Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDC633BA8B2A11F18BC5F11ACF1D38B0.roa
File:                     EDC633BA8B2A11F18BC5F11ACF1D38B0.roa (raw, json)
Hash identifier:          nw2KOsICsQj7o+YxCiI96a29oJ3ti5j8Q03IU7Hv19I=
Subject key identifier:   9F:A2:BA:5D:FC:0D:B0:A9:4A:25:3F:2A:43:4E:66:06:4B:FB:65:73
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C897
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDC633BA8B2A11F18BC5F11ACF1D38B0.roa
Signing time:             Wed 29 Jul 2026 08:53:12 +0000
ROA not before:           Wed 29 Jul 2026 08:53:08 +0000
ROA not after:            Tue 01 Sep 2026 08:53:08 +0000
asID:                     202656
IP address blocks:        156.248.21.0/24 maxlen: 24
                          156.248.23.0/24 maxlen: 24
                          156.249.100.0/24 maxlen: 24
                          156.249.102.0/24 maxlen: 24
                          156.249.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Sep 2026 08:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116887 (0x1c897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 29 08:53:08 2026 GMT
            Not After : Sep  1 08:53:08 2026 GMT
        Subject: CN=6a69bf78-7aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:3f:4e:a8:37:ce:98:82:7e:b3:c5:75:13:
                    13:a0:5a:55:9f:0e:92:fa:30:82:11:d3:21:5d:8e:
                    30:b2:71:fc:68:9e:00:4b:00:bf:04:ba:e6:c5:f9:
                    6a:f4:d3:59:2a:be:21:8e:8d:e9:a2:77:05:9a:57:
                    c2:51:28:7f:a2:75:9a:c0:9a:63:68:fc:ce:98:b9:
                    c3:13:e7:c9:c1:18:79:5e:e7:d6:de:b6:a9:e6:d1:
                    ec:43:36:ef:98:65:1c:dc:bf:e7:43:42:d4:fb:33:
                    ff:d5:1a:c8:dc:da:b3:6c:da:f0:42:6a:91:7d:cb:
                    e3:7c:4f:6f:40:ec:dd:83:bf:ce:88:6f:0b:22:ae:
                    19:09:ee:95:06:90:f3:86:06:42:4a:04:40:79:63:
                    c0:ee:a4:b8:fe:8d:13:30:20:e4:95:d7:8f:72:8f:
                    0c:c2:11:b4:83:3d:6f:e4:2b:41:b7:9f:af:b9:2c:
                    06:b8:f7:cd:a1:85:bd:93:57:36:05:da:52:a8:4b:
                    e6:6c:25:cd:76:9b:00:7f:1b:93:a1:38:6d:37:2d:
                    9a:fa:40:64:c5:4a:ee:94:ad:7b:ed:1a:7f:19:c1:
                    c9:a0:2d:c0:8b:b1:8a:87:16:38:46:de:99:ce:ed:
                    92:93:7d:3b:ee:bd:82:9d:da:34:ce:63:66:ce:5b:
                    ac:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A2:BA:5D:FC:0D:B0:A9:4A:25:3F:2A:43:4E:66:06:4B:FB:65:73
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDC633BA8B2A11F18BC5F11ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.21.0/24
                  156.248.23.0/24
                  156.249.100.0/24
                  156.249.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:c3:5d:48:0a:df:c7:da:73:6a:ee:84:40:fc:59:48:a9:97:
         06:a6:ac:6e:9c:5e:de:53:05:bf:55:7e:65:09:cf:52:cb:d6:
         91:62:ce:75:27:05:05:69:98:d5:53:48:20:ea:33:eb:00:bc:
         67:05:fd:7f:2c:71:64:a6:30:40:a3:41:7e:74:39:50:14:0e:
         b9:2e:84:16:de:8e:69:f8:82:d8:55:f5:ec:96:aa:68:dc:05:
         92:6c:c8:29:18:40:af:d8:9d:26:5e:85:0a:6d:fa:45:bd:8b:
         2a:4f:00:54:39:f9:65:59:fc:95:56:47:ca:92:ca:53:e9:fa:
         03:81:46:88:d8:63:50:4a:49:66:0b:40:50:2d:7f:21:94:8c:
         39:52:ca:a8:0c:fe:d5:95:ad:8f:2d:95:3d:b9:5b:ef:64:fc:
         8e:bf:ae:5f:98:90:0f:07:55:b5:b2:6f:64:2b:d8:df:91:b8:
         de:9d:37:8f:6d:6f:56:8b:03:36:fd:9e:2a:a1:64:32:e1:c7:
         14:88:52:5b:9f:38:47:74:17:f2:46:a6:20:a4:b3:15:0c:af:
         fc:09:b5:f7:da:25:b4:4e:98:7d:bc:0a:51:bc:d1:e2:7b:c6:
         0c:bd:1e:a5:dc:58:38:b3:a5:a3:95:95:b8:1a:43:a1:1e:94:
         33:93:c7:ce
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAciXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzI5MDg1MzA4WhcNMjYwOTAxMDg1MzA4WjAYMRYw
FAYDVQQDEw02YTY5YmY3OC03YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu0Q/Tqg3zpiCfrPFdRMToFpVnw6S+jCCEdMhXY4wsnH8aJ4ASwC/BLrm
xflq9NNZKr4hjo3poncFmlfCUSh/onWawJpjaPzOmLnDE+fJwRh5XufW3rap5tHs
QzbvmGUc3L/nQ0LU+zP/1RrI3NqzbNrwQmqRfcvjfE9vQOzdg7/OiG8LIq4ZCe6V
BpDzhgZCSgRAeWPA7qS4/o0TMCDkldePco8MwhG0gz1v5CtBt5+vuSwGuPfNoYW9
k1c2BdpSqEvmbCXNdpsAfxuToThtNy2a+kBkxUrulK177Rp/GcHJoC3Ai7GKhxY4
Rt6Zzu2Sk3077r2Cndo0zmNmzlusnQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJ+i
ul38DbCpSiU/KkNOZgZL+2VzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FREM2MzNCQThCMkExMUYxOEJDNUYxMUFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAnPgVAwQAnPgXAwQAnPlkAwQB
nPlmMA0GCSqGSIb3DQEBCwUAA4IBAQAfw11ICt/H2nNq7oRA/FlIqZcGpqxunF7e
UwW/VX5lCc9Sy9aRYs51JwUFaZjVU0gg6jPrALxnBf1/LHFkpjBAo0F+dDlQFA65
LoQW3o5p+ILYVfXslqpo3AWSbMgpGECv2J0mXoUKbfpFvYsqTwBUOfllWfyVVkfK
kspT6foDgUaI2GNQSklmC0BQLX8hlIw5UsqoDP7Vla2PLZU9uVvvZPyOv65fmJAP
B1W1sm9kK9jfkbjenTePbW9WiwM2/Z4qoWQy4ccUiFJbnzhHdBfyRqYgpLMVDK/8
CbX32iW0Tph9vApRvNHie8YMvR6l3Fg4s6WjlZW4GkOhHpQzk8fO
-----END CERTIFICATE-----