Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E457960B6A211F186101401CF1D38B0.roa
File:                     9E457960B6A211F186101401CF1D38B0.roa (raw, json)
Hash identifier:          +LG5KO8yVMYvu47+x6aPwIPwZxDBoLVIwUAo+Ldvp50=
Subject key identifier:   CC:01:3E:96:6F:9D:37:8D:66:3B:E0:32:24:44:6E:0C:1E:CC:A0:BC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D83E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E457960B6A211F186101401CF1D38B0.roa
Signing time:             Tue 22 Sep 2026 16:28:19 +0000
ROA not before:           Tue 22 Sep 2026 16:28:14 +0000
ROA not after:            Thu 29 Oct 2026 16:28:14 +0000
asID:                     48031
IP address blocks:        156.246.128.0/24 maxlen: 24
                          156.246.129.0/24 maxlen: 24
                          156.246.130.0/24 maxlen: 24
                          156.246.131.0/24 maxlen: 24
                          156.246.132.0/24 maxlen: 24
                          156.246.133.0/24 maxlen: 24
                          156.246.134.0/24 maxlen: 24
                          156.246.135.0/24 maxlen: 24
                          156.246.136.0/24 maxlen: 24
                          156.246.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120894 (0x1d83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 16:28:14 2026 GMT
            Not After : Oct 29 16:28:14 2026 GMT
        Subject: CN=6ab2aca2-ae41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:45:9a:92:9f:3c:75:51:92:cf:eb:50:3a:
                    6f:29:7d:23:02:8c:f8:00:d7:a8:a1:94:9b:50:83:
                    01:47:7d:8c:d9:6f:46:82:b4:5c:70:a4:5b:a8:ad:
                    9e:fd:a4:4c:60:da:cd:5b:30:cb:f3:7e:5d:6f:37:
                    c9:3c:95:10:04:a5:cd:aa:3e:7f:14:a2:28:aa:ee:
                    29:ac:8b:48:6d:40:a9:16:49:c9:65:30:21:fb:10:
                    fb:d6:78:11:5c:f8:2f:3c:43:f2:4c:bd:11:2a:b3:
                    b4:08:11:e3:1e:16:1b:3d:25:08:b2:86:f2:87:62:
                    91:bb:23:84:d0:bb:ad:14:f8:4c:6a:e2:d1:6d:4c:
                    ab:e2:ff:f6:82:44:d0:55:b1:c4:63:f9:ec:4b:7a:
                    68:53:92:4a:86:c0:48:a6:e1:af:0e:42:ac:0b:01:
                    c2:9c:86:f4:2d:47:05:b8:0c:f7:24:42:48:be:cd:
                    ef:76:db:ce:88:af:dc:33:d4:78:0f:fd:f3:8c:ae:
                    43:2a:0c:31:20:5d:0e:62:1f:9d:f8:15:51:bf:35:
                    bb:84:16:28:bf:2d:c9:fd:30:8b:c6:8f:0f:38:ef:
                    58:34:1e:d6:d2:1f:f5:3a:d2:5e:5a:96:f4:72:ad:
                    48:07:91:b3:3d:de:08:2f:10:79:24:b2:08:ad:f3:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:01:3E:96:6F:9D:37:8D:66:3B:E0:32:24:44:6E:0C:1E:CC:A0:BC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E457960B6A211F186101401CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.128.0-156.246.137.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:72:41:c4:5e:91:b2:e2:84:ec:51:13:a8:57:0a:b5:1e:01:
         4b:07:94:0e:44:fb:ab:ab:07:44:48:cd:86:48:f6:fe:d1:7e:
         57:81:a3:45:4c:39:04:49:f6:d8:0b:5f:67:0a:45:f7:02:90:
         08:e2:dd:12:cd:69:73:67:ca:25:66:8f:7f:bf:46:42:a2:f1:
         46:c8:06:3e:bb:23:56:63:c5:97:94:28:72:cd:c2:2c:1b:99:
         78:73:6e:83:4a:fb:f5:77:b8:3f:07:f9:bd:82:0e:ff:40:53:
         8f:e0:c7:c7:1a:9b:fa:cf:60:cf:5b:4b:2b:62:34:e7:04:f3:
         4a:9b:e3:f4:41:b9:44:06:ba:8b:6a:a6:85:33:04:75:e3:ed:
         fe:f4:88:e1:7d:fe:03:28:4d:73:a3:b3:43:36:67:00:cc:36:
         a4:70:4d:9d:4c:65:0e:70:43:d2:fc:ee:db:07:c5:20:f4:0f:
         85:91:7a:42:af:49:cf:91:88:d1:e8:63:40:df:f8:ab:b6:c4:
         cc:3f:f7:e0:a3:8e:9b:57:8f:3f:cb:d9:9e:4b:29:77:8e:e3:
         f4:9d:f2:3f:92:bf:af:ae:a6:dc:5b:a6:f6:63:df:41:cf:ba:
         fb:a0:ed:49:4b:7a:47:86:1f:c7:82:32:d0:e7:6c:57:07:f0:
         23:f4:67:3e
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdg+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMTYyODE0WhcNMjYxMDI5MTYyODE0WjAYMRYw
FAYDVQQDEw02YWIyYWNhMi1hZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAopFFmpKfPHVRks/rUDpvKX0jAoz4ANeooZSbUIMBR32M2W9GgrRccKRb
qK2e/aRMYNrNWzDL835dbzfJPJUQBKXNqj5/FKIoqu4prItIbUCpFknJZTAh+xD7
1ngRXPgvPEPyTL0RKrO0CBHjHhYbPSUIsobyh2KRuyOE0LutFPhMauLRbUyr4v/2
gkTQVbHEY/nsS3poU5JKhsBIpuGvDkKsCwHCnIb0LUcFuAz3JEJIvs3vdtvOiK/c
M9R4D/3zjK5DKgwxIF0OYh+d+BVRvzW7hBYovy3J/TCLxo8POO9YNB7W0h/1OtJe
Wpb0cq1IB5GzPd4ILxB5JLIIrfOMfQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMwB
PpZvnTeNZjvgMiREbgwezKC8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RTQ1Nzk2MEI2QTIxMUYxODYxMDE0MDFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAec9oADBAGc9ogwDQYJKoZI
hvcNAQELBQADggEBAKdyQcRekbLihOxRE6hXCrUeAUsHlA5E+6urB0RIzYZI9v7R
fleBo0VMOQRJ9tgLX2cKRfcCkAji3RLNaXNnyiVmj3+/RkKi8UbIBj67I1ZjxZeU
KHLNwiwbmXhzboNK+/V3uD8H+b2CDv9AU4/gx8cam/rPYM9bSytiNOcE80qb4/RB
uUQGuotqpoUzBHXj7f70iOF9/gMoTXOjs0M2ZwDMNqRwTZ1MZQ5wQ9L87tsHxSD0
D4WRekKvSc+RiNHoY0Df+Ku2xMw/9+CjjptXjz/L2Z5LKXeO4/Sd8j+Sv6+uptxb
pvZj30HPuvug7UlLekeGH8eCMtDnbFcH8CP0Zz4=
-----END CERTIFICATE-----