Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/368DF956A13911F18761E8AECE1D38B0.roa
File:                     368DF956A13911F18761E8AECE1D38B0.roa (raw, json)
Hash identifier:          pNuwJ91K9uuxTX/pKMbO1W0gVtMEaIMCBHU28CYrYc4=
Subject key identifier:   F2:97:72:02:36:73:6C:C1:DD:82:00:41:02:E6:F9:1C:89:C4:CB:6F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D12F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/368DF956A13911F18761E8AECE1D38B0.roa
Signing time:             Wed 26 Aug 2026 10:30:53 +0000
ROA not before:           Wed 26 Aug 2026 10:30:49 +0000
ROA not after:            Sat 25 Aug 2029 10:30:49 +0000
asID:                     17561
IP address blocks:        156.237.180.0/24 maxlen: 24
                          156.237.181.0/24 maxlen: 24
                          156.237.182.0/24 maxlen: 24
                          156.237.183.0/24 maxlen: 24
                          156.237.184.0/24 maxlen: 24
                          156.237.185.0/24 maxlen: 24
                          156.237.186.0/24 maxlen: 24
                          156.237.187.0/24 maxlen: 24
                          156.237.188.0/24 maxlen: 24
                          156.237.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119087 (0x1d12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 10:30:49 2026 GMT
            Not After : Aug 25 10:30:49 2029 GMT
        Subject: CN=6a8ec05d-ec2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:5f:59:45:06:95:9e:49:6e:3c:ea:84:31:
                    97:fc:e4:8c:f1:04:4c:30:d2:a8:92:f8:48:4e:bb:
                    4f:f8:6c:81:d0:99:7b:d2:96:27:bb:6e:d1:30:8c:
                    13:47:1c:64:ff:ce:ce:64:a3:ab:1e:08:f7:db:a8:
                    fd:af:76:e2:01:9a:71:16:69:f9:bb:04:72:5d:f7:
                    84:e6:06:82:7a:d1:4d:56:8c:46:d0:a8:3f:05:97:
                    56:eb:3f:3c:d6:85:f6:52:e9:18:60:5a:a6:c9:2e:
                    99:9e:f1:b8:16:15:81:88:93:89:39:97:78:5e:8b:
                    be:b0:7b:ff:65:8c:d7:d4:83:a1:f7:0c:49:37:d9:
                    28:5c:f4:b8:6c:25:33:3e:1b:0d:e2:9c:e9:57:9d:
                    9f:83:af:84:ad:5e:46:f7:f5:ae:94:3f:9d:bf:c0:
                    fb:56:4b:a7:e7:f2:a4:9c:fe:97:f9:95:ce:8b:5b:
                    cd:e5:07:06:04:1e:4a:91:cd:3e:37:67:0c:94:80:
                    ac:fa:2f:e3:3c:87:f9:df:8e:14:94:88:0c:46:c8:
                    69:e0:9a:77:04:dd:74:e6:53:e6:83:e5:93:44:81:
                    db:68:8b:58:b9:89:d3:64:d5:5b:03:03:80:bc:6a:
                    24:b5:b7:ad:3d:e2:4f:c9:05:65:ac:03:67:29:6e:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:97:72:02:36:73:6C:C1:DD:82:00:41:02:E6:F9:1C:89:C4:CB:6F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/368DF956A13911F18761E8AECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.180.0-156.237.189.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:26:61:d6:d9:f9:74:7e:3a:fc:3b:07:9d:ed:3c:b4:d9:
         cb:63:56:1a:12:66:94:32:fe:80:cf:d8:66:6b:1a:32:14:ec:
         7d:2e:06:1f:66:2e:7e:23:4e:a5:e0:0d:f7:9f:1f:4d:fa:7a:
         69:ce:d4:12:1e:9f:47:3e:b9:ef:97:75:1f:8c:00:16:ff:82:
         25:c0:3b:ba:42:93:78:f5:39:49:7b:17:73:bd:40:93:0a:51:
         43:42:11:1c:45:68:d7:ae:a9:dd:0a:7c:c1:27:0d:50:da:c1:
         87:29:b6:51:67:4a:90:c3:3d:5a:68:4b:52:5b:b8:8f:92:d1:
         9f:f3:d2:d1:65:98:ca:ea:b5:b0:83:78:11:48:23:85:d8:98:
         00:73:d7:bc:0b:17:15:25:a7:2a:a5:8e:be:23:eb:34:bb:f0:
         7f:aa:20:b4:05:dc:d4:ec:ad:84:38:18:20:d5:43:aa:62:fa:
         99:3b:01:20:fa:1c:70:bc:ba:79:46:56:f4:f3:22:22:3c:f3:
         dd:a0:17:2b:a5:07:8f:37:00:1c:6d:c2:3f:a4:6e:02:bf:53:
         63:d8:46:f3:cf:29:1a:90:2b:50:4f:ef:d2:d8:5e:4a:da:d7:
         14:b9:78:03:71:00:80:5f:76:4a:d8:0a:55:c7:46:a4:83:96:
         cf:9a:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----