Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB87A58EC21911F1B593D0DDCE1D38B0.roa
File:                     BB87A58EC21911F1B593D0DDCE1D38B0.roa (raw, json)
Hash identifier:          p5JubWgYyJ1IEIoy9Fj2Bn4z9RnX/jIxiz65UGw8Lng=
Subject key identifier:   CF:FF:8A:38:85:20:73:B0:4C:A8:34:C6:C4:AA:3A:69:7C:EE:75:B3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB87A58EC21911F1B593D0DDCE1D38B0.roa
Signing time:             Wed 07 Oct 2026 06:38:40 +0000
ROA not before:           Wed 07 Oct 2026 06:38:36 +0000
ROA not after:            Fri 10 Sep 2027 06:38:36 +0000
asID:                     131618
IP address blocks:        156.230.14.0/24 maxlen: 24
                          156.250.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121757 (0x1db9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  7 06:38:36 2026 GMT
            Not After : Sep 10 06:38:36 2027 GMT
        Subject: CN=6ac5e8f0-315e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:98:00:f3:27:75:35:6e:28:2c:26:62:26:
                    c2:e3:5f:8c:7d:7d:b8:94:92:a3:38:c0:3e:41:c3:
                    9f:14:e9:f4:ed:d0:9a:4a:07:bb:d7:b0:a2:c2:e1:
                    ea:a6:e6:08:1f:55:b0:3e:46:5d:b9:88:02:aa:fc:
                    7f:39:50:49:f3:40:5a:f4:ac:73:f5:e6:99:1b:02:
                    3e:ca:6c:34:36:4a:4e:54:a9:9b:14:15:49:c4:72:
                    f5:65:39:e6:99:f6:00:d6:ee:f3:a5:7e:dd:bb:92:
                    83:2c:64:af:c7:b1:7a:c0:4b:be:c0:75:ad:3d:a5:
                    d8:21:30:2c:dc:fd:04:bf:0b:9c:04:2c:ad:0c:f3:
                    e7:6b:29:68:83:d1:7b:8c:a5:14:01:e7:1c:a2:dd:
                    36:f6:8d:9c:88:fc:9a:bc:32:d2:e0:1c:b3:db:08:
                    41:0b:01:8a:88:6b:72:f6:f3:4a:54:e3:02:25:1d:
                    9c:18:88:fc:14:91:93:ea:a3:7c:c3:9a:f5:ce:f9:
                    c3:5c:dd:eb:68:ee:04:b5:bc:84:fa:0c:f5:ff:30:
                    a1:56:75:56:59:85:fc:fb:4a:9d:54:2c:e7:4b:d4:
                    83:e8:8d:4e:c9:ab:85:26:11:77:5b:ee:c7:4b:ed:
                    8b:73:11:fd:d8:3d:39:7a:a6:cf:f1:ff:cd:fb:cc:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FF:8A:38:85:20:73:B0:4C:A8:34:C6:C4:AA:3A:69:7C:EE:75:B3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB87A58EC21911F1B593D0DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.14.0/24
                  156.250.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:97:dc:de:fb:b2:36:49:af:a6:76:7c:89:b8:87:15:e1:40:
         9c:d4:8a:c2:a9:8f:e2:d6:f7:67:d5:de:49:2d:8a:c5:7d:08:
         dd:f6:1f:22:7c:f3:5f:9b:02:6c:af:a9:43:e4:f8:84:cd:a1:
         12:ad:e0:cf:41:e6:4a:c3:3b:c6:ae:5c:cd:e5:d9:0f:0f:09:
         72:13:7a:ce:72:c8:40:40:b8:78:69:72:3e:9f:78:bd:20:bb:
         d1:e9:4c:09:a9:20:40:97:a5:f7:08:98:82:48:18:90:9a:9f:
         f0:aa:30:76:52:d7:fb:36:36:a7:f6:ab:5c:8a:98:cb:96:4a:
         f7:4a:c2:87:12:55:c9:2c:90:c4:ce:99:44:c1:9a:76:e9:89:
         42:e7:9c:ab:5c:85:fb:7f:c3:e5:90:68:86:65:99:2b:ef:6c:
         17:01:bb:69:8c:ac:96:f0:f7:74:a8:2b:21:31:a9:af:68:a0:
         6c:f9:64:59:e4:e9:79:22:ad:06:bc:d7:c1:91:77:04:4b:8e:
         f0:5b:18:cf:ab:c4:b8:5c:8e:4a:e3:6e:43:ce:28:ba:ab:5d:
         61:5c:fe:2b:d0:8a:13:01:f7:92:ca:d2:48:7d:40:3f:1f:a3:
         79:b7:f1:1d:23:51:cb:69:2d:5d:3d:c7:d4:bb:27:3f:5d:3a:
         59:19:63:77
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdudMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA3MDYzODM2WhcNMjcwOTEwMDYzODM2WjAYMRYw
FAYDVQQDEw02YWM1ZThmMC0zMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzbaYAPMndTVuKCwmYibC41+MfX24lJKjOMA+QcOfFOn07dCaSge717Ci
wuHqpuYIH1WwPkZduYgCqvx/OVBJ80Ba9Kxz9eaZGwI+ymw0NkpOVKmbFBVJxHL1
ZTnmmfYA1u7zpX7du5KDLGSvx7F6wEu+wHWtPaXYITAs3P0EvwucBCytDPPnaylo
g9F7jKUUAeccot029o2ciPyavDLS4Byz2whBCwGKiGty9vNKVOMCJR2cGIj8FJGT
6qN8w5r1zvnDXN3raO4EtbyE+gz1/zChVnVWWYX8+0qdVCznS9SD6I1OyauFJhF3
W+7HS+2LcxH92D05eqbP8f/N+8x86QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM//
ijiFIHOwTKg0xsSqOml87nWzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQjg3QTU4RUMyMTkxMUYxQjU5M0QwRERDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOYOAwQAnPoBMA0GCSqGSIb3
DQEBCwUAA4IBAQAUl9ze+7I2Sa+mdnyJuIcV4UCc1IrCqY/i1vdn1d5JLYrFfQjd
9h8ifPNfmwJsr6lD5PiEzaESreDPQeZKwzvGrlzN5dkPDwlyE3rOcshAQLh4aXI+
n3i9ILvR6UwJqSBAl6X3CJiCSBiQmp/wqjB2Utf7Njan9qtcipjLlkr3SsKHElXJ
LJDEzplEwZp26YlC55yrXIX7f8PlkGiGZZkr72wXAbtpjKyW8Pd0qCshMamvaKBs
+WRZ5Ol5Iq0GvNfBkXcES47wWxjPq8S4XI5K425Dzii6q11hXP4r0IoTAfeSytJI
fUA/H6N5t/EdI1HLaS1dPcfUuyc/XTpZGWN3
-----END CERTIFICATE-----