Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9B92534B66411F1838B2DF7CE1D38B0.roa
File:                     D9B92534B66411F1838B2DF7CE1D38B0.roa (raw, json)
Hash identifier:          /IfXKGhFv9xKtoyuLjtfC+IvRtle2Ouo945YmezVAPk=
Subject key identifier:   C7:42:4E:83:EE:5B:86:D0:87:88:0A:FA:B3:E3:51:A3:E3:E1:0F:36
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9B92534B66411F1838B2DF7CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 09:06:09 +0000
ROA not before:           Tue 22 Sep 2026 09:06:05 +0000
ROA not after:            Sat 07 Nov 2026 09:06:05 +0000
asID:                     401783
IP address blocks:        156.249.133.0/24 maxlen: 24
                          156.249.153.0/24 maxlen: 24
                          156.249.170.0/24 maxlen: 24
                          156.249.183.0/24 maxlen: 24
                          156.249.185.0/24 maxlen: 24
                          156.249.187.0/24 maxlen: 24
                          156.249.190.0/24 maxlen: 24
                          156.249.191.0/24 maxlen: 24
                          156.253.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120810 (0x1d7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 09:06:05 2026 GMT
            Not After : Nov  7 09:06:05 2026 GMT
        Subject: CN=6ab24501-28ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:82:ef:5e:e9:55:80:a5:49:17:ab:59:9d:1a:
                    cd:9d:6c:58:7d:e1:c1:3b:c9:23:4e:21:5e:8e:47:
                    24:d8:7d:db:27:e8:db:91:1b:c5:93:27:c1:5d:cd:
                    e4:07:63:f2:b5:90:1f:b8:75:ee:9b:9e:5b:f7:44:
                    e4:4a:f9:a1:ea:f3:17:b3:18:a2:a6:d3:1f:e6:78:
                    16:1c:fc:9f:d1:2b:8f:50:c4:76:b8:2f:65:b7:db:
                    28:bc:5a:dd:5d:63:e3:be:a9:19:5e:18:99:3d:8b:
                    af:a9:80:6b:4f:87:48:4d:69:28:5b:b8:89:58:da:
                    98:d9:f8:a5:12:2e:10:b7:1c:2a:9a:ea:98:c4:54:
                    cf:26:96:d5:06:98:cb:1a:1a:19:06:1b:90:9d:11:
                    51:28:54:60:e6:2f:56:4e:b8:fc:ab:09:5e:80:0d:
                    17:22:de:26:9b:9e:f5:a6:26:bb:c1:68:38:19:4c:
                    24:2a:13:0c:ff:27:9b:46:e8:09:87:28:5a:96:d7:
                    d7:20:4a:2f:fc:e5:65:ae:47:0d:50:3b:a5:c9:13:
                    e7:39:9c:9c:11:f1:d2:27:28:0d:72:7e:d6:53:37:
                    2a:67:a2:60:82:68:2c:ef:08:8d:b5:23:5b:2a:88:
                    dd:af:09:2c:0f:47:e5:42:55:eb:33:54:2e:0a:06:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:42:4E:83:EE:5B:86:D0:87:88:0A:FA:B3:E3:51:A3:E3:E1:0F:36
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9B92534B66411F1838B2DF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.133.0/24
                  156.249.153.0/24
                  156.249.170.0/24
                  156.249.183.0/24
                  156.249.185.0/24
                  156.249.187.0/24
                  156.249.190.0/23
                  156.253.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ec:16:84:2d:63:4e:73:27:fd:24:e6:06:e1:c8:54:77:53:
         f3:59:b4:c8:45:db:1f:bd:4c:e3:fb:fe:91:18:0e:4f:bc:38:
         38:eb:36:d6:9b:a0:1b:f7:e4:db:8e:c9:8e:38:f9:f6:ac:de:
         90:e7:fa:e3:64:77:33:78:4e:9b:a0:6a:09:26:7d:1c:b5:c3:
         75:4b:93:5c:72:d6:0b:ef:96:e0:4a:39:90:71:9a:fe:e4:2e:
         ad:93:07:30:71:46:00:6e:79:67:01:6e:b5:29:05:3d:06:a1:
         83:9f:02:db:b1:d1:09:67:1c:4f:6f:f0:d5:91:0c:01:04:11:
         93:e9:7b:4d:14:0d:95:bf:80:4d:b9:7d:64:99:66:ec:fe:e4:
         b5:cf:6e:e6:3e:67:0b:1a:e3:00:ce:1c:f8:09:93:37:72:ff:
         0e:01:d4:13:9d:a3:95:8a:0b:78:f0:01:ed:03:f9:0a:e7:27:
         4b:51:89:73:5d:0e:25:4a:1b:83:cb:9c:29:1d:8b:90:5f:c9:
         00:b2:16:47:4e:3e:ef:47:17:30:e9:1b:26:ba:5e:99:52:0a:
         e4:50:f3:80:ba:6f:57:9f:1d:c3:eb:1e:3a:3f:ed:dd:43:57:
         58:f1:bd:6f:a0:b8:63:a8:8a:95:c8:8d:25:d6:07:21:b0:a8:
         e6:29:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----