Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68544709F9B11F1806BD7E0CE1D38B0.roa
File:                     A68544709F9B11F1806BD7E0CE1D38B0.roa (raw, json)
Hash identifier:          +c5tlWatlg1lxw9xZV4R/WoM5yeOsew+wahtc/Mk/j4=
Subject key identifier:   5F:35:BF:CA:32:C7:D0:90:14:0B:84:14:3D:68:6F:1D:A0:BE:E1:8F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D068
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68544709F9B11F1806BD7E0CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:10:29 +0000
ROA not before:           Mon 24 Aug 2026 09:10:25 +0000
ROA not after:            Thu 19 Aug 2027 09:10:25 +0000
asID:                     216047
IP address blocks:        156.246.64.0/21 maxlen: 24
                          156.246.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118888 (0x1d068)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 09:10:25 2026 GMT
            Not After : Aug 19 09:10:25 2027 GMT
        Subject: CN=6a8c0a85-af38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:87:b3:f9:43:64:f3:26:fe:30:2d:f0:64:cb:
                    33:d4:a0:3e:77:96:24:f2:d2:fd:7c:64:d6:b1:68:
                    9c:76:eb:b9:e4:a3:5f:1f:54:3a:93:47:f7:da:71:
                    49:6d:36:20:61:47:14:1a:ca:27:6b:67:d6:88:51:
                    95:d0:9c:3f:62:d5:34:bd:e7:25:0b:78:e2:4b:7c:
                    72:8f:64:65:71:16:2f:f2:7f:dc:2c:a8:56:26:c7:
                    ed:6d:07:59:91:80:5d:97:cc:6a:91:29:15:d1:90:
                    86:97:b7:0c:f6:7f:dc:9a:27:48:da:25:90:f1:49:
                    52:6d:21:19:84:f6:f4:7d:19:f1:8e:bf:33:a1:11:
                    78:40:ab:29:f1:4f:ac:fc:a2:b9:db:01:7d:b7:42:
                    12:a8:bb:b1:08:6c:95:11:c5:56:15:81:41:d4:a4:
                    65:3e:14:61:18:ab:a6:c1:fb:2e:35:f6:9c:e5:8c:
                    cb:7c:81:99:56:3f:ce:e5:48:4f:4c:ee:29:a9:11:
                    05:86:7c:4e:21:58:2b:e6:ef:4f:25:ee:6b:ed:39:
                    4b:2f:24:70:18:45:cd:7f:b0:e3:4b:6e:28:67:0b:
                    d9:f6:4c:60:88:ce:84:f7:09:da:9b:fa:91:95:60:
                    2b:c0:cb:65:4d:0e:a4:e1:7f:f6:09:4f:2d:5e:ef:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:35:BF:CA:32:C7:D0:90:14:0B:84:14:3D:68:6F:1D:A0:BE:E1:8F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68544709F9B11F1806BD7E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:9a:6e:37:96:07:7b:39:ea:4a:e6:90:9e:13:ca:0d:27:
         b8:d2:44:27:8a:d0:bd:72:a6:98:f6:34:12:e1:13:03:08:2a:
         5d:04:f9:06:19:ee:f2:5f:fb:5c:35:03:ff:67:aa:b8:0e:50:
         30:04:bd:0b:aa:3d:d9:67:85:ee:f4:b0:b7:90:76:34:2a:40:
         37:bd:9d:89:3b:69:eb:7f:11:bc:36:59:18:e0:5e:33:bd:59:
         13:e7:f0:67:f0:db:be:52:37:8c:e0:39:5b:a9:73:ba:2a:c6:
         d9:0d:c7:93:a6:a1:69:6d:24:84:cd:0e:dd:5c:82:ac:40:17:
         94:29:f1:01:f5:a3:d9:84:71:91:f0:91:d4:f1:13:1f:13:c4:
         3a:05:f5:52:ae:4a:b6:a0:d5:5f:39:db:3c:be:06:6e:08:9c:
         e4:89:ab:2a:64:b3:49:ae:a5:2b:37:0e:7f:71:cf:c8:b4:11:
         76:e6:7f:9b:80:a0:57:07:e0:50:81:8e:cf:80:71:46:17:12:
         08:95:d9:1a:53:91:68:e7:e7:42:69:fa:51:38:a0:ae:16:37:
         8c:5a:bb:64:9e:9f:c5:de:e3:f2:84:e9:37:eb:69:0c:62:8f:
         e8:52:cf:54:cd:79:b0:ab:5c:2d:2e:da:98:66:d7:50:b9:e9:
         dc:c0:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----