Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC87DED2BB2F11F1A13D5FB9CE1D38B0.roa
File:                     FC87DED2BB2F11F1A13D5FB9CE1D38B0.roa (raw, json)
Hash identifier:          mQ3JcWdpoBFTch3iHkwL0/9gn139cxaNEQYfaRHoJxI=
Subject key identifier:   B4:18:C0:48:56:D7:20:D9:1D:95:B0:CA:B4:5F:A6:7C:2A:26:CD:BA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D95B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC87DED2BB2F11F1A13D5FB9CE1D38B0.roa
Signing time:             Mon 28 Sep 2026 11:30:20 +0000
ROA not before:           Mon 28 Sep 2026 11:30:15 +0000
ROA not after:            Thu 22 Oct 2026 11:30:15 +0000
asID:                     401362
IP address blocks:        156.252.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121179 (0x1d95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 28 11:30:15 2026 GMT
            Not After : Oct 22 11:30:15 2026 GMT
        Subject: CN=6aba4fcc-2c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:48:23:c7:4b:aa:d9:9d:d5:3d:21:03:e1:a2:
                    9f:99:ba:5c:b5:b9:c6:ea:e6:db:5b:3f:6c:1f:90:
                    3b:f4:af:97:0a:c8:d1:40:80:fd:3f:cf:58:01:09:
                    d8:62:af:92:a9:a9:6a:d0:06:3a:ab:f0:ba:95:77:
                    d1:66:69:ff:f9:a0:9c:2a:e2:3c:59:81:c5:4d:b1:
                    04:17:d9:2b:94:d2:73:f2:fc:93:c0:3b:49:a5:61:
                    bf:7e:14:99:f9:22:d5:87:86:38:66:29:4e:0c:a8:
                    55:1b:30:38:d7:65:50:b6:e1:ff:91:48:ac:73:a5:
                    f1:b4:be:d4:b2:80:a6:f6:b7:b7:53:47:ce:01:ef:
                    89:bb:db:48:c2:44:8b:5e:89:eb:36:04:37:64:d5:
                    08:e9:c3:40:ba:2b:b1:07:d8:b1:81:e4:fe:29:be:
                    a7:20:45:7c:5f:dd:01:f4:57:38:23:d0:85:1e:2c:
                    26:37:d9:34:7c:a7:f9:61:c2:77:cb:89:83:db:41:
                    59:1e:4e:10:f1:9c:e6:86:ab:66:86:76:f9:6e:6f:
                    84:9c:d9:1f:31:01:4a:47:cd:23:10:2e:55:77:28:
                    81:dd:d0:07:9b:dc:ac:20:bd:9d:47:4d:c7:5f:c0:
                    33:cd:92:13:c0:9e:fd:cc:0a:da:0f:70:13:de:13:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:18:C0:48:56:D7:20:D9:1D:95:B0:CA:B4:5F:A6:7C:2A:26:CD:BA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC87DED2BB2F11F1A13D5FB9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:da:66:8b:a6:c9:2c:67:e1:8b:43:4c:63:0a:5d:e6:df:
         95:8b:43:5d:62:6f:4b:15:d3:69:cc:e5:e7:b6:41:e8:e1:4f:
         54:c1:c7:28:3d:24:99:62:19:d7:a3:eb:45:4f:b4:0f:f4:a5:
         e3:d0:02:03:81:ed:14:47:7e:23:6e:27:b1:bd:b0:ef:ff:d2:
         4e:6c:24:00:08:47:ba:75:5e:8d:e1:b3:69:8f:46:33:db:b8:
         d8:83:6e:39:12:aa:0f:09:7e:c7:26:3d:92:8c:c9:f2:28:fa:
         1f:21:a7:4b:9b:ae:06:b2:40:94:c7:2a:8e:38:02:67:76:2d:
         ae:19:42:e9:ce:2a:b4:1c:4a:9e:90:33:6e:3d:7a:32:45:62:
         e8:6e:47:c3:31:90:7a:81:66:73:2e:e7:82:35:97:78:ab:28:
         2e:d1:ca:9d:f1:da:c0:f5:f2:fd:1e:38:2f:74:e4:2f:da:a5:
         c9:a3:48:5d:13:77:9c:fa:c6:00:88:b6:63:8a:ed:90:bb:15:
         f9:0d:c6:aa:3d:16:f5:df:5c:a9:b7:9d:f5:68:ad:eb:a6:ec:
         a2:0b:15:82:18:35:79:3e:5e:5d:1c:64:f2:94:e0:fb:5b:3f:
         a2:26:61:05:d8:db:94:97:43:99:fe:8a:60:0f:d4:45:bb:ae:
         7e:d5:df:dc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdlbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI4MTEzMDE1WhcNMjYxMDIyMTEzMDE1WjAYMRYw
FAYDVQQDEw02YWJhNGZjYy0yYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA30gjx0uq2Z3VPSED4aKfmbpctbnG6ubbWz9sH5A79K+XCsjRQID9P89Y
AQnYYq+Sqalq0AY6q/C6lXfRZmn/+aCcKuI8WYHFTbEEF9krlNJz8vyTwDtJpWG/
fhSZ+SLVh4Y4ZilODKhVGzA412VQtuH/kUisc6XxtL7UsoCm9re3U0fOAe+Ju9tI
wkSLXonrNgQ3ZNUI6cNAuiuxB9ixgeT+Kb6nIEV8X90B9Fc4I9CFHiwmN9k0fKf5
YcJ3y4mD20FZHk4Q8Zzmhqtmhnb5bm+EnNkfMQFKR80jEC5VdyiB3dAHm9ysIL2d
R03HX8AzzZITwJ79zAraD3AT3hNEhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLQY
wEhW1yDZHZWwyrRfpnwqJs26MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzg3REVEMkJCMkYxMUYxQTEzRDVGQjlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwBMA0GCSqGSIb3DQEBCwUA
A4IBAQBPONpmi6bJLGfhi0NMYwpd5t+Vi0NdYm9LFdNpzOXntkHo4U9UwccoPSSZ
YhnXo+tFT7QP9KXj0AIDge0UR34jbiexvbDv/9JObCQACEe6dV6N4bNpj0Yz27jY
g245EqoPCX7HJj2SjMnyKPofIadLm64GskCUxyqOOAJndi2uGULpziq0HEqekDNu
PXoyRWLobkfDMZB6gWZzLueCNZd4qygu0cqd8drA9fL9HjgvdOQv2qXJo0hdE3ec
+sYAiLZjiu2QuxX5DcaqPRb131ypt531aK3rpuyiCxWCGDV5Pl5dHGTylOD7Wz+i
JmEF2NuUl0OZ/opgD9RFu65+1d/c
-----END CERTIFICATE-----