Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC0ACD8CCF8C11F1BA7D81ECCE1D38B0.roa
File:                     EC0ACD8CCF8C11F1BA7D81ECCE1D38B0.roa (raw, json)
Hash identifier:          AcjgivpP5YQEfqy+5VmLLXLc8ikQ/XEQso/3qfWnmXk=
Subject key identifier:   64:77:A5:3D:61:AC:0B:8C:8B:92:BA:27:2D:61:12:ED:D4:E6:FA:C2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E016
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC0ACD8CCF8C11F1BA7D81ECCE1D38B0.roa
Signing time:             Sat 24 Oct 2026 09:25:59 +0000
ROA not before:           Sat 24 Oct 2026 09:25:54 +0000
ROA not after:            Tue 08 Dec 2026 09:25:54 +0000
asID:                     401783
IP address blocks:        156.231.63.0/24 maxlen: 24 (superfluous maxlen)
                          156.231.106.0/24 maxlen: 24 (superfluous maxlen)
                          156.231.128.0/24 maxlen: 24 (superfluous maxlen)
                          156.231.129.0/24 maxlen: 24 (superfluous maxlen)
                          156.231.133.0/24 maxlen: 24 (superfluous maxlen)
                          156.233.66.0/24 maxlen: 24 (superfluous maxlen)
                          156.249.154.0/24 maxlen: 24 (superfluous maxlen)
                          156.249.162.0/24 maxlen: 24 (superfluous maxlen)
                          156.249.166.0/24 maxlen: 24 (superfluous maxlen)
                          156.249.167.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122902 (0x1e016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 24 09:25:54 2026 GMT
            Not After : Dec  8 09:25:54 2026 GMT
        Subject: CN=6adc79a7-cdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:44:56:f6:6b:0e:b4:a7:e0:13:e5:1d:33:
                    c8:85:d0:ff:4d:2b:34:99:85:99:0e:5b:0a:1b:d1:
                    8b:4c:c0:39:0f:4d:59:30:31:91:d3:33:09:c3:16:
                    04:32:c4:c5:6d:c4:0c:33:e3:37:56:31:6b:59:59:
                    c7:cb:53:57:42:56:f0:39:31:98:9e:ee:0b:f7:53:
                    31:d0:0f:fa:83:66:a6:c0:c3:b8:dd:20:5c:80:a6:
                    00:81:e6:a6:df:66:16:d7:79:5d:e3:3b:48:87:80:
                    cd:81:e3:04:8b:5e:28:db:a4:25:67:4d:14:ac:1d:
                    ed:51:b2:b8:b4:1a:45:bd:84:c6:47:3d:d5:ed:4c:
                    f9:cd:e9:5d:b8:08:8d:d2:5d:ac:a6:ee:19:29:15:
                    16:84:c3:64:9b:c4:86:c3:b0:03:9f:f9:14:17:9b:
                    6e:97:98:ff:ff:99:61:0b:de:38:11:04:ee:d8:fd:
                    aa:f5:14:21:bd:0f:31:8b:d9:9e:a1:92:49:f3:f3:
                    5f:83:10:65:ae:ea:12:f9:50:ef:08:b8:61:dc:47:
                    40:c8:af:d5:e4:0f:26:ed:16:f1:26:73:20:78:21:
                    d4:65:93:52:61:21:4d:6c:4c:43:e9:bb:b3:7c:e4:
                    4b:83:7d:24:31:a2:89:c6:12:79:96:0e:ac:c2:6e:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:77:A5:3D:61:AC:0B:8C:8B:92:BA:27:2D:61:12:ED:D4:E6:FA:C2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC0ACD8CCF8C11F1BA7D81ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.63.0/24
                  156.231.106.0/24
                  156.231.128.0/23
                  156.231.133.0/24
                  156.233.66.0/24
                  156.249.154.0/24
                  156.249.162.0/24
                  156.249.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:e3:15:15:8e:d3:1b:22:c6:01:72:39:fb:9c:3a:37:d9:7b:
         47:b7:1f:3e:87:c0:fa:37:ad:44:cc:6d:25:ec:b8:49:f3:91:
         a2:78:d3:41:23:71:82:41:b6:e0:dc:6c:a8:55:0b:a2:37:45:
         d3:0a:43:ce:53:7e:b3:d5:28:3d:a3:3e:81:75:95:68:f0:b2:
         34:c2:44:de:86:94:a7:57:67:88:77:1e:4a:15:03:01:11:87:
         bf:ed:21:f6:ee:33:e1:70:f7:6e:2d:12:59:68:59:ff:37:36:
         3e:09:8e:07:50:8c:3b:c2:11:93:dc:c8:79:8b:b2:16:f3:b1:
         0b:d9:3a:aa:ec:9c:b0:fe:3f:7d:84:57:a4:90:9b:fd:2c:24:
         98:4a:49:89:0f:f5:5b:21:86:85:ab:5e:44:cf:ab:d4:93:52:
         ec:86:04:b7:cb:4a:6a:9b:c5:71:75:8e:1a:9d:7f:40:ef:df:
         df:74:92:f5:c3:8f:84:59:9c:b1:3c:a6:9e:e1:26:83:4f:40:
         b5:f6:aa:31:ab:f6:f8:be:43:9b:fa:55:e4:ba:5d:dd:77:70:
         28:21:a2:84:57:6c:af:53:1a:f5:02:85:ca:b9:40:6f:66:42:
         97:5a:14:8c:46:ef:a6:19:a0:d5:78:bb:d1:93:1b:e9:ef:fe:
         59:d3:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----