Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC815BFECDF211F1BC617CC2CE1D38B0.roa
File:                     FC815BFECDF211F1BC617CC2CE1D38B0.roa (raw, json)
Hash identifier:          KJ9TyuxXqQ3+pUb4a9NHCxAKIanyvgGAK+YYYxmNmyI=
Subject key identifier:   8A:75:21:99:03:67:EE:CD:36:6A:D4:4D:C9:7B:1E:63:DB:74:99:9B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DFB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC815BFECDF211F1BC617CC2CE1D38B0.roa
Signing time:             Thu 22 Oct 2026 08:31:33 +0000
ROA not before:           Thu 22 Oct 2026 08:31:28 +0000
ROA not after:            Sun 21 Oct 2029 08:31:28 +0000
asID:                     17561
IP address blocks:        156.253.249.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.250.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.251.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.252.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.253.0/24 maxlen: 24 (superfluous maxlen)
                          156.253.255.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.80.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.81.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.82.0/24 maxlen: 24 (superfluous maxlen)
                          156.255.83.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122808 (0x1dfb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 22 08:31:28 2026 GMT
            Not After : Oct 21 08:31:28 2029 GMT
        Subject: CN=6ad9c9e5-8038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:95:52:03:ef:b3:d5:b3:5c:98:52:68:72:3b:
                    65:50:7b:c1:1d:f4:b0:bf:fe:b3:97:6b:7a:b9:d2:
                    cb:27:13:d8:49:d2:4a:dc:b6:23:33:6a:54:4b:62:
                    a5:ea:d3:2d:70:5e:f0:dd:6c:4f:fe:74:00:04:7a:
                    37:7a:62:04:d5:d5:47:eb:15:de:ca:b6:c8:6c:83:
                    29:90:a3:a9:e1:b2:ed:8a:8a:ea:43:3c:e4:e5:82:
                    97:0b:97:88:be:ea:52:07:c3:2a:9f:7e:68:c6:de:
                    94:82:0a:4c:80:26:d3:bb:0c:b5:1b:27:9f:8f:43:
                    2c:81:12:bd:cd:69:b3:b9:e5:28:cc:2c:e2:e4:12:
                    f2:88:27:ec:5a:65:d7:17:ae:47:2a:a9:ca:1e:a7:
                    4a:2b:38:33:13:53:41:18:f0:41:07:9f:e4:a4:3c:
                    c3:c2:7b:00:f5:32:27:2f:f7:6a:68:49:06:e1:ca:
                    82:92:1a:dd:37:5d:d7:ef:d2:9c:d4:14:fb:c7:9b:
                    dd:06:e1:6e:5c:f1:33:63:cd:da:17:40:60:f2:36:
                    72:a7:a6:ce:74:8e:5b:66:38:81:d8:62:c5:62:e9:
                    77:f3:42:85:be:c1:96:56:3f:f0:a0:4e:ce:7e:29:
                    0d:2b:95:fc:8a:f5:59:39:de:2d:71:b0:79:ce:aa:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:75:21:99:03:67:EE:CD:36:6A:D4:4D:C9:7B:1E:63:DB:74:99:9B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC815BFECDF211F1BC617CC2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.249.0-156.253.253.255
                  156.253.255.0/24
                  156.255.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:52:78:ce:5e:d5:2d:28:56:ff:56:52:b7:11:cf:b3:be:8a:
         82:aa:37:10:2c:ce:7e:57:ed:be:bc:99:47:e9:46:20:e0:47:
         93:ac:33:0f:cb:07:ac:da:86:5e:a4:56:3c:39:1f:08:09:cb:
         35:7f:d3:2d:68:c0:af:4a:29:cf:b8:64:fa:2c:f1:67:fc:9a:
         d3:5d:b0:ca:f3:08:f9:bd:33:d2:8e:c4:c6:03:0d:2b:ee:ce:
         d6:ac:2e:76:9e:20:2c:b9:03:86:3c:b4:35:3b:46:6b:88:c4:
         a8:d2:5b:b9:d9:20:4f:01:4d:81:96:a9:ed:9f:c6:16:26:5d:
         84:97:c3:fc:ee:98:ac:32:75:7b:e0:c9:f0:8e:57:5a:11:cd:
         57:f7:02:d2:0d:3f:53:57:98:cd:65:9c:67:28:86:42:6d:7c:
         f1:29:4f:88:08:d1:06:64:a4:b2:bb:8a:c6:b2:d0:04:d3:cc:
         21:69:8d:80:00:6d:86:12:f1:d9:80:98:ba:79:b5:e9:d0:3a:
         0b:28:5c:c1:36:8a:c5:c0:30:d0:26:9a:25:8c:97:4c:85:50:
         07:84:18:39:34:2a:c6:11:eb:0b:e4:bf:fe:86:5f:e1:7b:5a:
         da:b0:65:2a:af:99:83:2c:88:60:a2:99:7f:a0:df:2e:2a:c6:
         d8:5f:d9:8e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAd+4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDIyMDgzMTI4WhcNMjkxMDIxMDgzMTI4WjAYMRYw
FAYDVQQDEw02YWQ5YzllNS04MDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9ZVSA++z1bNcmFJocjtlUHvBHfSwv/6zl2t6udLLJxPYSdJK3LYjM2pU
S2Kl6tMtcF7w3WxP/nQABHo3emIE1dVH6xXeyrbIbIMpkKOp4bLtiorqQzzk5YKX
C5eIvupSB8Mqn35oxt6UggpMgCbTuwy1Gyefj0MsgRK9zWmzueUozCzi5BLyiCfs
WmXXF65HKqnKHqdKKzgzE1NBGPBBB5/kpDzDwnsA9TInL/dqaEkG4cqCkhrdN13X
79Kc1BT7x5vdBuFuXPEzY83aF0Bg8jZyp6bOdI5bZjiB2GLFYul380KFvsGWVj/w
oE7OfikNK5X8ivVZOd4tcbB5zqov4QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIp1
IZkDZ+7NNmrUTcl7HmPbdJmbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzgxNUJGRUNERjIxMUYxQkM2MTdDQzJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACc/fkDBAGc/fwDBACc/f8D
BAKc/1AwDQYJKoZIhvcNAQELBQADggEBAGlSeM5e1S0oVv9WUrcRz7O+ioKqNxAs
zn5X7b68mUfpRiDgR5OsMw/LB6zahl6kVjw5HwgJyzV/0y1owK9KKc+4ZPos8Wf8
mtNdsMrzCPm9M9KOxMYDDSvuztasLnaeICy5A4Y8tDU7RmuIxKjSW7nZIE8BTYGW
qe2fxhYmXYSXw/zumKwydXvgyfCOV1oRzVf3AtINP1NXmM1lnGcohkJtfPEpT4gI
0QZkpLK7isay0ATTzCFpjYAAbYYS8dmAmLp5tenQOgsoXME2isXAMNAmmiWMl0yF
UAeEGDk0KsYR6wvkv/6GX+F7WtqwZSqvmYMsiGCimX+g3y4qxthf2Y4=
-----END CERTIFICATE-----