Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB7CE306B62811F1B0C0ACE0CE1D38B0.roa
File:                     DB7CE306B62811F1B0C0ACE0CE1D38B0.roa (raw, json)
Hash identifier:          VM6sHq2pnZLFljc4q4DQ+g1zlu5IsXmH3cO40KwLGH4=
Subject key identifier:   07:3A:00:17:AD:0A:74:6D:1A:CF:4E:DA:F6:49:FF:F9:0D:DB:FE:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB7CE306B62811F1B0C0ACE0CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 01:56:42 +0000
ROA not before:           Tue 22 Sep 2026 01:56:38 +0000
ROA not after:            Wed 30 Sep 2026 01:56:38 +0000
asID:                     131618
IP address blocks:        156.230.14.0/24 maxlen: 24
                          156.250.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120741 (0x1d7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 01:56:38 2026 GMT
            Not After : Sep 30 01:56:38 2026 GMT
        Subject: CN=6ab1e05a-9bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:73:12:2e:a6:a4:3a:51:1d:da:8d:24:f7:
                    a8:3e:3e:db:4d:d4:dc:b5:83:a7:f7:48:95:79:bd:
                    e1:b1:25:f4:a5:8a:16:18:56:11:f8:94:c7:ff:d0:
                    83:34:2b:d5:40:10:4a:2a:df:2e:c5:28:2a:18:e8:
                    9e:56:5e:5c:74:1f:e7:06:2d:d0:46:85:83:83:27:
                    e0:14:ea:5d:11:09:99:99:1b:73:29:01:41:d6:10:
                    64:da:b7:44:36:67:7c:d3:25:79:59:4a:a5:93:71:
                    38:41:8b:37:39:a1:de:bd:34:1a:1f:eb:67:d4:ed:
                    00:01:e7:83:bf:94:1f:19:ee:66:16:44:14:84:a1:
                    d7:d7:85:e7:c7:b3:a2:8e:53:12:28:e8:60:4f:12:
                    f9:bc:fa:8e:fa:c1:68:fd:f3:23:4b:8f:0d:46:db:
                    ef:2c:12:76:48:4d:3f:5f:9f:47:70:b3:b6:cd:23:
                    29:3e:20:ec:b9:fe:7a:7e:51:94:f4:19:b9:25:40:
                    33:00:98:37:5d:06:5d:89:c4:41:ab:20:94:b7:a4:
                    fd:d4:11:fb:ea:49:d0:00:25:93:ff:5b:7b:3d:0c:
                    2d:e3:41:25:62:13:ee:0c:2e:2d:56:7d:0f:ba:26:
                    eb:b8:69:9b:57:8a:56:f5:41:d1:85:e9:1e:fd:ef:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3A:00:17:AD:0A:74:6D:1A:CF:4E:DA:F6:49:FF:F9:0D:DB:FE:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB7CE306B62811F1B0C0ACE0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.14.0/24
                  156.250.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:d9:cd:ec:13:5a:75:53:bf:68:d9:28:b9:6b:e2:fe:4d:
         91:b3:db:6b:bf:15:cc:65:54:32:60:d5:81:6b:ce:b5:a0:36:
         64:4e:d2:91:0e:47:8c:0f:a5:18:66:66:30:36:94:c1:12:91:
         73:64:c7:a7:14:2c:2a:fe:3c:7e:b1:73:67:5a:7b:87:33:cd:
         37:40:f8:0c:e1:af:af:92:fc:45:11:90:10:c6:09:4d:84:91:
         4c:d9:f6:0a:26:a0:7d:0e:e7:51:31:da:82:30:b6:5b:f7:87:
         6d:01:05:91:df:a4:58:e0:12:1a:42:d4:26:4c:63:07:d6:85:
         ec:e8:98:8f:d6:7d:f5:2b:3b:38:92:15:30:9e:06:60:c4:bd:
         6f:0b:cd:96:01:d8:bc:61:dd:10:63:c7:16:1c:dd:c5:ca:ac:
         6a:61:c3:c1:ef:97:54:b6:11:6d:27:92:dc:86:5a:7b:bf:4d:
         fd:3e:5b:24:7c:0e:81:b8:66:e3:c7:26:b5:ae:0d:98:fc:f0:
         aa:41:bd:90:d7:8f:19:81:74:b9:34:e9:b0:c3:c0:6a:d4:d1:
         11:72:9e:a3:ab:d4:b3:f6:85:45:f8:6a:ca:f5:e9:70:23:89:
         d9:0b:38:94:be:3d:3c:b0:82:48:ab:bb:6f:f2:45:03:9f:8d:
         90:55:02:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----