Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6864420B4E311F1A4DD39A3CE1D38B0.roa
File:                     B6864420B4E311F1A4DD39A3CE1D38B0.roa (raw, json)
Hash identifier:          owIQUOzSaWtKkJQLlPzQU3ilMTQpKhvpdTMe+TO64qY=
Subject key identifier:   7A:C6:B3:BA:52:39:1E:4E:52:D2:04:EA:91:2E:22:0F:57:62:F9:9B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D722
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6864420B4E311F1A4DD39A3CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 11:09:14 +0000
ROA not before:           Sun 20 Sep 2026 11:09:10 +0000
ROA not after:            Tue 27 Oct 2026 11:09:10 +0000
asID:                     63139
IP address blocks:        156.225.112.0/24 maxlen: 24
                          156.227.15.0/24 maxlen: 24
                          156.227.192.0/24 maxlen: 24
                          156.227.193.0/24 maxlen: 24
                          156.227.194.0/23 maxlen: 24
                          156.227.196.0/24 maxlen: 24
                          156.227.197.0/24 maxlen: 24
                          156.227.198.0/24 maxlen: 24
                          156.229.51.0/24 maxlen: 24
                          156.229.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120610 (0x1d722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 11:09:10 2026 GMT
            Not After : Oct 27 11:09:10 2026 GMT
        Subject: CN=6aafbeda-d33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:76:14:ef:ab:f5:32:45:53:2a:ac:9e:21:
                    63:1c:3e:f7:81:f6:c9:8d:73:46:52:c7:ed:8d:77:
                    11:14:87:bb:8a:5a:04:47:e4:1f:f0:d0:35:ed:bd:
                    69:d0:0d:1f:7d:80:76:c7:6c:e2:0e:1f:11:b2:70:
                    a9:ab:a7:8f:1e:92:dc:c2:7d:7c:83:b7:0d:bf:b1:
                    50:c7:38:43:35:3c:fc:f2:75:d7:53:8d:9d:4a:73:
                    5f:88:3d:f0:bb:bb:83:bb:10:bf:32:b2:07:6c:d2:
                    fa:5c:d9:9e:28:10:2a:4a:f5:34:a3:03:66:39:bc:
                    c7:2f:41:00:9a:66:6b:6f:03:ed:4a:b3:ac:1d:51:
                    0e:61:0b:48:2d:fd:02:90:11:64:da:49:63:af:fc:
                    f8:aa:81:75:0e:f7:0d:49:ac:82:84:a2:74:ea:14:
                    98:cc:6f:b7:8c:6e:25:88:1e:a4:6a:84:98:2a:29:
                    b5:71:c0:10:25:aa:3e:a3:68:9b:ba:c1:2a:78:59:
                    35:70:c7:e6:e1:21:67:30:8d:a3:7e:14:94:6e:6d:
                    14:bc:95:8a:12:1a:0c:ec:9a:30:2c:f5:7e:74:71:
                    79:8c:20:d8:1f:59:32:38:db:ca:7a:d4:fd:f6:1f:
                    11:e0:b7:52:fd:bc:77:04:46:da:77:41:3e:76:65:
                    5c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:B3:BA:52:39:1E:4E:52:D2:04:EA:91:2E:22:0F:57:62:F9:9B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6864420B4E311F1A4DD39A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.112.0/24
                  156.227.15.0/24
                  156.227.192.0-156.227.198.255
                  156.229.51.0/24
                  156.229.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:53:ec:5c:a7:40:15:58:8a:06:ce:5a:27:d8:d2:da:a4:
         fa:5e:ef:8d:4d:92:5a:1a:ba:cc:f6:be:5b:1b:04:86:33:e0:
         3f:ea:f8:e0:bb:02:f7:ab:c6:01:b0:7a:79:fd:3f:a1:c0:28:
         19:ff:d4:ee:42:91:0e:ab:60:24:18:d4:6a:a8:0e:84:47:bf:
         25:35:05:0f:2f:a0:ef:c2:d3:91:ed:6c:36:81:da:08:ef:1c:
         58:b9:89:4e:e3:14:a9:df:3b:ae:76:fd:d1:6a:d3:dd:8c:92:
         84:11:72:c3:f4:40:3e:81:de:93:32:95:42:a4:ae:ef:49:f2:
         04:c0:64:81:d7:bf:7c:80:2c:88:03:cd:30:af:66:b0:64:1c:
         33:a4:e9:47:8c:8d:c7:e4:bd:ac:f2:4f:7a:ef:36:94:c3:91:
         39:06:ef:ec:2a:19:40:d6:3f:af:57:77:d9:9f:79:f4:5e:24:
         db:2d:80:7f:33:ea:f0:2a:72:de:de:0b:75:2e:7a:c6:70:41:
         e0:06:05:19:94:a0:80:46:c8:e9:dd:d9:a1:f1:b0:99:d9:9e:
         be:56:5f:0a:fb:f8:d7:6f:6d:29:54:1e:df:f2:7d:4d:f8:a1:
         4e:ee:4b:47:98:8f:7e:55:69:e6:f7:bf:c5:db:33:d8:db:8d:
         a1:39:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----