Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/741C18BABF2B11F1A9BF05B5CE1D38B0.roa
File:                     741C18BABF2B11F1A9BF05B5CE1D38B0.roa (raw, json)
Hash identifier:          3Ato2nPtk1UHpq8/WLLnAc/xZyUn+nygU4K2laqwdto=
Subject key identifier:   0E:09:52:64:50:37:DA:F8:E6:AD:4E:2F:91:74:D5:99:E5:1E:B1:1A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/741C18BABF2B11F1A9BF05B5CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 13:07:58 +0000
ROA not before:           Sat 03 Oct 2026 13:07:54 +0000
ROA not after:            Mon 16 Nov 2026 13:07:54 +0000
asID:                     40779
IP address blocks:        154.222.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125976 (0x1ec18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 13:07:54 2026 GMT
            Not After : Nov 16 13:07:54 2026 GMT
        Subject: CN=6ac0fe2e-6d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:35:d8:b7:e4:17:f9:1c:7a:42:0f:9b:51:
                    8f:ac:f5:e3:88:b0:c6:bc:10:62:3d:2a:8b:9c:2e:
                    c5:37:f2:d7:73:2b:51:ac:fe:41:0e:49:b4:a4:21:
                    2c:8a:43:db:52:7b:73:17:60:ae:e9:4c:4e:62:87:
                    5c:5e:bd:b9:c0:26:f0:fd:d2:75:92:3b:3a:e1:fe:
                    da:33:27:02:11:5e:53:b1:2e:5e:70:f3:48:0a:01:
                    fb:55:4f:76:25:c4:c1:cc:b2:81:0e:03:a9:01:f1:
                    8f:01:7c:16:45:e8:ad:b6:21:5f:37:e2:67:83:17:
                    2e:2f:af:ef:da:03:19:8f:aa:56:72:a2:bd:7d:12:
                    b4:5e:b9:be:4f:b3:ea:f0:73:71:f0:b9:16:26:bb:
                    9f:39:d9:f9:82:96:06:dd:00:07:ed:e8:1b:f6:a1:
                    fd:1e:92:5d:70:28:42:25:05:ab:52:d8:1a:a4:96:
                    f4:d7:64:8e:ba:d8:96:a6:fe:77:77:1e:19:0a:b7:
                    0c:f7:ab:08:2a:97:76:c9:91:0d:d4:47:e7:ec:8e:
                    25:be:50:64:24:89:c0:c7:ac:61:a9:93:4a:30:d7:
                    70:e3:9f:0c:f4:f8:50:a4:91:29:d5:77:53:f4:5d:
                    95:f7:29:c1:00:0c:9c:35:0b:da:63:77:c7:bd:dc:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:09:52:64:50:37:DA:F8:E6:AD:4E:2F:91:74:D5:99:E5:1E:B1:1A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/741C18BABF2B11F1A9BF05B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:19:39:20:df:c1:7b:01:4b:72:d9:13:54:56:fb:17:03:
         8a:1c:30:25:59:9e:cb:76:f8:19:fe:06:5b:ff:76:20:1e:a5:
         5d:11:f6:2b:4a:b3:cf:ad:f6:75:b3:08:33:ec:98:91:c1:80:
         02:42:99:00:fe:d3:09:81:a5:9e:d9:5c:a8:1f:d4:5a:0e:69:
         02:6a:28:4c:d7:26:dd:f4:fa:46:e8:d3:80:66:01:ef:d3:7e:
         74:d5:63:7a:e7:4d:d6:e3:a0:74:aa:14:d6:35:e2:f3:ac:99:
         85:70:6c:ad:e0:80:07:24:d8:26:be:11:c9:79:99:28:b7:3c:
         dc:bf:83:81:13:ab:9d:7d:85:1a:22:24:a2:cf:57:67:7b:c8:
         8d:4f:8e:c8:2c:da:fa:66:30:1d:86:0b:c0:20:b9:5b:cf:4c:
         5c:31:6e:10:67:bd:60:4d:2b:10:1a:fe:89:ab:1d:ab:54:0a:
         80:e5:73:68:c1:98:ba:d4:c5:1d:45:d6:fa:8b:18:d2:bc:25:
         7b:5e:ea:50:b8:97:58:70:41:6c:56:6c:8e:6e:3d:dd:c4:b5:
         a8:80:5d:a8:5e:6a:af:78:2c:0a:b4:8b:a4:b5:47:b9:7e:ea:
         ac:18:14:c2:e8:75:ef:d4:c6:75:ea:3c:22:df:44:0f:8a:0e:
         e2:aa:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----