65:e2:42:b5:9f:fe:15:65:01:
         f0:b0:2e:62:71:9c:20:fa:89:53:fc:54:ad:50:ed:80:4f:33:
         51:c8:57:48:0b:19:6a:2a:3e:5f:53:a3:57:c2:c6:d8:01:02:
         c6:bf:28:b3:3e:53:c6:83:92:27:96:a2:59:a3:71:7e:02:49:
         b4:8a:1f:29:b9:c8:de:5d:11:c5:27:0f:72:d3:88:30:67:55:
         6b:b2:55:c0:b3:49:37:ef:78:d6:9a:1a:1e:d9:41:bf:64:95:
         0c:fe:90:8a:ff:72:a3:80:34:ae:ed:bf:c0:9e:ba:c2:53:10:
         de:65:ec:ff:09:d7:2b:22:e5:39:e3:13:5c:39:cb:f4:5b:24:
         ba:7d:87:97:c2:90:5e:d0:2a:55:4d:14:69:30:ea:69:ad:e8:
         f1:e7:29:9d:7b:2f:8e:bf:f3:17:c3:ee:2a:49:55:77:f4:aa:
         89:c2:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----