Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649FC7E2CD3111F19CBFCECECE1D38B0.roa
File:                     649FC7E2CD3111F19CBFCECECE1D38B0.roa (raw, json)
Hash identifier:          zA34DvUoF6C6PjLOCf3Xz6FdII6BdyArisJYCT/ur9E=
Subject key identifier:   BA:5E:51:95:4A:E7:B7:F3:01:18:09:82:55:33:2D:ED:F9:28:A2:C1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DF6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649FC7E2CD3111F19CBFCECECE1D38B0.roa
Signing time:             Wed 21 Oct 2026 09:25:45 +0000
ROA not before:           Wed 21 Oct 2026 09:25:40 +0000
ROA not after:            Sun 29 Nov 2026 09:25:40 +0000
asID:                     44559
IP address blocks:        156.246.177.0/24 maxlen: 24 (superfluous maxlen)
                          156.246.178.0/24 maxlen: 24 (superfluous maxlen)
                          156.246.190.0/24 maxlen: 24 (superfluous maxlen)
                          156.246.191.0/24 maxlen: 24 (superfluous maxlen)
                          156.246.192.0/24 maxlen: 24 (superfluous maxlen)
                          156.246.193.0/24 maxlen: 24 (superfluous maxlen)
                          156.246.194.0/24 maxlen: 24 (superfluous maxlen)
                          156.246.195.0/24 maxlen: 24 (superfluous maxlen)
                          156.246.196.0/24 maxlen: 24 (superfluous maxlen)
                          156.246.197.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122732 (0x1df6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 21 09:25:40 2026 GMT
            Not After : Nov 29 09:25:40 2026 GMT
        Subject: CN=6ad88519-7d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:18:38:fd:6a:42:d4:16:10:75:fc:64:51:f8:
                    58:aa:8c:76:a0:25:b0:cd:53:ce:92:ad:84:fb:02:
                    25:3b:aa:fe:2b:4c:19:55:e4:bb:e0:17:b4:64:ec:
                    15:ee:4b:7e:b7:b5:1a:b9:19:f1:6f:20:cb:24:03:
                    dc:d3:af:4b:97:a2:78:c9:a2:66:40:a6:9f:a5:1c:
                    99:33:94:d6:19:66:dd:1e:56:e1:f8:a0:35:d2:38:
                    6b:37:56:11:6a:eb:fe:8c:ac:fa:55:b6:2b:51:fb:
                    1c:71:33:b9:65:97:c9:11:61:02:dc:de:07:66:35:
                    c1:cd:87:ee:1d:43:c3:82:a3:46:a4:31:51:be:40:
                    39:56:fb:6b:7e:76:20:cc:cc:b1:97:34:48:fa:76:
                    0a:13:ce:32:b8:d8:15:eb:b6:08:f2:1b:db:e4:97:
                    e6:88:73:4f:71:2d:7f:bd:64:74:90:81:66:46:cf:
                    62:0a:96:2e:ec:52:48:f7:27:3d:50:a4:df:2b:7f:
                    b0:bd:67:ea:81:f3:73:da:e7:87:5a:3f:c7:2e:a8:
                    cc:c0:71:66:24:31:cb:98:26:bf:3b:68:95:36:ac:
                    e8:d9:3a:7f:9f:81:32:7b:f8:83:4d:37:9b:4c:4d:
                    ea:ff:a4:5f:4b:8b:9a:d6:76:a0:04:39:42:cf:ac:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:51:95:4A:E7:B7:F3:01:18:09:82:55:33:2D:ED:F9:28:A2:C1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649FC7E2CD3111F19CBFCECECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.177.0-156.246.178.255
                  156.246.190.0-156.246.197.255

    Signature Algorithm: sha256WithRSAEncryption
         07:35:1e:ca:a2:01:bb:a7:d7:1a:ba:6d:e2:07:07:b2:32:8a:
         1e:ba:7b:48:d0:e7:5b:d0:31:59:52:e5:25:68:9a:58:78:7b:
         51:fb:4b:f6:cf:aa:ac:24:b6:e3:fd:ac:54:80:b5:4f:b8:e1:
         fb:26:8f:76:34:e0:23:b3:d1:65:b0:2a:c2:b1:54:aa:06:91:
         ac:3f:be:23:4e:9b:38:88:ef:59:06:e6:06:7e:ae:f7:82:7a:
         8d:51:52:f0:de:32:47:48:4f:fd:17:47:83:6f:45:6e:c3:c3:
         6a:09:4f:a8:71:e5:7c:26:34:e8:70:bf:d1:56:54:08:d8:6c:
         65:a6:da:14:b1:80:16:5a:f1:a1:51:d6:3b:dd:25:f0:84:35:
         0f:10:a0:5d:d4:39:1f:6e:0c:13:cc:50:9c:6b:28:1b:a4:89:
         83:a4:db:c3:05:7f:e8:57:a0:ad:a9:a2:0d:1e:97:6b:93:ca:
         8b:2e:4f:54:b1:33:75:db:0b:fa:26:94:c2:d1:4c:5d:d1:ea:
         ba:f3:b4:2a:84:b4:77:8b:18:67:b1:5a:b6:0d:bf:81:41:ae:
         f7:c8:d0:2a:35:e5:42:ec:71:a9:36:db:dc:e9:13:40:fc:d6:
         ad:3a:32:7b:5c:71:72:98:b7:36:b9:69:5a:03:ee:75:0b:4c:
         bd:57:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----