Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD79C9009B7F11F1952EC8B6CE1D38B0.roa
File:                     BD79C9009B7F11F1952EC8B6CE1D38B0.roa (raw, json)
Hash identifier:          E4RQS1SICKT2R0aAITNYW/Aua03FE9jYHygSNJPraGI=
Subject key identifier:   79:3F:71:67:39:F0:16:7D:58:F5:BD:40:86:EB:5A:03:93:E9:3C:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CDE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD79C9009B7F11F1952EC8B6CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 03:40:37 +0000
ROA not before:           Wed 19 Aug 2026 03:40:33 +0000
ROA not after:            Thu 27 Aug 2026 03:40:33 +0000
asID:                     21859
IP address blocks:        156.241.129.0/24 maxlen: 24
                          156.241.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 24 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118244 (0x1cde4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 03:40:33 2026 GMT
            Not After : Aug 27 03:40:33 2026 GMT
        Subject: CN=6a8525b5-53ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:e0:d6:72:4c:c0:82:20:71:41:c7:8e:eb:
                    57:17:62:61:58:97:45:88:f6:60:14:66:e8:f8:06:
                    a2:17:24:09:76:40:f4:60:4d:d4:c5:b0:61:61:56:
                    41:a8:f9:2d:52:28:87:ba:75:15:a0:58:ce:ad:c9:
                    3e:1f:70:49:34:fb:c9:12:10:9a:73:ce:90:22:25:
                    1f:db:34:2a:7c:b7:3c:2e:7e:65:30:99:62:6b:c7:
                    bd:dd:cc:f1:30:f5:e8:8f:47:68:1a:39:10:1d:79:
                    21:78:30:1a:90:f9:7a:10:30:8a:e9:70:29:3e:e4:
                    b2:ef:56:dc:4c:42:28:1a:0f:a3:e5:04:ee:51:23:
                    ad:16:26:95:df:ae:80:e0:32:11:b7:12:fa:da:a5:
                    3f:06:cf:f4:94:93:7f:13:13:80:b5:82:9f:13:0c:
                    1f:bf:81:20:60:90:44:71:cd:64:1b:f6:6c:89:f7:
                    b6:27:bd:48:07:9e:d9:41:63:71:57:ed:d0:75:8f:
                    1b:59:1d:77:1c:14:e4:40:bc:94:34:30:3e:68:89:
                    08:e1:f8:11:12:33:2c:ea:66:7f:b6:e3:39:38:d4:
                    44:00:62:3d:8b:81:a6:04:96:97:e7:90:07:66:39:
                    f8:bf:1a:97:c2:00:eb:7d:38:6a:64:3f:2a:68:1e:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3F:71:67:39:F0:16:7D:58:F5:BD:40:86:EB:5A:03:93:E9:3C:2F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD79C9009B7F11F1952EC8B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.129.0/24
                  156.241.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:a4:08:b8:d1:07:cd:ef:e4:76:39:2f:47:86:c6:2d:5e:b3:
         4c:ff:08:2c:bd:7a:9d:51:71:b9:f8:eb:f6:36:c2:40:df:63:
         fc:91:73:db:8e:2e:a0:19:67:0b:42:49:28:46:a4:49:68:03:
         03:c5:1e:8e:f5:2c:dc:ad:d7:3e:fd:9b:0b:54:83:ec:48:a7:
         2d:28:ac:ca:37:f2:83:0f:11:bc:c6:cb:93:17:1f:72:b8:b8:
         e5:56:06:8f:40:10:19:39:d3:e5:f1:80:84:da:6b:0a:d1:c5:
         38:2f:f6:1f:0e:4a:c2:b3:8e:3d:39:68:e5:ff:13:04:82:63:
         6d:c3:1c:aa:71:14:05:64:95:3d:c2:b0:cf:c4:70:20:2d:bf:
         de:a4:a3:20:4b:82:fb:ec:76:83:35:57:67:ef:6b:9f:64:ab:
         78:84:9e:21:0b:7b:38:8a:28:9a:0d:02:24:b9:ae:46:3a:b0:
         26:ae:99:bf:b3:09:c9:72:43:8b:b1:49:3f:0a:d8:66:66:06:
         53:8a:70:9c:4f:ba:d9:58:ed:c2:7f:99:b5:fb:21:50:44:49:
         33:eb:7d:59:db:98:95:76:25:3d:fd:95:6a:e5:6e:ef:bd:77:
         73:4d:66:77:42:83:ab:16:ec:d6:62:87:c5:79:af:69:7f:d2:
         72:84:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----