Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6CF9266964B11F1BF8FBFABCE1D38B0.roa
File:                     C6CF9266964B11F1BF8FBFABCE1D38B0.roa (raw, json)
Hash identifier:          K8lt0DxBlqfaCMVLiLTjpowJhALzxC0YcVXDn4j0dZ0=
Subject key identifier:   E4:9F:AA:96:4A:69:39:FD:03:AF:F0:07:27:16:C8:53:B8:8E:8D:12
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6CF9266964B11F1BF8FBFABCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:46:03 +0000
ROA not before:           Wed 12 Aug 2026 12:45:59 +0000
ROA not after:            Sun 12 Aug 2029 12:45:59 +0000
asID:                     17561
IP address blocks:        156.251.214.0/24 maxlen: 24
                          156.251.215.0/24 maxlen: 24
                          156.251.216.0/24 maxlen: 24
                          156.251.217.0/24 maxlen: 24
                          156.251.218.0/24 maxlen: 24
                          156.251.219.0/24 maxlen: 24
                          156.251.220.0/24 maxlen: 24
                          156.251.221.0/24 maxlen: 24
                          156.251.222.0/24 maxlen: 24
                          156.251.223.0/24 maxlen: 24
                          156.251.224.0/24 maxlen: 24
                          156.251.225.0/24 maxlen: 24
                          156.251.226.0/24 maxlen: 24
                          156.251.227.0/24 maxlen: 24
                          156.251.228.0/24 maxlen: 24
                          156.251.229.0/24 maxlen: 24
                          156.251.230.0/24 maxlen: 24
                          156.251.231.0/24 maxlen: 24
                          156.251.232.0/24 maxlen: 24
                          156.251.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117768 (0x1cc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 12:45:59 2026 GMT
            Not After : Aug 12 12:45:59 2029 GMT
        Subject: CN=6a7c6b0b-b62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:3e:5c:11:09:15:45:4f:91:e1:43:7f:71:
                    22:5b:7c:ec:2b:d6:3a:f7:8e:3c:88:cf:bc:0d:c8:
                    28:7c:d7:d6:1a:ef:f0:24:b0:ea:05:61:5e:96:4c:
                    3b:b4:7c:f3:13:ea:c5:09:dc:4a:01:2e:f8:2a:27:
                    b1:f9:6e:b0:eb:55:5b:f8:7e:e1:9a:14:78:76:a8:
                    d9:dc:dd:2d:f5:32:a5:26:88:96:e1:8e:b8:af:75:
                    5a:0f:fa:b6:c2:99:24:d8:3e:e2:f9:64:51:75:e4:
                    a6:4d:04:5d:75:45:cb:11:cb:99:e9:4d:d7:a3:3d:
                    e2:d0:98:56:31:b2:47:10:4f:f7:e2:f8:15:de:f6:
                    a1:4f:b6:b8:47:63:05:74:de:92:a6:18:15:ab:d1:
                    c7:f1:4d:82:e8:78:a8:14:92:6a:1e:30:2d:98:7a:
                    9d:da:0b:66:a2:17:6f:d8:49:91:1b:da:0e:ea:85:
                    1c:3e:98:ca:2f:b0:92:c6:bb:bf:e4:4c:43:9e:57:
                    5d:10:f8:fc:f8:4a:93:15:9d:e0:bf:e5:2e:36:9f:
                    7e:d4:de:a8:52:d3:51:e1:bb:e9:ed:93:29:5f:b4:
                    93:8b:e5:b5:85:2f:77:3a:ef:a6:a6:88:cd:71:e6:
                    85:af:0d:85:43:d9:ee:5f:29:73:ae:56:9d:e8:6b:
                    77:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9F:AA:96:4A:69:39:FD:03:AF:F0:07:27:16:C8:53:B8:8E:8D:12
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6CF9266964B11F1BF8FBFABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.214.0-156.251.233.255

    Signature Algorithm: sha256WithRSAEncryption
         27:66:b9:d9:76:46:9c:25:ba:1e:b5:c6:12:34:9a:38:33:fa:
         ab:0d:2c:ec:38:90:a5:a9:c3:92:5b:6a:ae:f2:4c:ba:80:8d:
         af:87:cb:45:14:2d:e3:61:7e:6a:24:92:3c:b7:94:fb:61:a7:
         66:b3:61:dc:b3:66:8c:d8:e0:16:a2:50:68:5e:e8:e2:39:24:
         09:53:e6:81:eb:5c:c8:64:7f:d2:25:47:15:75:5d:d3:e3:c9:
         a2:41:f3:e8:c2:72:48:0c:cc:ce:5c:1e:e2:b1:c5:7a:01:de:
         a7:06:b0:6f:c7:07:12:2f:a7:ec:32:7a:8b:0b:88:54:21:c9:
         c0:3d:b1:b5:31:09:9f:ec:80:bd:6f:a4:be:23:43:03:ca:7c:
         7e:90:c3:2b:fe:e4:e9:19:52:69:b2:2b:f3:bc:5c:fe:05:bb:
         63:82:aa:3e:76:6b:46:41:f1:a1:de:ec:67:7e:aa:7d:53:17:
         47:c1:18:9f:d6:1c:4a:fc:d8:0c:fc:43:85:2d:47:91:93:c7:
         66:29:a4:7f:e1:48:2c:eb:40:74:c6:20:53:74:c5:f4:ed:cf:
         22:05:4b:78:a7:65:77:bf:68:05:c7:ec:a8:a3:97:c9:ac:af:
         91:6e:99:06:59:16:43:2a:16:d1:eb:11:0f:fd:04:b8:35:90:
         ba:83:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----