Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F0781CEB58F11F1989CA607CF1D38B0.roa
File:                     7F0781CEB58F11F1989CA607CF1D38B0.roa (raw, json)
Hash identifier:          TZX2xM8skdy3i4wkZZEy3oBzYJaQ81yTtBncLplhtlY=
Subject key identifier:   44:06:FD:F8:40:35:C2:DC:EA:0F:C4:58:A8:69:D9:26:4E:2F:6E:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D769
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F0781CEB58F11F1989CA607CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 07:38:54 +0000
ROA not before:           Mon 21 Sep 2026 07:38:50 +0000
ROA not after:            Thu 20 Sep 2029 07:38:50 +0000
asID:                     17561
IP address blocks:        156.245.76.0/24 maxlen: 24
                          156.245.77.0/24 maxlen: 24
                          156.245.78.0/24 maxlen: 24
                          156.245.79.0/24 maxlen: 24
                          156.245.88.0/24 maxlen: 24
                          156.245.96.0/24 maxlen: 24
                          156.245.97.0/24 maxlen: 24
                          156.245.98.0/24 maxlen: 24
                          156.245.99.0/24 maxlen: 24
                          156.245.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120681 (0x1d769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 07:38:50 2026 GMT
            Not After : Sep 20 07:38:50 2029 GMT
        Subject: CN=6ab0df0e-0e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:e6:27:ed:75:da:2d:19:2c:cf:4c:58:98:
                    2d:d5:b3:f8:7f:f8:13:67:7a:fd:7f:08:fe:ed:c9:
                    70:25:4b:eb:0a:a5:32:d3:d8:72:84:3f:1a:97:7f:
                    b2:8f:f1:25:73:4a:26:52:89:21:fc:a3:1b:fa:24:
                    83:bf:48:f0:c0:d0:dc:3e:de:9c:a8:e4:f1:94:ca:
                    e1:c2:62:e0:85:4e:70:4a:28:f2:40:0a:67:64:1f:
                    ba:88:50:fb:38:6e:a9:fd:17:60:9a:b6:3b:65:0b:
                    26:a9:53:81:98:c2:d5:e9:b1:0c:89:e8:af:a3:97:
                    c5:82:57:20:d2:89:f4:39:8b:b7:42:71:23:fb:f0:
                    46:ba:ff:70:82:24:51:b2:4a:2a:3e:29:1d:d4:96:
                    51:c1:04:c8:93:11:2d:28:53:c9:91:f5:4d:73:9b:
                    10:e0:39:8f:78:69:41:fa:ed:23:66:d4:ec:66:ee:
                    7c:9e:b8:51:b1:04:2c:d7:1e:20:b9:62:30:2d:a2:
                    5c:2b:53:b8:f4:80:da:4d:25:93:62:ce:8f:1a:25:
                    2d:a7:ae:f7:c3:e8:d9:c9:7a:d0:68:90:f8:fc:a6:
                    54:67:dc:2d:b8:0a:a4:83:11:35:4e:6f:f6:22:0b:
                    7e:bc:69:47:49:2a:a7:34:d0:cd:d6:bb:78:96:21:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:06:FD:F8:40:35:C2:DC:EA:0F:C4:58:A8:69:D9:26:4E:2F:6E:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F0781CEB58F11F1989CA607CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.76.0/22
                  156.245.88.0/24
                  156.245.96.0-156.245.100.255

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:e1:e7:16:79:f5:03:60:fa:f1:ca:09:01:35:01:a3:2c:
         84:85:7c:d2:45:77:8b:a7:78:48:76:07:01:88:01:fa:45:1f:
         d2:1a:07:88:75:52:a4:eb:0b:67:80:9d:99:fd:2c:fd:3a:2d:
         50:cf:5f:a4:90:7e:7f:18:84:70:f7:6c:c0:b2:44:89:1c:de:
         61:f3:08:7d:8d:65:9b:1a:24:e0:62:2d:5e:ed:c0:e6:87:a0:
         83:a1:02:d4:00:9e:65:24:d2:98:be:51:c9:4c:ce:44:59:44:
         c2:8a:c4:ae:34:e7:31:33:98:0a:95:78:44:53:15:2b:5c:95:
         d9:32:3c:da:ea:84:69:5a:29:a2:e4:ca:15:09:00:65:30:fa:
         5c:7b:8c:bd:3c:f8:c1:f8:fc:f9:11:20:0a:40:4e:3f:7f:7b:
         58:5b:92:b5:cc:6d:2a:fb:27:a2:9b:ed:1f:5f:69:9e:2e:04:
         ff:cd:90:61:74:0d:89:f8:a1:17:97:08:02:66:09:0e:9a:25:
         39:35:45:e5:a5:59:47:98:6e:e8:18:9f:b6:a3:b8:4d:12:8c:
         61:44:2e:7d:99:71:f9:3d:ef:70:c6:51:76:2b:1e:be:a7:5d:
         a0:8b:f3:72:bf:38:6f:51:9d:8d:4d:c9:d0:b9:17:8c:f4:8d:
         9d:cd:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----