Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3412824949411F19F1230CACE1D38B0.roa
File:                     D3412824949411F19F1230CACE1D38B0.roa (raw, json)
Hash identifier:          B4nc19qheM/yB/lC7G0AHxph4Ysn+wL8RE2W4SAsz8I=
Subject key identifier:   F2:94:18:B0:47:36:C7:CC:B2:B3:0B:34:58:36:0D:36:5E:56:30:CF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CAE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3412824949411F19F1230CACE1D38B0.roa
Signing time:             Mon 10 Aug 2026 08:23:55 +0000
ROA not before:           Mon 10 Aug 2026 08:23:51 +0000
ROA not after:            Thu 10 Sep 2026 08:23:51 +0000
asID:                     44509
IP address blocks:        156.231.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117473 (0x1cae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 08:23:51 2026 GMT
            Not After : Sep 10 08:23:51 2026 GMT
        Subject: CN=6a798a9b-99d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:78:ec:b3:ca:ec:a8:70:d4:b3:c6:9a:29:
                    93:d3:7a:1b:b0:84:11:9b:10:e5:73:12:6b:41:93:
                    2f:17:61:3a:bb:29:1a:62:1f:f3:20:80:2b:9e:b1:
                    c3:04:10:68:1c:7b:9e:44:37:cf:7f:ea:f9:5c:32:
                    30:3e:36:14:11:24:92:30:d3:d3:b6:50:79:4e:16:
                    b7:c7:39:bc:66:95:f5:f6:ce:ff:62:89:f1:b8:b8:
                    57:70:60:8c:d5:ce:51:05:5e:0a:ed:ce:71:94:07:
                    ba:a0:7f:69:2d:3e:23:79:34:98:20:ef:9c:50:48:
                    40:ac:97:89:18:3d:4c:2f:ef:ba:5c:30:05:f3:25:
                    16:1b:70:1c:74:6f:b8:e3:1f:78:f5:fe:85:d8:dd:
                    f8:0d:8c:9e:b1:f1:35:04:92:3a:d7:3b:62:63:67:
                    b1:3b:8f:e0:2a:b2:c2:07:ef:f0:2a:38:6b:1d:13:
                    28:d5:dc:af:d9:74:16:33:b0:98:09:36:6f:05:0d:
                    6b:30:16:d5:aa:b7:f8:42:83:d9:f6:41:d6:c3:6c:
                    3e:14:63:f3:9c:89:3c:7d:4b:18:5c:c8:1f:5c:4a:
                    7a:58:a6:20:1a:18:ef:90:98:a9:67:c2:97:92:6b:
                    e0:53:9c:91:80:b0:90:85:be:46:7c:be:20:9a:ed:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:94:18:B0:47:36:C7:CC:B2:B3:0B:34:58:36:0D:36:5E:56:30:CF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3412824949411F19F1230CACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:f7:63:73:67:e7:01:3c:e1:1a:b0:e6:aa:63:23:1c:94:e3:
         6f:c0:d2:b2:11:75:b9:6d:a9:7a:cc:f0:ad:a2:9d:bb:8f:e3:
         33:3d:96:85:66:79:61:f6:41:1d:a2:fa:18:b3:c0:ab:38:c2:
         e5:6a:4d:c5:e2:c9:a4:c7:36:e2:30:52:02:7e:5b:12:2e:87:
         47:f2:e8:e7:44:73:0c:ff:2d:ac:6a:fd:7c:c9:6a:86:30:e3:
         b9:12:e5:44:0a:08:a8:f4:85:d4:ee:ec:fe:50:82:fc:f3:c2:
         a3:a7:31:ce:71:be:f9:98:ba:63:b2:4e:bf:86:e6:e0:99:ea:
         5a:67:f4:54:63:2b:59:53:ef:fd:31:52:36:2a:ed:8e:0a:3f:
         86:e4:94:c0:78:32:94:d3:8f:c7:b0:bf:27:5d:30:e8:ca:33:
         2e:0a:d0:fc:b7:32:6d:88:c8:c2:05:13:04:93:6e:43:e8:a6:
         17:c1:3a:82:1f:d5:5d:b2:d8:d3:f5:8d:8e:fa:15:a3:94:6c:
         e3:66:19:dd:b4:5a:e0:43:9e:34:4e:23:11:c7:90:05:e8:e1:
         c0:48:4c:e3:ee:6f:f3:e7:51:42:45:f9:75:f0:80:e6:4f:94:
         b0:a8:5d:31:86:d8:af:b1:22:ed:9e:f1:e5:e8:45:b7:ca:8a:
         df:1d:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----