Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCE12A768E3D11F1A71213E1CE1D38B0.roa
File:                     DCE12A768E3D11F1A71213E1CE1D38B0.roa (raw, json)
Hash identifier:          Eh/YL76ZL4iQ/36ptpA5LkXZrtJqpSEWpn/lqSKbINA=
Subject key identifier:   9C:4F:54:96:4A:D4:E6:5A:0B:4D:E7:35:E0:44:A8:48:CF:4C:F9:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C90F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCE12A768E3D11F1A71213E1CE1D38B0.roa
Signing time:             Sun 02 Aug 2026 06:46:18 +0000
ROA not before:           Sun 02 Aug 2026 06:46:14 +0000
ROA not after:            Mon 07 Sep 2026 06:46:14 +0000
asID:                     202437
IP address blocks:        156.228.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117007 (0x1c90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 06:46:14 2026 GMT
            Not After : Sep  7 06:46:14 2026 GMT
        Subject: CN=6a6ee7ba-d7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:a2:b4:42:49:05:0d:9f:e4:b1:21:49:60:
                    2d:4a:00:35:45:c1:14:dd:66:91:48:04:a8:86:c0:
                    52:e4:cc:a0:c8:41:35:73:c1:d9:62:ad:f5:72:0a:
                    2a:72:c4:06:03:05:de:5c:dc:11:27:71:a4:0c:69:
                    b9:50:e3:62:27:f4:47:bb:bc:a0:da:e0:02:16:01:
                    45:47:f6:81:14:85:b8:e7:7e:42:d4:c6:59:58:4f:
                    f4:28:47:93:6b:5f:c6:03:19:6e:80:8c:79:1e:25:
                    e7:03:c7:f0:1d:84:aa:0f:fa:68:f2:b7:c6:c0:24:
                    34:2a:47:9b:0c:ca:be:78:09:97:03:87:bc:f2:69:
                    67:7a:39:78:65:f9:57:b2:ce:83:03:54:a4:27:fe:
                    3d:5a:5b:b4:27:34:a2:ea:88:9d:70:c9:f0:33:0d:
                    f7:b1:c7:71:d4:90:6a:7b:d8:8e:78:4b:4b:f3:e4:
                    f5:c0:8d:74:17:57:46:cd:0e:b8:ea:47:18:af:cb:
                    4b:4e:e9:15:3b:3a:4a:17:36:77:eb:bc:15:20:40:
                    6c:6b:ad:36:f8:42:e1:12:d5:d6:03:f2:72:d2:9f:
                    b1:dc:3c:e8:d2:68:00:e5:2e:c0:1e:60:69:77:ff:
                    86:ff:31:cd:70:9c:9b:99:45:e4:1b:2a:06:04:86:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4F:54:96:4A:D4:E6:5A:0B:4D:E7:35:E0:44:A8:48:CF:4C:F9:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCE12A768E3D11F1A71213E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d7:fa:6e:11:62:61:68:4b:90:11:44:16:70:39:f9:ae:08:
         14:eb:fc:01:58:dc:48:79:40:9e:6a:97:b7:ba:7e:87:11:4d:
         34:39:08:05:f2:13:6a:e0:ae:2a:2e:17:db:28:ed:d5:81:95:
         ba:83:39:e8:6d:e6:84:56:c9:10:9e:eb:dd:d8:58:d7:b3:8d:
         81:5d:fb:28:33:af:04:ad:b1:a3:74:45:df:35:9c:69:67:a3:
         a8:0f:52:9e:16:52:af:c5:32:38:c6:6e:21:41:41:e9:5d:8d:
         e1:0a:4b:df:57:9a:d1:ed:c1:5f:84:41:12:d5:26:dd:f4:f9:
         23:ec:c0:ee:ff:e4:2a:20:a4:2f:19:37:a4:87:16:f5:56:3d:
         53:d2:a3:e2:b3:bc:8f:5c:aa:05:55:b7:e2:d4:4d:6c:62:3c:
         f6:c7:23:92:36:4e:18:a3:8f:bb:87:1b:2f:a1:99:ef:9b:56:
         05:ae:b7:3f:aa:91:55:c3:ae:4d:35:96:48:cc:67:a4:2c:39:
         28:d0:5a:1e:01:9e:d6:7f:be:97:7f:08:fe:c7:68:88:d6:80:
         fd:fd:c2:9e:b3:41:85:98:cb:98:0c:c1:6a:d8:2c:7d:76:52:
         13:52:eb:ce:e3:57:65:37:7f:91:b0:32:bc:cc:58:21:b8:b6:
         98:f8:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----