Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/708CD2C4A11811F1B7DDD5ECCE1D38B0.roa
File:                     708CD2C4A11811F1B7DDD5ECCE1D38B0.roa (raw, json)
Hash identifier:          tKozxYKWP+jCS+qNQ+wJsFO6LS9t4boKux03FwbT2rs=
Subject key identifier:   76:91:74:25:3C:D1:3A:AD:B0:6E:9C:3E:96:50:17:0A:F0:66:6C:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/708CD2C4A11811F1B7DDD5ECCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 06:36:17 +0000
ROA not before:           Wed 26 Aug 2026 06:36:13 +0000
ROA not after:            Thu 10 Sep 2026 06:36:13 +0000
asID:                     141883
IP address blocks:        156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119013 (0x1d0e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 06:36:13 2026 GMT
            Not After : Sep 10 06:36:13 2026 GMT
        Subject: CN=6a8e8961-e06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:07:ba:36:89:b0:18:41:93:07:b7:05:bf:
                    6f:9f:e2:db:6f:3a:9c:a8:90:1d:94:7f:63:1c:90:
                    17:77:f4:86:76:28:0c:ab:3e:e4:da:3b:09:44:11:
                    6f:55:c6:51:b7:07:11:f0:7a:a6:8c:0e:fc:3c:71:
                    7e:52:cc:db:32:0b:be:58:ea:11:73:a7:cd:fa:54:
                    43:47:a7:db:c9:84:89:a2:1d:19:03:af:3a:85:14:
                    b3:9d:ef:ff:5a:51:bd:25:78:6b:85:5a:b6:7b:40:
                    51:32:7a:3b:43:34:cb:63:26:78:3a:c1:2b:50:7a:
                    c5:a6:07:b0:06:79:34:66:b1:52:6d:f2:d8:a8:5e:
                    58:a0:bf:ef:7c:74:bd:40:d7:bc:07:2e:71:f3:51:
                    95:f3:80:1b:5e:d4:9a:7f:09:c1:eb:f9:91:26:ec:
                    e2:7d:3d:84:db:be:7e:e5:35:ab:ea:04:be:73:a2:
                    59:e3:77:af:77:32:0b:90:d9:9e:a2:11:64:9a:ca:
                    a0:c6:56:5e:54:1b:62:76:c3:a0:53:42:dc:13:84:
                    4f:bc:52:f2:0f:78:d2:1b:ad:0a:75:9c:39:da:33:
                    75:00:84:bd:ef:f8:c5:cf:f1:fc:6f:ab:a1:f5:9f:
                    cf:7f:9b:17:6b:aa:dc:83:08:22:3e:77:ca:47:f4:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:91:74:25:3C:D1:3A:AD:B0:6E:9C:3E:96:50:17:0A:F0:66:6C:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/708CD2C4A11811F1B7DDD5ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.0.0-156.240.55.255
                  156.242.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:d1:95:d6:4a:b2:c3:d9:52:ea:00:e6:e3:5f:1d:05:bd:65:
         51:be:c2:bd:8e:15:7d:0d:24:07:fb:e3:7e:4b:ec:de:f3:06:
         ed:a4:1d:be:c1:30:19:a2:10:63:44:d7:65:80:ab:39:8f:b4:
         84:88:d8:05:16:b0:ef:d9:eb:f3:ed:74:c0:d7:77:d7:ad:02:
         6f:be:f5:5b:ec:e5:1c:9f:37:e8:ea:5e:a8:c6:df:55:99:88:
         4c:bd:aa:aa:9b:f5:ce:25:58:9e:94:ae:dc:6d:b3:19:06:d6:
         e9:c5:0b:29:3f:66:30:90:1b:50:11:26:69:33:52:ef:c6:42:
         e1:24:de:59:79:91:cd:3e:d0:a6:b1:9a:fd:76:0b:72:2d:99:
         ff:cd:5e:86:72:31:36:ec:ce:f1:25:c5:f6:02:62:ff:b9:06:
         4f:e8:d6:d2:4e:53:b3:cb:dc:8a:87:6d:dd:89:e4:a0:c9:3d:
         80:66:bf:ed:41:76:0d:7d:d2:6e:d1:bd:20:a2:ae:b1:e6:fa:
         f6:88:74:65:08:a7:8a:7f:66:cc:1a:45:fa:00:57:f5:c6:a4:
         73:5a:a4:5e:33:76:1e:11:f8:ef:58:c0:90:c1:b0:01:50:6a:
         44:2b:1c:09:bc:d7:d4:8c:60:e8:89:e8:4f:8d:d2:30:91:38:
         17:3a:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----