Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7211788964111F1A1D005EFCE1D38B0.roa
File:                     E7211788964111F1A1D005EFCE1D38B0.roa (raw, json)
Hash identifier:          in92E1b30N1aBs94AvtHPRr0r11dewUGiWzoTxogmMQ=
Subject key identifier:   C4:33:73:18:CD:D7:49:5F:39:1B:28:D2:24:D0:30:AD:8C:D1:5A:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7211788964111F1A1D005EFCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:35:22 +0000
ROA not before:           Wed 12 Aug 2026 11:35:18 +0000
ROA not after:            Sun 12 Aug 2029 11:35:18 +0000
asID:                     17561
IP address blocks:        156.237.80.0/24 maxlen: 24
                          156.237.81.0/24 maxlen: 24
                          156.237.82.0/24 maxlen: 24
                          156.237.83.0/24 maxlen: 24
                          156.237.84.0/24 maxlen: 24
                          156.237.85.0/24 maxlen: 24
                          156.237.86.0/24 maxlen: 24
                          156.237.87.0/24 maxlen: 24
                          156.237.88.0/24 maxlen: 24
                          156.237.89.0/24 maxlen: 24
                          156.237.90.0/24 maxlen: 24
                          156.237.91.0/24 maxlen: 24
                          156.237.92.0/24 maxlen: 24
                          156.237.93.0/24 maxlen: 24
                          156.237.94.0/24 maxlen: 24
                          156.237.95.0/24 maxlen: 24
                          156.237.96.0/24 maxlen: 24
                          156.237.97.0/24 maxlen: 24
                          156.237.98.0/24 maxlen: 24
                          156.237.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117750 (0x1cbf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 11:35:18 2026 GMT
            Not After : Aug 12 11:35:18 2029 GMT
        Subject: CN=6a7c5a7a-c513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:05:14:2c:8d:5b:2c:a3:b7:a4:13:7f:f5:
                    56:db:94:a1:16:79:57:2d:9d:0e:e9:5b:56:7a:ce:
                    c5:f4:93:35:6f:98:1c:ad:c2:85:a1:48:34:77:e7:
                    50:71:7e:b6:e3:ee:d6:0a:b0:df:d8:b1:e0:28:32:
                    e6:20:3a:81:02:71:6a:b0:17:f0:5d:c8:e5:9c:5a:
                    a7:91:4c:5e:a8:88:d1:e5:dd:13:ef:5c:2a:a8:8d:
                    a7:e3:6b:fb:3b:53:3b:f7:eb:44:9c:a1:43:51:6d:
                    21:fe:86:b2:8d:54:32:03:4e:b4:ae:10:bf:d5:63:
                    6c:e7:b3:af:3b:e5:24:3b:74:d2:b7:a5:22:1e:6b:
                    c7:a2:63:d6:1c:ea:0f:99:2c:42:63:7f:97:c5:ee:
                    f0:8d:23:92:58:82:12:40:d1:36:16:80:6b:5f:5a:
                    5c:64:e2:c9:1e:ea:19:24:e9:03:81:45:3a:34:0e:
                    d4:78:f0:fa:aa:6a:2d:f4:dc:16:70:50:ed:7d:f2:
                    02:64:a6:4b:63:0d:ba:a5:68:30:6f:77:6b:4e:c6:
                    97:f8:35:f8:66:48:b1:3b:bf:96:fb:5b:e9:40:a9:
                    fa:1b:6d:0b:a4:e6:80:76:6f:8b:81:8e:39:f4:a3:
                    22:b2:9f:a1:59:91:29:a9:f9:e5:e4:82:30:e1:c7:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:33:73:18:CD:D7:49:5F:39:1B:28:D2:24:D0:30:AD:8C:D1:5A:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7211788964111F1A1D005EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.80.0-156.237.99.255

    Signature Algorithm: sha256WithRSAEncryption
         58:c7:26:12:17:9d:ff:a2:3e:6b:bb:de:69:79:7f:9a:a1:e6:
         72:a0:79:51:6f:d7:07:8e:e5:8a:58:72:01:cb:eb:94:c3:60:
         26:6e:4d:35:d4:4b:9a:9b:7c:5c:04:aa:4f:ca:3f:b7:9c:0c:
         45:fa:9b:c4:8e:82:6f:1a:46:54:3c:3b:f0:11:85:9c:d9:70:
         4c:c4:3c:0e:a5:29:17:75:73:26:76:5e:d5:6a:aa:43:7b:1d:
         6e:22:9e:82:32:fd:66:2a:34:83:10:a8:2f:2f:f9:8b:3c:37:
         43:c5:ff:36:a7:80:e2:13:23:91:52:23:48:11:e1:46:4f:31:
         d3:6b:7b:d2:d2:d4:65:82:5a:c5:a6:c3:a0:fd:0c:e7:1b:0c:
         11:6e:2b:44:64:3d:b6:5d:54:45:f6:76:89:1f:a8:d5:db:55:
         32:51:b5:ca:98:11:a9:2d:69:12:e3:fb:e7:ba:7c:90:89:af:
         ce:b8:af:33:5c:30:11:90:e8:23:d6:3b:3b:0c:46:8c:d8:61:
         f1:58:80:0c:d0:d9:bb:a6:81:cc:da:e6:3c:99:c0:6c:e0:cd:
         e6:fa:5f:ac:17:b9:58:e6:fb:0a:96:56:2b:3f:dc:52:e8:dc:
         9b:5d:c3:f3:db:e7:d4:3a:03:e5:4a:d8:3e:a5:2c:93:19:24:
         65:7a:ab:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----