Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/768B892045A811F1AFCBD2E4CE1D38B0.roa
File:                     768B892045A811F1AFCBD2E4CE1D38B0.roa (raw, json)
Hash identifier:          69aCyI2JZnj2DG0JSPZmWAAcmI8X8vGabdWbTdKoG14=
Subject key identifier:   7C:B1:2F:8E:FD:78:7D:29:88:D8:B5:E5:31:AD:F5:C3:C7:8E:60:1F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B108
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/768B892045A811F1AFCBD2E4CE1D38B0.roa
Signing time:             Fri 01 May 2026 21:55:27 +0000
ROA not before:           Fri 01 May 2026 21:55:23 +0000
ROA not after:            Sat 20 Jun 2026 21:55:23 +0000
asID:                     63018
IP address blocks:        156.233.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110856 (0x1b108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  1 21:55:23 2026 GMT
            Not After : Jun 20 21:55:23 2026 GMT
        Subject: CN=69f5214f-6a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:28:17:71:59:94:0e:43:b1:87:f1:de:e7:
                    d0:f3:7f:c0:a1:1d:cc:b2:22:48:2b:1b:15:4e:c5:
                    38:e0:d7:33:4a:64:f2:7e:19:0d:ea:98:34:2c:cb:
                    6f:88:7e:24:03:fe:d4:3d:be:f0:a0:df:53:c6:be:
                    79:b2:86:3a:fc:53:00:b3:41:3f:a8:e5:8c:39:3a:
                    79:53:dd:e6:47:59:1b:52:a6:56:17:8e:65:b9:2b:
                    15:2b:64:c1:76:02:0e:4d:f9:3c:4a:36:14:19:1e:
                    b8:65:76:64:23:f1:ff:52:a0:01:32:fb:5f:82:20:
                    cd:f9:d5:31:f8:98:79:69:ec:ae:02:6b:22:aa:37:
                    79:27:cd:53:54:68:ee:0e:3c:8e:f8:f6:e0:9a:85:
                    6c:b6:c3:68:40:ac:6c:c6:ee:5f:7e:9d:fe:8e:73:
                    0b:c4:2e:66:74:41:4d:cf:6a:da:04:1f:e6:da:66:
                    3d:d0:f3:43:24:d7:8c:bd:9a:13:b7:c2:a6:f7:c7:
                    0f:1e:ae:fd:52:76:bc:92:69:7b:17:38:f9:4f:39:
                    bc:be:f5:6f:0c:bc:03:a4:b7:ed:a9:ee:6f:46:73:
                    ec:1f:0b:c3:05:b3:0f:49:c0:c1:8b:f6:8c:db:88:
                    ac:85:2e:e7:9f:c4:95:02:ab:9f:27:6f:b1:6e:c1:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B1:2F:8E:FD:78:7D:29:88:D8:B5:E5:31:AD:F5:C3:C7:8E:60:1F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/768B892045A811F1AFCBD2E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:8f:9a:28:10:d6:67:2e:03:01:05:35:11:c5:c7:ae:b8:b0:
         c1:5e:0e:0c:7d:5f:8d:40:21:5c:f2:1d:a0:cc:a5:8c:15:e8:
         5b:b6:6d:3e:27:68:a4:e4:3c:cf:9f:43:c4:4e:7b:ed:6c:cd:
         f6:bd:de:02:f6:d7:68:ca:ae:d4:9b:8f:d2:2d:b5:7e:ad:4c:
         48:21:a3:50:b8:5d:a8:0f:f5:0d:ff:c4:64:5c:26:53:dc:93:
         50:4d:d4:4d:d2:bf:97:d8:01:ab:08:f3:b5:73:9a:34:96:2f:
         74:94:58:ab:ac:f3:77:8d:70:9c:15:d9:d0:e8:05:bf:02:45:
         be:a5:fc:d1:8a:11:8e:5a:75:63:68:24:ee:c7:a3:6d:b7:f3:
         e7:7f:32:15:37:5c:6f:da:6b:df:48:1d:c9:b4:88:2a:23:de:
         54:3a:10:70:9f:41:a3:ae:81:1f:8f:11:84:e1:ff:47:ee:12:
         f6:c9:25:e4:00:9a:f3:e7:1a:f3:3c:8d:40:dd:74:c4:ff:06:
         c5:77:3a:9f:00:fc:59:ac:ae:0e:50:71:f2:5f:96:48:d7:b3:
         c2:7d:56:b9:93:7c:0f:db:ac:cd:cf:80:8b:f3:3f:d3:f3:35:
         b4:fd:45:4e:44:72:4f:f2:7f:0d:99:a2:5a:04:6f:66:c7:99:
         66:63:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:47 2026 by rpki-client