Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF81A92CA12A11F1AE4600DBCE1D38B0.roa
File:                     DF81A92CA12A11F1AE4600DBCE1D38B0.roa (raw, json)
Hash identifier:          dYx5fz51td1mkl9MDj7O2T5FCc3QfaScXAfkra7CPlA=
Subject key identifier:   2D:A3:8E:2E:18:79:99:5C:53:4A:54:47:0E:8F:12:D5:04:7B:60:5B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D10B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF81A92CA12A11F1AE4600DBCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 08:48:14 +0000
ROA not before:           Wed 26 Aug 2026 08:48:10 +0000
ROA not after:            Sat 25 Aug 2029 08:48:10 +0000
asID:                     17561
IP address blocks:        156.235.148.0/24 maxlen: 24
                          156.235.149.0/24 maxlen: 24
                          156.235.150.0/24 maxlen: 24
                          156.235.151.0/24 maxlen: 24
                          156.235.152.0/24 maxlen: 24
                          156.235.153.0/24 maxlen: 24
                          156.235.154.0/24 maxlen: 24
                          156.235.155.0/24 maxlen: 24
                          156.235.156.0/24 maxlen: 24
                          156.235.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119051 (0x1d10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 08:48:10 2026 GMT
            Not After : Aug 25 08:48:10 2029 GMT
        Subject: CN=6a8ea84e-0972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:41:f8:d5:74:16:41:a9:e9:2b:55:27:f9:
                    95:7f:73:0c:23:e0:ae:a7:8b:3e:cf:0f:7f:dd:c5:
                    00:f9:3c:2a:1e:01:02:53:02:df:2f:27:95:a7:32:
                    f2:fd:3c:10:7c:97:ac:ab:6b:16:69:fa:ea:05:49:
                    96:16:f2:a6:bb:09:4b:a3:61:e0:9e:c1:43:24:f8:
                    89:aa:bf:20:45:b5:ef:39:43:68:fa:19:16:32:8a:
                    15:44:4b:23:fe:49:0d:e9:d9:77:bc:01:80:8d:37:
                    36:18:0b:4e:e6:c3:88:fa:76:d1:21:15:89:b5:1c:
                    61:ce:03:bc:a8:cd:70:65:8d:f8:9f:a0:65:7d:3e:
                    06:6e:4f:4e:8c:6b:cc:95:04:ba:b3:91:3f:e9:da:
                    b3:19:16:bb:89:65:78:05:18:05:c7:ef:9f:9e:30:
                    f1:dd:bb:58:89:62:60:ad:d4:69:a7:c5:a0:d7:5c:
                    35:6d:c4:07:52:f7:08:84:3a:26:5d:68:34:5c:00:
                    f4:39:6d:60:dd:20:a3:2d:b1:c4:f0:b4:e8:32:aa:
                    d1:4f:e4:c5:b2:60:44:5f:19:95:81:61:03:06:95:
                    b8:7d:1b:4c:65:89:7b:00:49:c3:48:e9:37:79:4a:
                    d3:14:68:46:d6:01:68:55:ed:94:d2:ac:bb:51:ed:
                    9f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:8E:2E:18:79:99:5C:53:4A:54:47:0E:8F:12:D5:04:7B:60:5B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF81A92CA12A11F1AE4600DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.148.0-156.235.157.255

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:4a:39:2c:95:58:5a:29:98:e8:9c:d4:a8:1e:69:06:67:
         e0:0f:3f:01:37:3d:1a:93:4f:f0:5b:38:7b:0f:c1:68:82:83:
         88:f3:59:f6:af:7a:cf:95:9c:d2:3d:ab:40:b5:b4:76:29:08:
         7c:e2:5e:f6:5c:22:4c:12:22:00:d3:25:10:6e:48:52:58:81:
         23:f5:fc:18:29:54:19:e0:69:83:72:6a:1b:da:fb:03:9c:1f:
         58:36:43:d9:e5:41:8e:12:91:a7:2d:c8:df:2d:6f:26:30:ea:
         ae:04:95:9c:f8:e7:8a:70:2e:48:1b:a3:c3:35:5a:83:8a:18:
         3e:60:12:c9:b3:53:b3:22:e7:0a:ed:5a:4c:2a:7f:93:4c:45:
         c2:7b:ea:b7:dd:d4:f2:b7:63:0f:f3:61:76:ee:9c:7b:b6:4b:
         d6:ef:00:df:34:9f:fa:8b:df:a9:3a:e5:77:79:f9:42:df:c4:
         ea:47:06:b3:7a:4d:35:f9:07:20:72:21:2e:af:24:db:03:74:
         2d:32:54:ea:41:95:d9:66:6f:94:2b:12:64:2f:00:f6:83:95:
         0c:3b:e6:97:d7:e8:d9:09:ec:c4:1d:b4:75:91:18:57:98:25:
         d9:69:57:82:54:fb:25:df:72:77:1e:4e:9b:ef:f3:66:d1:06:
         74:98:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----