Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EABF98929A1011F18B860612CF1D38B0.roa
File:                     EABF98929A1011F18B860612CF1D38B0.roa (raw, json)
Hash identifier:          b4Cw4RUHR1g2Z7gWlxcWoGpj5XkqSEqcQ42EPj+kls8=
Subject key identifier:   D1:5F:12:45:C5:82:93:28:F1:FB:B7:28:88:28:87:D8:4D:2B:AB:3C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EABF98929A1011F18B860612CF1D38B0.roa
Signing time:             Mon 17 Aug 2026 07:54:48 +0000
ROA not before:           Mon 17 Aug 2026 07:54:44 +0000
ROA not after:            Wed 23 Sep 2026 07:54:44 +0000
asID:                     984
IP address blocks:        156.249.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118056 (0x1cd28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 17 07:54:44 2026 GMT
            Not After : Sep 23 07:54:44 2026 GMT
        Subject: CN=6a82be48-82be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:8b:37:05:e6:bb:c8:a4:2c:79:0a:49:15:
                    6b:7b:98:db:1e:ba:ba:6d:2a:e2:a0:48:24:3e:49:
                    15:c4:43:94:fc:07:52:98:b8:e6:c8:1e:8f:92:07:
                    96:a8:cd:8f:5f:7a:e0:e8:d4:a1:65:3f:e6:7a:ae:
                    b6:9e:da:15:6d:93:67:f6:9c:ec:e3:f0:54:41:07:
                    86:b8:76:29:0c:d7:79:49:25:e9:a4:01:f0:16:f4:
                    c6:2b:76:cc:0f:ee:9f:ce:bb:13:18:b4:8a:38:b1:
                    d9:dd:ad:4f:18:bf:6d:cc:39:6c:07:35:4c:bb:0d:
                    35:b0:46:6d:24:e5:cd:aa:69:f5:9b:3b:8f:29:50:
                    5c:1d:23:7e:76:60:35:a8:da:6f:00:79:91:a8:99:
                    fd:18:c2:a8:de:50:85:89:59:ae:4e:7b:05:d3:34:
                    7c:05:29:64:f7:7c:d4:65:53:43:7d:c7:fe:5d:66:
                    c2:ed:57:4b:a0:e5:9e:0b:14:3d:66:5c:f2:a8:35:
                    3c:a4:52:85:41:5a:b7:14:7b:35:a5:a0:10:d1:64:
                    e5:99:a7:c8:c4:27:88:61:c8:73:c3:4d:d4:a7:b2:
                    b7:e5:85:4a:bb:a5:65:b8:a4:0c:eb:34:02:f9:17:
                    e7:71:76:81:94:3d:ff:40:c9:e3:9b:57:d5:72:fe:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5F:12:45:C5:82:93:28:F1:FB:B7:28:88:28:87:D8:4D:2B:AB:3C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EABF98929A1011F18B860612CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:c2:6f:4e:84:a1:03:1b:52:38:65:50:53:42:e2:ff:92:38:
         50:2b:40:b9:21:72:71:19:3f:60:2c:2a:6a:64:2d:ec:85:80:
         15:7c:67:c2:fd:57:d1:c7:31:f6:75:35:ab:66:33:9f:37:7b:
         57:2d:a0:0b:8f:dd:a7:37:00:05:49:23:63:91:fa:ff:37:7e:
         e8:fd:ba:37:e6:36:86:2b:80:fd:a5:c7:2e:a9:df:89:1b:33:
         58:23:b1:87:80:17:c7:a6:15:a7:72:c5:72:70:1c:8f:c0:8d:
         6c:dc:26:c4:48:f9:2b:af:b6:36:e2:22:60:81:e1:cb:a6:b4:
         89:5f:48:26:8e:bb:8c:d4:a4:2f:d7:cc:79:0b:8f:1b:5f:fd:
         41:8a:04:c1:87:5b:f2:d1:b2:15:ad:b7:f8:56:78:ef:1e:26:
         18:4f:d1:1d:27:1e:24:fe:0a:0d:6f:05:2c:ef:e6:8f:19:7c:
         17:88:7f:5a:76:46:41:e5:48:ee:d9:c5:ea:f1:da:58:b6:0f:
         5d:7f:ec:e2:92:7f:94:04:b7:56:00:69:68:40:28:37:d8:ff:
         ee:62:54:dc:79:2b:62:b2:1d:cb:4c:75:40:d9:e3:b0:f7:a5:
         80:c2:92:19:19:d8:30:d1:57:9f:2b:9e:a0:a8:d9:6b:b9:56:
         47:59:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----