Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD026914963F11F1988E9BE0CE1D38B0.roa
File:                     AD026914963F11F1988E9BE0CE1D38B0.roa (raw, json)
Hash identifier:          QmlCna8y59bSocZVe4rtygDDBRLNOM/sfDJ3UoPSogU=
Subject key identifier:   7D:EF:21:7C:DC:5A:40:BB:C0:4B:2D:82:12:32:1C:13:CC:64:B7:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD026914963F11F1988E9BE0CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:19:26 +0000
ROA not before:           Wed 12 Aug 2026 11:19:22 +0000
ROA not after:            Sun 12 Aug 2029 11:19:22 +0000
asID:                     17561
IP address blocks:        156.237.40.0/24 maxlen: 24
                          156.237.41.0/24 maxlen: 24
                          156.237.42.0/24 maxlen: 24
                          156.237.43.0/24 maxlen: 24
                          156.237.44.0/24 maxlen: 24
                          156.237.45.0/24 maxlen: 24
                          156.237.46.0/24 maxlen: 24
                          156.237.47.0/24 maxlen: 24
                          156.237.48.0/24 maxlen: 24
                          156.237.49.0/24 maxlen: 24
                          156.237.50.0/24 maxlen: 24
                          156.237.51.0/24 maxlen: 24
                          156.237.52.0/24 maxlen: 24
                          156.237.53.0/24 maxlen: 24
                          156.237.54.0/24 maxlen: 24
                          156.237.55.0/24 maxlen: 24
                          156.237.56.0/24 maxlen: 24
                          156.237.57.0/24 maxlen: 24
                          156.237.58.0/24 maxlen: 24
                          156.237.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117746 (0x1cbf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 11:19:22 2026 GMT
            Not After : Aug 12 11:19:22 2029 GMT
        Subject: CN=6a7c56be-ea91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:03:24:97:25:b8:a2:51:8f:ec:cb:00:76:
                    2f:71:ee:5b:f6:2f:7c:41:70:9b:5b:47:fd:3f:06:
                    15:a7:c9:44:ae:eb:50:f1:b7:73:c8:cc:fa:e7:9b:
                    62:f0:df:33:fa:4b:58:6e:6b:06:c7:89:d4:1a:08:
                    45:c5:aa:a3:80:2f:3e:d6:d8:89:5d:22:ce:22:d3:
                    69:3e:8a:45:17:04:0b:ed:57:b2:7a:94:ef:06:c8:
                    2e:34:90:1b:39:87:11:95:d2:c9:af:99:70:1e:81:
                    f5:69:35:af:bc:d3:27:c0:e1:37:d6:d9:66:1f:79:
                    51:7d:dd:b7:a7:11:fe:76:28:bf:01:6e:e7:82:00:
                    9e:0b:be:bb:8e:c8:a0:b6:97:0f:f7:71:19:bd:87:
                    6a:66:de:b4:c0:3e:96:6d:f7:09:24:6b:29:84:1c:
                    96:b9:b2:71:3a:ed:e9:69:40:7f:59:62:5b:c0:c2:
                    8b:34:13:af:1e:e6:44:19:d0:77:c7:d6:08:9c:53:
                    eb:47:31:d5:a8:90:d0:88:87:17:c0:81:a7:12:0c:
                    61:35:e9:a9:ae:26:62:bb:c9:fb:e3:b7:88:d3:a2:
                    79:d2:cc:d3:18:d1:f9:a9:cb:4b:f5:cb:fd:a3:5d:
                    0c:54:9e:8e:2a:01:29:27:41:64:0e:b4:6a:c5:44:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EF:21:7C:DC:5A:40:BB:C0:4B:2D:82:12:32:1C:13:CC:64:B7:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD026914963F11F1988E9BE0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.40.0-156.237.59.255

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:f8:c0:08:9e:69:0d:f8:1d:ae:14:7d:94:ed:68:3d:66:
         88:ec:12:58:0c:16:f4:6e:d8:2f:16:84:a8:3f:00:d0:fb:72:
         a1:b9:2d:a0:8e:29:74:ec:df:35:ad:16:79:1b:4e:0f:0c:7b:
         11:26:db:9b:8d:b8:fa:84:1f:b9:38:ea:33:69:9a:c0:f5:57:
         77:a6:61:f7:a3:ce:dd:66:04:41:f7:3f:60:d8:40:7e:10:9c:
         25:6a:a5:5d:e7:61:4c:d5:52:e5:e6:aa:0e:5c:98:dd:a1:0a:
         6f:c9:5d:55:f0:90:ad:e3:05:a8:e3:df:21:84:a0:9e:6d:e2:
         56:21:c3:b6:e1:82:62:52:2e:8f:d1:1a:6e:c6:29:d0:7b:c6:
         5b:bf:3b:74:3c:04:2d:bd:c3:ab:ba:64:57:8c:b2:c7:83:0f:
         95:28:89:de:fa:a8:54:cb:13:76:e9:94:ec:45:68:ac:14:3e:
         03:43:70:05:76:c0:07:73:32:87:ab:e7:f3:5a:e8:3e:62:83:
         d9:f1:bb:1e:a7:fb:00:3c:ee:49:aa:6c:3b:cb:8a:cf:65:1b:
         eb:ca:00:c3:6f:4b:49:03:ea:1d:9c:84:7c:3e:06:6e:fd:e0:
         ab:4e:ec:46:f4:f7:c2:2f:fa:78:02:9e:eb:a2:48:b0:98:9a:
         b1:6a:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----