Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F74D9A69B9911F1B8235DD9CE1D38B0.roa
File:                     1F74D9A69B9911F1B8235DD9CE1D38B0.roa (raw, json)
Hash identifier:          V+NScdChikKrkQfH5fPWWFGhvomymVGA3dPWt1FvGKQ=
Subject key identifier:   11:C9:37:19:96:D5:8A:68:DF:04:B5:1E:83:40:5C:CE:B7:6E:65:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F74D9A69B9911F1B8235DD9CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 06:42:19 +0000
ROA not before:           Wed 19 Aug 2026 06:42:15 +0000
ROA not after:            Sun 08 Nov 2026 06:42:15 +0000
asID:                     150706
IP address blocks:        45.192.160.0/22 maxlen: 24
                          45.192.172.0/22 maxlen: 24
                          45.192.176.0/24 maxlen: 24
                          45.192.177.0/24 maxlen: 24
                          45.192.178.0/23 maxlen: 24
                          45.192.180.0/22 maxlen: 24
                          45.192.184.0/22 maxlen: 24
                          45.192.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118281 (0x1ce09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 06:42:15 2026 GMT
            Not After : Nov  8 06:42:15 2026 GMT
        Subject: CN=6a85504b-d548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:49:d3:c1:60:fb:9f:b4:94:d7:f9:03:93:
                    b6:6e:8d:20:a9:27:13:bb:25:fc:c2:5c:c7:59:96:
                    9a:2c:0e:3e:7e:d3:98:74:8b:19:0c:ce:f6:f7:03:
                    13:82:e9:91:a1:1a:a3:6d:cd:73:af:37:d4:f3:4e:
                    2a:9c:f6:79:28:88:d0:d5:9a:c6:0a:e4:26:51:30:
                    83:af:1b:35:bf:13:bd:93:b4:ea:62:78:39:fb:b7:
                    7a:c7:cc:2b:0b:c1:aa:16:19:aa:7b:f5:4f:1c:0c:
                    93:83:70:00:29:46:ee:50:c0:1c:9f:fe:58:21:00:
                    1f:ed:cc:a6:7a:39:d6:9d:6a:47:c0:a9:19:7b:fb:
                    2c:52:2e:db:c8:98:2f:44:3e:8f:f1:2c:c5:5e:20:
                    0e:ff:46:e0:35:e2:83:08:f3:11:cf:b6:ed:f2:8b:
                    1d:36:13:82:66:d3:92:56:dc:4e:9f:b7:a9:c8:1b:
                    ad:68:85:dd:c9:0c:6c:87:18:c9:de:9d:d8:ee:08:
                    96:65:ed:c0:a0:d1:fc:f0:f2:a8:18:76:f1:98:ce:
                    21:cc:b6:eb:44:f9:b9:55:96:4c:43:1f:78:b8:22:
                    2c:07:1a:be:b9:5a:7d:e1:8f:f5:fc:e5:73:4e:1f:
                    1c:dc:86:5c:d5:51:34:be:a5:25:39:67:6e:0c:f4:
                    16:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:37:19:96:D5:8A:68:DF:04:B5:1E:83:40:5C:CE:B7:6E:65:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F74D9A69B9911F1B8235DD9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.160.0/22
                  45.192.172.0-45.192.191.255

    Signature Algorithm: sha256WithRSAEncryption
         58:a5:cb:e9:93:ce:1c:f5:ae:68:4c:1e:d7:65:4f:a9:dc:6a:
         a7:6b:de:39:5a:c5:f7:f6:c1:c5:37:3b:5e:88:0d:a2:54:2c:
         40:21:0a:b4:2f:8a:08:7e:01:c3:49:d4:f1:a5:a1:c9:a6:46:
         ba:38:2f:60:db:aa:8c:fe:fb:4e:dd:ff:24:5c:23:18:93:49:
         27:14:ff:31:4b:87:4d:f5:a6:aa:8e:24:94:5b:a0:5d:07:e7:
         01:39:b5:d6:02:66:e6:eb:8f:b2:3a:89:f2:94:e2:81:f5:ec:
         4b:9d:be:aa:cf:4a:06:43:4a:87:fe:3a:c6:24:89:ad:18:74:
         c4:ec:6c:49:47:37:76:fb:4b:86:d4:b0:f0:7f:0d:f6:1d:85:
         b3:a9:2a:c9:60:bc:66:cf:e2:2b:a9:28:86:0c:0a:03:9d:b9:
         cc:b4:0a:2c:6a:c8:28:d7:28:4a:08:9a:a1:8d:59:d5:2e:3b:
         8d:45:56:e5:26:73:65:a4:59:a3:38:51:40:6b:96:6f:b3:ef:
         79:0f:56:72:68:99:b1:ab:97:1f:1e:19:a5:2d:3f:c8:c5:cf:
         ba:e4:99:6e:ce:7c:f1:3d:4a:e9:fd:49:31:e0:78:6e:ee:78:
         97:41:8e:9b:d9:b6:36:ff:94:1c:a7:07:51:bc:2d:a5:22:af:
         aa:84:62:c1
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAc4JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE5MDY0MjE1WhcNMjYxMTA4MDY0MjE1WjAYMRYw
FAYDVQQDEw02YTg1NTA0Yi1kNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnmRJ08Fg+5+0lNf5A5O2bo0gqScTuyX8wlzHWZaaLA4+ftOYdIsZDM72
9wMTgumRoRqjbc1zrzfU804qnPZ5KIjQ1ZrGCuQmUTCDrxs1vxO9k7TqYng5+7d6
x8wrC8GqFhmqe/VPHAyTg3AAKUbuUMAcn/5YIQAf7cymejnWnWpHwKkZe/ssUi7b
yJgvRD6P8SzFXiAO/0bgNeKDCPMRz7bt8osdNhOCZtOSVtxOn7epyButaIXdyQxs
hxjJ3p3Y7giWZe3AoNH88PKoGHbxmM4hzLbrRPm5VZZMQx94uCIsBxq+uVp94Y/1
/OVzTh8c3IZc1VE0vqUlOWduDPQWEwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBHJ
NxmW1Ypo3wS1HoNAXM63bmXvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRjc0RDlBNjlCOTkxMUYxQjgyMzVERDlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCLcCgMAwDBAItwKwDBAYtwIAw
DQYJKoZIhvcNAQELBQADggEBAFily+mTzhz1rmhMHtdlT6ncaqdr3jlaxff2wcU3
O16IDaJULEAhCrQvigh+AcNJ1PGlocmmRro4L2Dbqoz++07d/yRcIxiTSScU/zFL
h031pqqOJJRboF0H5wE5tdYCZubrj7I6ifKU4oH17EudvqrPSgZDSof+OsYkia0Y
dMTsbElHN3b7S4bUsPB/DfYdhbOpKslgvGbP4iupKIYMCgOducy0CixqyCjXKEoI
mqGNWdUuO41FVuUmc2WkWaM4UUBrlm+z73kPVnJombGrlx8eGaUtP8jFz7rkmW7O
fPE9Sun9STHgeG7ueJdBjpvZtjb/lBynB1G8LaUir6qEYsE=
-----END CERTIFICATE-----