Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CECBAECDEC11F1B11FFC17CF1D38B0.roa
File:                     B3CECBAECDEC11F1B11FFC17CF1D38B0.roa (raw, json)
Hash identifier:          sT1uiDQ0MyyUSiKLz5dXvoA4S5/LEEzdWp2aopzhUvs=
Subject key identifier:   5D:FE:BD:35:9F:2A:89:A4:78:ED:B0:93:F7:AA:7A:28:25:E4:1F:55
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DFA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CECBAECDEC11F1B11FFC17CF1D38B0.roa
Signing time:             Thu 22 Oct 2026 07:46:34 +0000
ROA not before:           Thu 22 Oct 2026 07:46:29 +0000
ROA not after:            Sun 21 Oct 2029 07:46:29 +0000
asID:                     17561
IP address blocks:        156.253.134.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.177.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.178.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.179.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.180.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.181.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.182.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.183.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.186.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.188.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122792 (0x1dfa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 22 07:46:29 2026 GMT
            Not After : Oct 21 07:46:29 2029 GMT
        Subject: CN=6ad9bf5a-1851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:42:e6:e3:95:ed:f8:e7:8b:ae:30:c7:99:
                    88:34:28:5d:04:98:b9:6f:3b:a5:46:e4:55:ff:a7:
                    d6:0c:68:c6:a1:6f:55:c9:a1:ef:ca:1e:f8:06:62:
                    49:84:ce:08:79:67:3b:27:e8:58:de:41:d8:1f:be:
                    a1:08:13:cb:08:a9:4b:5b:12:78:e2:28:c1:26:ca:
                    05:85:98:58:ce:83:67:d5:73:c0:bb:10:b5:50:90:
                    be:fa:9c:4f:2b:d4:3b:8e:c2:94:ad:bb:e9:9e:5e:
                    18:e7:43:93:b2:47:ce:54:7e:fa:74:35:e7:6c:1b:
                    90:4d:30:35:30:1d:b2:6c:a0:d7:b8:75:f9:02:6c:
                    73:9e:fb:5f:35:d2:c0:f1:49:66:2f:d1:59:86:47:
                    70:c2:a0:99:d4:42:10:e9:ad:30:8c:97:60:d4:08:
                    74:87:24:30:2f:c0:31:14:ab:a0:20:77:68:89:b9:
                    bf:90:f7:b2:12:c6:f0:3b:5f:15:66:92:40:2f:66:
                    f1:fb:c0:5b:b4:9d:14:10:60:cb:87:e2:7f:e4:59:
                    ea:08:95:f2:ec:73:c5:ee:13:98:5e:0a:7a:ba:df:
                    43:3d:87:9c:79:30:f2:57:dd:a7:e4:b8:8f:e6:8c:
                    31:46:0a:12:1a:85:36:c3:37:8d:f7:fc:44:36:80:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FE:BD:35:9F:2A:89:A4:78:ED:B0:93:F7:AA:7A:28:25:E4:1F:55
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CECBAECDEC11F1B11FFC17CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.134.0/24
                  156.253.177.0-156.253.183.255
                  156.253.186.0/24
                  156.253.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:81:58:fa:c6:03:24:78:0d:1d:96:55:3a:7c:12:92:91:b6:
         2c:94:da:77:68:4b:4a:68:af:05:50:22:8d:47:4b:97:9e:7e:
         bb:56:ad:e8:6d:5a:b3:0b:40:e4:d6:82:48:5e:e6:92:4c:5c:
         10:2a:ce:f5:3f:9d:f0:2a:1b:51:6a:6e:25:53:cb:1b:33:9e:
         4d:aa:31:65:b5:0b:94:fb:35:76:98:e5:4c:01:d8:7d:10:cf:
         94:14:05:34:b5:3c:10:01:08:6f:5a:27:92:4a:74:c2:51:f0:
         64:3f:a1:dc:e2:88:d0:75:bd:58:1d:23:31:22:6e:f7:62:a2:
         e4:44:88:df:9e:78:8a:c3:bf:bc:07:39:ed:4f:27:42:9b:af:
         0d:ed:89:5d:92:d9:20:24:44:bc:30:61:83:4f:4a:47:bb:af:
         30:4c:13:cd:e4:04:92:14:e2:92:ad:d1:a7:33:5c:a1:b6:27:
         d3:e2:8a:77:9a:45:3e:ad:3a:cd:db:75:b2:2c:28:e7:a3:45:
         c3:e3:0f:86:d7:fd:14:23:43:ef:83:62:3e:f2:6b:93:f6:86:
         77:ae:55:f3:bf:a9:69:60:3a:21:5e:38:69:e9:16:00:23:41:
         c1:0d:1d:b2:fd:5a:4f:8f:4d:76:f7:ca:90:b0:c3:13:c0:65:
         70:e9:4b:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----