Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB5521C096F411F1A2AEAFB4CE1D38B0.roa
File:                     DB5521C096F411F1A2AEAFB4CE1D38B0.roa (raw, json)
Hash identifier:          C1bwbpqhOUm6HPcLoXGexjEtYzuGdqgU7qnGpXvuclE=
Subject key identifier:   DD:F4:51:7D:1F:8B:3A:AC:A3:D2:58:98:10:9E:74:5C:C0:67:CE:F6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB5521C096F411F1A2AEAFB4CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 08:56:23 +0000
ROA not before:           Thu 13 Aug 2026 08:56:18 +0000
ROA not after:            Mon 21 Sep 2026 08:56:18 +0000
asID:                     214143
IP address blocks:        156.230.136.0/21 maxlen: 24
                          156.231.13.0/24 maxlen: 24
                          156.231.176.0/21 maxlen: 24
                          156.249.192.0/23 maxlen: 24
                          156.249.198.0/23 maxlen: 24
                          156.249.210.0/23 maxlen: 24
                          156.252.27.0/24 maxlen: 24
                          156.252.28.0/24 maxlen: 24
                          156.254.112.0/23 maxlen: 24
                          156.255.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117874 (0x1cc72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 08:56:18 2026 GMT
            Not After : Sep 21 08:56:18 2026 GMT
        Subject: CN=6a7d86b6-aa5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fe:c8:c1:a0:dc:40:4c:4e:84:1f:eb:cf:4c:
                    05:4f:bf:58:5a:b7:5a:63:76:c5:93:a7:31:b2:f0:
                    78:22:a0:4a:32:ea:77:17:35:98:0c:0b:b0:f9:86:
                    74:70:2b:a8:e2:20:34:02:dc:bb:3a:21:85:3f:3e:
                    2a:07:36:1a:17:ea:53:e8:af:70:23:f6:fd:2f:14:
                    e7:d8:2f:17:5b:df:c8:2e:19:cb:8e:12:03:ff:6c:
                    b8:dc:d6:e4:a1:9b:07:79:eb:20:b9:2e:82:6b:39:
                    b8:f9:38:fc:d4:09:9a:e5:75:51:f6:69:a9:db:34:
                    d7:36:c1:8c:85:da:c2:47:d7:38:04:e3:30:40:16:
                    09:4c:cb:46:d4:8b:38:fa:c1:02:e6:5b:ea:50:99:
                    2b:77:24:b2:ba:cd:5f:7e:ca:97:bb:5e:7c:3f:73:
                    fa:c7:68:f8:11:42:ec:84:8a:f1:23:67:24:81:76:
                    31:78:41:12:d9:63:14:4d:8b:83:ac:7c:0e:a2:02:
                    aa:59:bc:90:15:6d:11:6c:56:bc:87:45:43:d9:e7:
                    79:f4:08:ee:2e:9d:11:31:38:65:16:15:2a:e0:ea:
                    46:a4:68:47:d1:4e:24:63:1d:d8:ff:9b:1f:c1:8f:
                    34:a8:b0:77:d7:21:92:e3:21:ff:01:98:d2:c5:5e:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:51:7D:1F:8B:3A:AC:A3:D2:58:98:10:9E:74:5C:C0:67:CE:F6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB5521C096F411F1A2AEAFB4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.136.0/21
                  156.231.13.0/24
                  156.231.176.0/21
                  156.249.192.0/23
                  156.249.198.0/23
                  156.249.210.0/23
                  156.252.27.0-156.252.28.255
                  156.254.112.0/23
                  156.255.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:09:a4:f3:d8:fa:5c:16:f3:31:89:6f:38:c2:15:3d:e0:
         4c:fd:32:22:14:14:0c:ee:e3:93:46:fd:f2:61:a7:14:a8:dd:
         38:77:e6:08:be:b0:a2:0f:01:4e:b7:83:f1:f8:de:b9:0e:23:
         f7:9a:a5:53:a2:9d:48:78:8c:ae:e0:34:06:c1:5a:bc:00:7b:
         43:41:3e:3c:4f:37:11:04:2f:a9:6a:fd:99:74:2d:ae:1e:5b:
         dc:9c:fa:36:59:af:1e:37:c9:7f:89:3e:fe:2e:7c:6d:4b:48:
         b4:93:84:44:d7:6f:25:b1:e4:9b:e4:4e:b4:03:3a:cf:a9:24:
         78:2a:97:37:83:a2:72:0e:10:94:19:6d:ab:74:a4:ab:1c:19:
         db:68:17:f5:81:50:be:c7:cd:d1:02:85:1b:62:01:8a:30:67:
         34:12:0e:d9:20:a3:0d:83:06:b1:24:28:57:37:a9:5b:11:90:
         ab:2d:52:95:46:57:a0:80:1d:8c:f8:b6:9e:f0:90:3b:c8:6a:
         84:d4:0f:4f:6b:81:e5:aa:51:3d:a8:d8:4d:cc:fd:10:28:47:
         f4:6d:a2:a3:bb:c2:d2:a7:4e:cb:c7:7c:9d:e8:fc:fb:6e:96:
         02:9e:cd:c7:66:1e:32:f7:b5:df:3a:bb:b6:09:75:36:f3:e6:
         37:86:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----