Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEFB5080CDF511F19FDC29D2CE1D38B0.roa
File:                     AEFB5080CDF511F19FDC29D2CE1D38B0.roa (raw, json)
Hash identifier:          POFPVrjuCRxkbPeapB1dByKnhsu9tW5BJrqbiHYlr+I=
Subject key identifier:   69:D5:A2:25:28:1F:AC:CA:39:B1:E6:D6:BF:6D:AD:63:DE:BA:87:B8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DFBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEFB5080CDF511F19FDC29D2CE1D38B0.roa
Signing time:             Thu 22 Oct 2026 08:50:52 +0000
ROA not before:           Thu 22 Oct 2026 08:50:47 +0000
ROA not after:            Sun 21 Oct 2029 08:50:47 +0000
asID:                     17561
IP address blocks:        156.255.108.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.109.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.110.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.111.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.112.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.113.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.114.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.115.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.116.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.117.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122814 (0x1dfbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 22 08:50:47 2026 GMT
            Not After : Oct 21 08:50:47 2029 GMT
        Subject: CN=6ad9ce6b-4cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:df:2f:80:89:2d:7a:c7:07:5c:56:f0:d1:
                    5a:b4:6e:df:9d:4f:33:10:86:62:19:ae:dc:ba:32:
                    2f:b3:bc:25:5a:15:a9:00:a5:81:da:51:cb:ed:ac:
                    92:71:4f:22:23:b8:09:11:aa:a7:21:b8:17:a5:27:
                    3f:27:35:9e:f3:16:0c:c3:5f:2c:ac:68:63:94:8b:
                    db:07:4f:89:b0:02:7f:2c:db:ac:9b:80:e9:c0:7d:
                    fb:63:4e:34:d5:02:4c:6f:60:f9:34:f8:eb:2c:da:
                    8e:d2:ab:5b:ab:b2:55:ed:b4:f5:d8:ae:49:f8:5f:
                    44:f9:d6:2c:dd:df:aa:30:5e:d2:c4:e3:ac:41:11:
                    86:d2:8b:02:4f:ec:12:dc:4d:c6:23:a3:d2:7d:ad:
                    65:fb:7d:5d:1a:58:28:cc:cd:1d:3c:95:42:ac:4d:
                    03:53:c5:86:80:36:2b:b1:f8:69:fe:55:df:c5:55:
                    06:d7:ae:51:9d:39:98:4f:59:31:32:34:0a:70:e9:
                    b0:5a:41:84:68:04:1d:32:93:2a:08:f6:fd:2c:c5:
                    af:d9:25:cd:2a:a0:09:f8:96:a5:60:07:82:fc:49:
                    60:9d:43:d0:4b:1d:f5:7d:6b:9a:51:fd:1e:1e:c7:
                    2f:77:d5:cd:db:a6:e3:08:24:45:3d:c1:4b:f1:a2:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D5:A2:25:28:1F:AC:CA:39:B1:E6:D6:BF:6D:AD:63:DE:BA:87:B8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEFB5080CDF511F19FDC29D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.108.0-156.255.117.255

    Signature Algorithm: sha256WithRSAEncryption
         8a:d2:6e:04:68:4e:2d:df:e3:36:fb:37:d8:bb:0e:e2:72:4d:
         3a:d8:7b:ce:dd:98:23:71:0c:c5:1a:9b:85:1a:4b:30:07:c5:
         61:1e:dd:35:da:d8:56:c1:48:a3:c4:96:6e:86:4f:57:f6:24:
         5f:4a:42:0b:51:3c:71:92:a6:ad:e6:d5:f4:8c:31:18:9b:a9:
         29:e9:49:c5:96:10:3d:64:ee:a9:e1:51:48:77:fa:c4:68:2b:
         16:ea:63:8e:a8:06:b1:e4:be:5c:fd:64:c8:94:66:d0:dd:20:
         dd:09:a7:0a:41:23:a6:92:e0:8d:6f:62:32:c2:5f:cc:18:8e:
         6d:8e:fe:24:89:a6:32:91:b3:84:a7:91:b5:2a:d0:f1:36:74:
         7d:78:7c:64:0d:8c:7c:9f:88:10:74:e4:f0:3f:2e:e7:c4:5f:
         ad:2e:c0:c7:b7:e8:3f:39:08:a6:8b:46:9a:f7:bb:bf:83:5c:
         b9:06:e6:20:3c:4b:3c:cf:71:9d:74:c3:48:57:7a:f7:6a:8a:
         d6:5f:23:a5:d8:78:4e:5c:d4:b4:61:f9:77:fc:91:31:3d:62:
         92:11:32:33:ee:bd:76:b4:03:bf:29:d2:7d:ab:77:c0:a9:70:
         72:81:44:4d:5d:8e:2d:73:ba:54:ea:48:a9:e0:be:ff:0e:e5:
         0a:8e:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----