Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F40C0626C93E11F1A3BFE50DCF1D38B0.roa
File:                     F40C0626C93E11F1A3BFE50DCF1D38B0.roa (raw, json)
Hash identifier:          nMKRqVTbZFg+6CqQLMHPFAkad/+3JRo+OIaXQw8g2yc=
Subject key identifier:   8C:99:8F:ED:2C:CB:34:63:92:4B:3D:05:31:71:1D:01:77:4E:81:FA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F40C0626C93E11F1A3BFE50DCF1D38B0.roa
Signing time:             Fri 16 Oct 2026 08:52:45 +0000
ROA not before:           Fri 16 Oct 2026 08:52:40 +0000
ROA not after:            Sun 25 Oct 2026 08:52:40 +0000
asID:                     61461
IP address blocks:        156.247.128.0/17 maxlen: 24
                          156.255.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122348 (0x1ddec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 08:52:40 2026 GMT
            Not After : Oct 25 08:52:40 2026 GMT
        Subject: CN=6ad1e5dd-6c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:39:7a:ea:67:48:b9:88:bf:34:1c:75:55:
                    6d:a1:81:a1:d9:fc:39:61:53:38:a8:73:38:b5:46:
                    b5:dc:02:03:4f:5c:96:4f:75:cb:aa:aa:ca:79:0f:
                    ad:11:45:f0:05:2d:1c:af:52:f2:d1:85:e5:9f:9b:
                    56:7b:4a:95:9e:73:fb:64:15:53:af:77:0b:c8:24:
                    3e:e7:d7:e1:d4:2c:dd:bf:1d:4b:a7:e7:e0:0f:56:
                    d8:73:15:0d:fe:81:74:b0:fb:83:5d:a0:42:50:b4:
                    b3:f9:f8:d8:3a:31:bc:d3:b6:c9:8c:57:d7:a9:67:
                    99:99:a0:f5:93:62:84:d2:20:cb:d4:52:75:1b:de:
                    2e:72:4a:98:0d:3d:e5:e4:d2:fb:8d:24:83:d1:50:
                    bd:d3:57:e9:29:34:d8:41:5e:a0:d1:db:43:08:9b:
                    7a:b7:ef:db:fe:6f:a8:b5:a6:03:28:88:db:a7:7b:
                    f1:4e:3c:96:fa:39:f6:4d:6b:f4:3d:8e:af:6f:96:
                    78:16:2d:49:58:29:e1:00:dc:22:2f:df:a4:12:4e:
                    53:47:5c:af:32:2e:a5:18:1f:ff:91:95:76:f7:47:
                    a8:54:6f:08:59:e4:15:cc:0a:9b:b1:62:92:32:e4:
                    7f:70:85:04:12:04:d1:fe:9d:80:a8:ca:21:b6:e2:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:99:8F:ED:2C:CB:34:63:92:4B:3D:05:31:71:1D:01:77:4E:81:FA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F40C0626C93E11F1A3BFE50DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.128.0/17
                  156.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:97:d1:05:8b:a7:db:69:8e:52:37:30:11:2d:21:fa:17:
         7f:26:8e:67:a1:65:7e:ec:7f:e8:6e:28:f3:d4:7d:24:1c:c5:
         22:52:32:c6:04:b5:98:bf:7a:57:0c:5c:27:46:1f:36:c6:8d:
         4e:85:74:d1:ea:67:85:a9:2d:c1:93:98:76:ab:f8:37:87:b3:
         dd:c7:50:c7:57:bf:53:97:2a:98:62:ec:4c:ec:d8:7f:f1:ce:
         a3:0d:5d:36:ad:78:4c:5c:5d:e2:00:19:67:91:d4:66:4b:65:
         fd:37:7e:5c:df:69:47:89:5d:c4:b4:e5:02:68:42:1e:2d:ef:
         92:43:ac:a5:07:b9:c5:86:2c:15:c6:aa:ca:16:4b:d3:cd:91:
         6e:92:9b:a8:2f:1b:e4:74:90:9d:b9:13:ad:ff:06:8b:65:06:
         db:83:ae:00:02:ab:cc:f0:80:5d:9e:b1:ce:b4:ea:d1:1b:0e:
         dc:4c:a7:b8:63:d3:c0:27:eb:de:23:bc:c0:7f:12:60:56:0c:
         54:9e:5e:47:48:38:97:3f:f5:5c:e9:bd:cc:0a:07:a1:b5:73:
         cf:ab:a9:d6:84:9d:8c:17:5e:2f:ef:5e:59:cd:16:4d:0b:38:
         e3:5c:6b:cd:ee:ae:d2:c3:b3:34:e1:ae:61:26:20:c9:98:a5:
         81:45:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----