Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DC57E4AD0111F18D894E05CF1D38B0.roa
File:                     68DC57E4AD0111F18D894E05CF1D38B0.roa (raw, json)
Hash identifier:          BhkJ4RZuZm+LxhpdA44mEfSSiD3uzjKy6IXGm/q+ILw=
Subject key identifier:   2E:8B:53:31:78:E3:4F:5E:1B:5C:C1:69:B6:5B:20:22:5E:7B:0B:0C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DC57E4AD0111F18D894E05CF1D38B0.roa
Signing time:             Thu 10 Sep 2026 10:21:43 +0000
ROA not before:           Thu 10 Sep 2026 10:21:33 +0000
ROA not after:            Sat 10 Oct 2026 10:21:33 +0000
asID:                     139646
IP address blocks:        156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120016 (0x1d4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 10:21:33 2026 GMT
            Not After : Oct 10 10:21:33 2026 GMT
        Subject: CN=6aa284b7-eefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:2c:2b:a4:00:d7:c2:c5:3a:79:20:62:ba:
                    01:73:d6:03:a8:8f:b3:42:23:cb:44:05:ba:27:53:
                    21:be:10:da:c5:9d:ca:7b:67:cb:cb:69:ea:8f:0b:
                    0e:90:d0:81:4e:01:46:44:90:0a:a8:99:65:02:d2:
                    45:ce:26:a3:c1:fe:f5:d3:7a:2c:f6:2b:5b:55:8b:
                    a6:35:81:7b:d7:9d:1a:af:0a:ac:32:2b:af:b1:f7:
                    1b:49:7d:bd:6c:b4:45:3e:41:6e:1c:6a:be:bc:30:
                    ab:f7:1c:98:ff:af:3a:b4:45:f5:de:07:ed:dd:08:
                    8f:c3:95:92:cf:3e:c3:be:06:27:05:b3:8d:db:6f:
                    26:d2:64:48:77:69:d9:6e:19:ea:52:44:c0:48:ff:
                    74:7b:ee:57:fc:22:d6:0c:54:1f:90:c9:bd:39:7d:
                    2e:60:13:14:c7:60:4a:aa:31:c4:1a:ba:b3:81:2a:
                    cd:19:3f:4f:42:9d:47:46:3b:6d:26:aa:cb:96:37:
                    fb:25:ff:84:8f:cb:a9:e2:92:ef:67:77:59:71:31:
                    80:39:1d:05:c7:b5:91:2e:03:b4:eb:0a:c3:89:12:
                    ee:6f:be:8d:29:6a:05:cb:b4:80:8a:02:d7:08:eb:
                    76:c9:ac:76:41:de:2c:07:68:3c:e8:bf:b5:b4:dd:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8B:53:31:78:E3:4F:5E:1B:5C:C1:69:B6:5B:20:22:5E:7B:0B:0C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DC57E4AD0111F18D894E05CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:22:f2:22:72:ef:57:45:ad:0d:e7:52:37:00:bd:08:b3:57:
         27:1d:ce:9a:5d:d8:9c:43:7e:41:1c:39:43:a4:17:5d:e4:2f:
         b3:73:c8:0f:9e:ec:00:f4:5c:26:91:8b:a5:5b:a5:76:fd:01:
         90:d7:32:c2:30:08:91:dd:70:4a:81:3d:cf:80:8e:57:54:6c:
         df:23:81:ec:b2:77:11:28:85:de:03:08:41:ba:44:be:0b:02:
         fb:f9:4d:4e:74:04:e6:c8:34:7c:22:35:53:9b:80:a5:76:7b:
         65:56:32:65:08:c9:1c:e3:63:49:46:d4:f6:15:58:8b:48:b8:
         28:91:aa:d6:db:63:8c:48:f7:6c:48:da:ee:41:5e:61:6b:ee:
         46:21:8f:4c:cd:d2:76:6c:5e:e4:e8:8e:53:1d:59:77:16:27:
         a7:f8:ba:d1:d6:53:e2:1b:76:b8:78:68:95:ac:e0:77:05:2e:
         b0:33:3d:d9:f0:21:f1:72:79:9a:c6:a4:02:21:68:78:f9:97:
         15:c0:24:9a:58:dd:20:4b:a2:07:d5:14:15:85:82:1b:f0:2e:
         a4:29:3b:8a:ad:f1:e3:c0:f6:f0:60:53:9c:86:e9:aa:05:3d:
         b1:84:51:8b:d3:23:c7:41:91:19:ca:d7:5d:4c:22:44:cf:9c:
         1d:6b:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----