Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD11E1D0C4A911F19BEE01A4CE1D38B0.roa
File:                     FD11E1D0C4A911F19BEE01A4CE1D38B0.roa (raw, json)
Hash identifier:          DjPJG+9A5tFT3wwds622E8RUcNae1BNZ0ZMCe+EpLuY=
Subject key identifier:   04:D9:FC:AE:74:CF:AC:D3:63:9B:87:A2:8C:6F:C3:A2:07:63:08:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD11E1D0C4A911F19BEE01A4CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 12:56:20 +0000
ROA not before:           Sat 10 Oct 2026 12:55:16 +0000
ROA not after:            Tue 17 Nov 2026 12:55:16 +0000
asID:                     22773
IP address blocks:        156.243.48.0/20 maxlen: 24
                          156.243.205.0/24 maxlen: 24
                          156.243.206.0/24 maxlen: 24
                          156.243.207.0/24 maxlen: 24
                          156.243.218.0/24 maxlen: 24
                          156.248.1.0/24 maxlen: 24
                          156.248.2.0/24 maxlen: 24
                          156.248.3.0/24 maxlen: 24
                          156.248.22.0/24 maxlen: 24
                          156.248.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121990 (0x1dc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 12:55:16 2026 GMT
            Not After : Nov 17 12:55:16 2026 GMT
        Subject: CN=6aca35f4-19b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:57:eb:2b:2f:9f:64:c8:ee:78:37:23:e8:c5:
                    69:e1:f9:d1:02:19:5d:f7:bc:4c:42:fc:39:36:56:
                    38:34:b8:e6:6f:46:25:c3:f0:a8:38:9d:e9:29:97:
                    26:30:ef:23:38:b5:b0:28:56:1e:44:1b:ed:a3:a7:
                    58:5b:64:4c:2e:8d:0a:79:7a:8d:f2:0b:d5:04:ba:
                    f0:7b:e0:8e:b1:af:3a:d1:4f:bb:4c:69:39:db:92:
                    77:03:c5:f0:f6:1c:16:1f:5e:21:c2:30:b5:38:ae:
                    b1:67:10:d4:7a:b4:dc:10:15:0f:f6:b5:ed:1b:00:
                    46:39:ee:ef:a8:c1:5c:e7:03:34:75:61:6a:8d:ca:
                    64:58:97:32:d5:f1:e3:0c:26:0b:7b:b4:1c:4f:96:
                    af:62:15:ab:bd:02:0f:e2:b1:a3:0a:84:f4:8b:57:
                    b2:70:12:75:c3:1c:fd:da:cc:92:97:d4:4d:0b:8d:
                    62:fa:3a:17:a7:0b:8d:0c:95:2b:f9:de:c2:48:e2:
                    2f:7f:74:56:7b:e4:e0:c5:45:47:fb:93:4c:f0:ef:
                    8f:9f:e2:6e:8a:d1:f4:21:56:cd:f6:a7:d3:ab:27:
                    82:95:b2:4f:9b:09:90:7f:89:f6:7f:79:01:66:b4:
                    7a:5d:bc:a9:21:90:de:19:14:80:64:ba:9c:0c:f3:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D9:FC:AE:74:CF:AC:D3:63:9B:87:A2:8C:6F:C3:A2:07:63:08:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD11E1D0C4A911F19BEE01A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.48.0/20
                  156.243.205.0-156.243.207.255
                  156.243.218.0/24
                  156.248.1.0-156.248.3.255
                  156.248.22.0/24
                  156.248.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:69:4f:ae:66:70:5c:da:9a:d0:f0:81:ec:8c:27:68:20:4c:
         2d:0c:04:e3:02:fb:fa:34:be:2b:61:33:3b:07:7b:af:ec:79:
         db:d8:0f:ac:db:f2:1d:31:c4:7a:47:b8:6a:30:96:18:86:f9:
         55:59:ce:03:16:25:7d:dc:32:b4:e4:87:62:e3:87:4b:57:95:
         08:69:23:e9:01:13:66:50:2d:e7:3c:7a:93:94:7a:0f:84:a2:
         cd:58:dc:00:5d:7a:39:dd:33:c5:33:af:d8:15:d9:eb:a0:ee:
         71:95:d4:6c:52:30:1c:97:7e:32:0f:8b:d7:a2:89:df:47:f8:
         af:d4:c0:be:c3:70:3c:a3:bd:42:c7:11:1e:e9:b9:27:42:a9:
         fb:c9:29:3c:95:2c:81:26:66:f5:54:9b:64:50:97:57:c6:c4:
         c1:bd:21:8f:18:78:d1:8d:df:15:16:ec:ab:df:8c:48:e0:bc:
         f3:a4:8c:57:97:f3:cd:89:95:8f:ee:9f:03:35:ea:83:86:76:
         e3:30:5f:eb:9d:fc:bc:79:c3:86:0d:e1:70:ac:bb:1f:19:8a:
         46:da:b9:d9:54:53:a8:96:24:1f:b3:43:20:3d:bb:8c:7f:61:
         d0:17:1b:52:be:bb:47:41:6a:a9:06:ec:0f:84:f6:d2:26:3e:
         ca:bf:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----