Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91C29F20B58911F18C3D54E1CE1D38B0.roa
File:                     91C29F20B58911F18C3D54E1CE1D38B0.roa (raw, json)
Hash identifier:          Z7uGcegvFn4VbVzRX8iSz0WEKI4u6OS48khtEu2+NCY=
Subject key identifier:   E3:50:22:F5:47:D4:71:8E:41:95:C3:57:82:D4:47:C4:6E:24:B4:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D751
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91C29F20B58911F18C3D54E1CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 06:56:29 +0000
ROA not before:           Mon 21 Sep 2026 06:56:25 +0000
ROA not after:            Thu 20 Sep 2029 06:56:25 +0000
asID:                     17561
IP address blocks:        156.241.134.0/24 maxlen: 24
                          156.241.135.0/24 maxlen: 24
                          156.241.136.0/24 maxlen: 24
                          156.241.137.0/24 maxlen: 24
                          156.241.138.0/24 maxlen: 24
                          156.241.139.0/24 maxlen: 24
                          156.241.140.0/24 maxlen: 24
                          156.241.141.0/24 maxlen: 24
                          156.241.142.0/24 maxlen: 24
                          156.241.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120657 (0x1d751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 06:56:25 2026 GMT
            Not After : Sep 20 06:56:25 2029 GMT
        Subject: CN=6ab0d51d-96a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:70:61:c7:e9:6a:47:7d:df:eb:85:df:aa:
                    5d:81:ed:83:ca:cb:98:3a:74:1a:ea:b1:4c:4f:6a:
                    5e:8c:62:2a:0f:c2:38:5a:79:9a:be:1b:9a:59:34:
                    8c:c4:32:de:32:55:e8:82:67:5a:39:7e:47:c2:86:
                    f7:ff:55:5c:45:95:e5:95:54:cd:31:eb:36:25:3e:
                    f4:30:9d:9f:0a:55:66:03:d2:ce:01:8f:4e:be:b2:
                    99:0f:fe:3f:a5:fa:0b:8d:5e:7a:e9:60:8f:29:0c:
                    f4:e0:19:66:a3:6e:45:ec:64:67:be:57:1a:62:3a:
                    8a:1b:ed:b3:d5:4b:a7:9a:f8:57:7a:4b:21:5a:9b:
                    f2:cd:d9:68:f4:ea:e0:f5:fd:a2:60:e7:6a:0a:17:
                    41:ea:e3:1c:e3:01:f4:c9:13:3e:b1:c8:ba:27:b1:
                    9b:b2:39:00:ec:f9:c7:02:8b:86:e8:a0:a7:c8:a4:
                    83:db:bd:b3:2d:7c:2f:b8:bb:4c:22:a5:3d:cd:61:
                    02:c4:4d:6d:a9:7b:04:bb:b2:ba:f7:b1:22:29:b2:
                    08:5c:66:70:60:bd:7e:53:67:57:e6:97:5e:25:67:
                    77:5b:6b:78:79:d5:d0:de:cb:44:ff:62:a4:dc:b0:
                    35:b3:c1:07:f0:27:c1:44:63:6f:24:9c:98:4b:ac:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:50:22:F5:47:D4:71:8E:41:95:C3:57:82:D4:47:C4:6E:24:B4:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91C29F20B58911F18C3D54E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.134.0-156.241.143.255

    Signature Algorithm: sha256WithRSAEncryption
         7c:a3:c5:e7:d7:70:3e:ac:f0:9c:49:74:0e:da:82:8f:b6:3f:
         16:73:21:35:27:fd:31:05:29:2d:3b:71:bd:6d:51:b5:da:b3:
         02:5c:02:62:0d:c4:12:2b:52:a4:dd:46:e6:0d:53:42:aa:3b:
         18:ee:b7:37:5d:20:9d:4d:66:c8:9e:56:91:8d:7f:c1:8b:70:
         9d:b4:52:d4:5c:01:ff:76:25:e1:30:9a:ef:de:7d:3c:26:d0:
         4d:60:a5:06:0a:27:7d:46:ad:81:da:49:dd:fd:65:3b:5f:b3:
         a6:e5:90:a1:95:b9:88:7f:76:9b:48:56:be:6c:0b:28:d1:76:
         6d:b4:cb:e3:07:c5:47:48:f1:31:20:5a:c9:7e:bd:c3:a9:9b:
         a4:20:cb:2c:75:54:a6:c1:5e:81:fb:a6:fb:c5:dd:95:b9:e2:
         2b:c8:e7:bb:43:3e:7d:67:a3:63:40:32:98:f3:93:8c:ee:d2:
         ff:88:fd:eb:4f:7b:9f:ca:ac:34:5a:8b:0a:04:7f:93:36:58:
         77:a6:30:05:71:bb:6a:b3:97:b2:1c:38:6a:a7:38:ff:7f:23:
         d2:23:29:02:a6:c8:91:4d:dc:7b:86:e3:a0:04:a5:72:14:0a:
         37:5d:11:16:30:02:db:3f:bf:c1:47:fc:dd:b4:88:18:a2:3b:
         82:43:ca:fe
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAddRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIxMDY1NjI1WhcNMjkwOTIwMDY1NjI1WjAYMRYw
FAYDVQQDEw02YWIwZDUxZC05NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqORwYcfpakd93+uF36pdge2DysuYOnQa6rFMT2pejGIqD8I4Wnmavhua
WTSMxDLeMlXogmdaOX5Hwob3/1VcRZXllVTNMes2JT70MJ2fClVmA9LOAY9OvrKZ
D/4/pfoLjV566WCPKQz04Blmo25F7GRnvlcaYjqKG+2z1UunmvhXekshWpvyzdlo
9Org9f2iYOdqChdB6uMc4wH0yRM+sci6J7GbsjkA7PnHAouG6KCnyKSD272zLXwv
uLtMIqU9zWECxE1tqXsEu7K697EiKbIIXGZwYL1+U2dX5pdeJWd3W2t4edXQ3stE
/2Kk3LA1s8EH8CfBRGNvJJyYS6x+swIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFONQ
IvVH1HGOQZXDV4LUR8RuJLSAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MUMyOUYyMEI1ODkxMUYxOEMzRDU0RTFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc8YYDBASc8YAwDQYJKoZI
hvcNAQELBQADggEBAHyjxefXcD6s8JxJdA7ago+2PxZzITUn/TEFKS07cb1tUbXa
swJcAmINxBIrUqTdRuYNU0KqOxjutzddIJ1NZsieVpGNf8GLcJ20UtRcAf92JeEw
mu/efTwm0E1gpQYKJ31GrYHaSd39ZTtfs6blkKGVuYh/dptIVr5sCyjRdm20y+MH
xUdI8TEgWsl+vcOpm6Qgyyx1VKbBXoH7pvvF3ZW54ivI57tDPn1no2NAMpjzk4zu
0v+I/etPe5/KrDRaiwoEf5M2WHemMAVxu2qzl7IcOGqnOP9/I9IjKQKmyJFN3HuG
46AEpXIUCjddERYwAts/v8FH/N20iBiiO4JDyv4=
-----END CERTIFICATE-----