Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8B35390964A11F182056AA3CE1D38B0.roa
File:                     A8B35390964A11F182056AA3CE1D38B0.roa (raw, json)
Hash identifier:          cmH7IsvgsUZZwk+bSn/RWfBaAIKJvXSr2Ew46UxRODQ=
Subject key identifier:   3F:61:A7:26:5E:58:ED:71:42:42:8D:95:70:1B:E9:DD:02:C3:85:1F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8B35390964A11F182056AA3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:38:03 +0000
ROA not before:           Wed 12 Aug 2026 12:37:59 +0000
ROA not after:            Sun 12 Aug 2029 12:37:59 +0000
asID:                     17561
IP address blocks:        156.251.194.0/24 maxlen: 24
                          156.251.195.0/24 maxlen: 24
                          156.251.196.0/24 maxlen: 24
                          156.251.197.0/24 maxlen: 24
                          156.251.198.0/24 maxlen: 24
                          156.251.199.0/24 maxlen: 24
                          156.251.200.0/24 maxlen: 24
                          156.251.201.0/24 maxlen: 24
                          156.251.202.0/24 maxlen: 24
                          156.251.203.0/24 maxlen: 24
                          156.251.204.0/24 maxlen: 24
                          156.251.205.0/24 maxlen: 24
                          156.251.206.0/24 maxlen: 24
                          156.251.207.0/24 maxlen: 24
                          156.251.208.0/24 maxlen: 24
                          156.251.209.0/24 maxlen: 24
                          156.251.210.0/24 maxlen: 24
                          156.251.211.0/24 maxlen: 24
                          156.251.212.0/24 maxlen: 24
                          156.251.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117766 (0x1cc06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 12:37:59 2026 GMT
            Not After : Aug 12 12:37:59 2029 GMT
        Subject: CN=6a7c692b-2b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2b:cd:81:4b:51:9f:91:e4:ce:7c:5a:09:2f:
                    1a:d6:ba:2c:83:08:44:a5:87:1e:82:e6:cf:98:94:
                    0f:c4:91:47:d9:25:65:43:08:4b:5a:02:47:13:2d:
                    cb:3e:7e:97:96:93:f0:dd:ff:3b:90:21:9e:73:7c:
                    52:34:0f:1c:a7:85:7a:68:94:7a:50:72:7d:7a:13:
                    a1:64:f5:90:ad:69:a6:9b:29:28:0d:5d:aa:8b:ce:
                    eb:52:0e:b4:df:ed:06:d6:2b:d9:37:3c:f1:c8:59:
                    21:48:73:d4:77:88:20:d7:25:fe:b5:5e:1e:3a:3b:
                    bf:fb:e9:d9:4a:fa:14:e7:73:78:78:8a:cb:5a:34:
                    17:5b:79:86:c5:12:67:cd:56:b1:e1:16:c7:99:96:
                    a9:12:ac:db:dc:e5:db:06:25:44:39:42:33:89:9f:
                    61:b7:a0:d1:f8:05:e8:26:36:f6:9d:65:c9:9a:87:
                    53:1c:cb:10:29:68:fd:de:1e:46:1f:c6:e6:70:ca:
                    0b:65:e1:b0:e0:51:d2:16:b6:ca:40:8d:76:09:cd:
                    d1:2b:0e:9a:51:70:c4:67:b3:ec:79:68:20:ce:6b:
                    83:de:71:92:a7:1f:6c:8f:9f:05:63:65:f1:8e:cb:
                    8f:57:c6:5f:a3:6c:42:29:87:ab:9b:db:0b:f2:5a:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:A7:26:5E:58:ED:71:42:42:8D:95:70:1B:E9:DD:02:C3:85:1F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8B35390964A11F182056AA3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.194.0-156.251.213.255

    Signature Algorithm: sha256WithRSAEncryption
         45:79:f5:18:53:b1:65:31:e4:24:b9:64:95:21:bf:c0:04:64:
         7b:e8:02:50:a1:e4:ff:65:a1:9a:13:3f:fd:87:01:1a:62:a9:
         a8:01:07:30:1c:0c:6f:1b:89:4e:08:8b:32:b3:67:b8:84:19:
         89:4e:9b:33:fd:bb:e9:b8:6a:52:d9:d8:f0:cd:f8:47:65:d7:
         6f:e0:99:0f:6e:ee:9c:c6:46:73:40:fe:99:0a:22:72:1a:ec:
         60:ba:1e:c3:c8:d6:7e:3f:3b:96:5d:cb:90:ea:d2:19:56:2a:
         0a:11:61:fb:21:eb:25:e7:5b:39:40:24:d1:3a:5c:51:93:59:
         21:31:e4:cb:02:74:85:41:cb:01:cd:0d:c8:ff:59:b7:6f:b5:
         08:13:e3:f1:f0:a6:34:f7:07:f9:98:76:ba:55:47:73:eb:f4:
         30:b6:07:bf:09:51:4d:c9:64:5b:bc:69:79:b8:dc:11:f4:5c:
         d8:47:23:03:59:82:bd:2d:de:61:40:68:1b:4d:84:91:1d:14:
         bc:ef:ad:98:90:3d:d9:fe:07:4a:89:09:1c:f2:64:3a:a1:de:
         c1:ee:0b:d9:28:4d:8b:f4:49:7d:45:82:c7:0e:30:2f:3a:f6:
         1c:8c:e6:8d:e3:f1:af:80:54:fe:99:a8:38:9a:2c:4c:34:34:
         6d:47:67:f1
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcwGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEyMTIzNzU5WhcNMjkwODEyMTIzNzU5WjAYMRYw
FAYDVQQDEw02YTdjNjkyYi0yYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2yvNgUtRn5HkznxaCS8a1rosgwhEpYcegubPmJQPxJFH2SVlQwhLWgJH
Ey3LPn6XlpPw3f87kCGec3xSNA8cp4V6aJR6UHJ9ehOhZPWQrWmmmykoDV2qi87r
Ug603+0G1ivZNzzxyFkhSHPUd4gg1yX+tV4eOju/++nZSvoU53N4eIrLWjQXW3mG
xRJnzVax4RbHmZapEqzb3OXbBiVEOUIziZ9ht6DR+AXoJjb2nWXJmodTHMsQKWj9
3h5GH8bmcMoLZeGw4FHSFrbKQI12Cc3RKw6aUXDEZ7PseWggzmuD3nGSpx9sj58F
Y2XxjsuPV8Zfo2xCKYerm9sL8lrOwQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD9h
pyZeWO1xQkKNlXAb6d0Cw4UfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOEIzNTM5MDk2NEExMUYxODIwNTZBQTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc+8IDBAGc+9QwDQYJKoZI
hvcNAQELBQADggEBAEV59RhTsWUx5CS5ZJUhv8AEZHvoAlCh5P9loZoTP/2HARpi
qagBBzAcDG8biU4IizKzZ7iEGYlOmzP9u+m4alLZ2PDN+Edl12/gmQ9u7pzGRnNA
/pkKInIa7GC6HsPI1n4/O5Zdy5Dq0hlWKgoRYfsh6yXnWzlAJNE6XFGTWSEx5MsC
dIVBywHNDcj/WbdvtQgT4/HwpjT3B/mYdrpVR3Pr9DC2B78JUU3JZFu8aXm43BH0
XNhHIwNZgr0t3mFAaBtNhJEdFLzvrZiQPdn+B0qJCRzyZDqh3sHuC9koTYv0SX1F
gscOMC869hyM5o3j8a+AVP6ZqDiaLEw0NG1HZ/E=
-----END CERTIFICATE-----