Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7BBCC188F5D11F18926C9A6CE1D38B0.roa
File:                     A7BBCC188F5D11F18926C9A6CE1D38B0.roa (raw, json)
Hash identifier:          kEfEnirkMz8lZxzlNS7u1ZD4SKlwrXzUBXAa6e8Lk4Y=
Subject key identifier:   0C:5B:19:69:6B:EF:3D:82:5E:77:40:64:51:D1:24:85:12:8F:DB:C1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C99B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7BBCC188F5D11F18926C9A6CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 17:06:24 +0000
ROA not before:           Mon 03 Aug 2026 17:06:19 +0000
ROA not after:            Sun 13 Sep 2026 17:06:19 +0000
asID:                     18046
IP address blocks:        156.236.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117147 (0x1c99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 17:06:19 2026 GMT
            Not After : Sep 13 17:06:19 2026 GMT
        Subject: CN=6a70ca90-f531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:11:c1:f6:83:48:c8:5f:ce:9d:db:0b:2e:
                    4c:33:68:87:87:bf:09:94:86:00:d2:c3:36:f8:2c:
                    87:09:d2:96:f1:49:37:bb:ef:50:0f:33:02:6b:e0:
                    11:66:31:59:bd:35:5b:75:b6:16:25:c1:2e:18:65:
                    01:53:20:2d:4f:49:e4:36:3c:6e:a8:cc:d3:88:d3:
                    ad:f2:e8:7f:91:e0:11:e5:b4:70:5f:db:79:84:2e:
                    1a:67:5d:50:ad:58:2c:34:56:94:0c:19:29:31:8a:
                    bb:31:2e:42:9d:eb:8f:f6:33:11:74:84:ab:a7:80:
                    00:3d:fc:c2:74:44:10:97:95:19:7c:de:b1:e4:7d:
                    2d:39:17:dc:de:7a:e0:31:d6:2a:1b:65:d2:32:19:
                    36:f9:54:7f:45:19:95:46:98:c6:33:30:3b:c6:61:
                    fa:d0:4a:3e:8f:2f:d1:70:15:f9:02:9e:c4:c5:cb:
                    f8:70:21:b0:a3:ca:08:0b:4f:41:cd:4c:46:d1:fb:
                    82:49:ba:06:dd:71:bf:a6:4d:6e:07:d4:93:4d:ec:
                    a0:1a:d9:03:93:ab:0d:5e:35:71:b5:1e:d6:7a:e6:
                    07:bc:32:5e:b2:cc:e6:fa:12:b1:37:3f:33:fd:33:
                    30:70:39:20:17:67:4e:67:33:4d:64:9e:05:dd:3a:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5B:19:69:6B:EF:3D:82:5E:77:40:64:51:D1:24:85:12:8F:DB:C1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7BBCC188F5D11F18926C9A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:2b:04:7e:ec:65:92:23:0a:2b:43:b1:d8:84:12:c8:9b:ea:
         79:4c:22:80:c0:10:11:c6:6e:0b:d1:3f:8c:f9:99:dd:40:b3:
         43:ea:2e:59:0c:ea:45:86:d9:e3:72:94:c5:14:f9:be:2a:f7:
         ef:93:2f:68:59:32:f9:72:7e:f7:65:63:60:90:c0:a3:a4:74:
         f4:72:66:a7:ad:ac:8e:42:65:ea:07:3c:d5:06:7e:17:f1:d5:
         8c:5b:6a:27:5a:59:9f:44:b7:02:64:d5:b9:cd:f3:b4:4a:56:
         e0:85:6b:0e:32:bd:c4:6a:d3:98:3b:85:5b:a1:5b:88:62:33:
         8d:7f:a3:32:a5:8a:01:c5:5d:2e:13:eb:56:f9:ec:07:31:d2:
         06:d4:d7:fe:38:f5:b7:8e:9a:e0:20:13:9c:a0:41:03:4e:ae:
         34:5e:f3:26:8e:58:95:24:02:0a:e5:a6:13:6e:db:6d:01:38:
         71:2e:05:42:f8:9b:4c:df:1f:29:54:67:2b:8a:60:07:24:4f:
         05:d9:13:4b:73:e3:d2:cf:01:54:18:f6:9a:c0:78:a1:bb:2d:
         42:c4:6b:36:3d:7c:42:1a:ad:87:3a:62:09:0c:3c:4f:42:c8:
         14:29:a2:88:38:5e:df:37:ee:ad:86:59:5f:c8:4b:bd:a9:7a:
         d0:17:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----