Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/741CE1749CCA11F1B4D42C05CF1D38B0.roa
File:                     741CE1749CCA11F1B4D42C05CF1D38B0.roa (raw, json)
Hash identifier:          1WwhRheFdvV6/g+/puumtSVFpY4LYPP/VWKpkaFg+WM=
Subject key identifier:   E3:2E:64:77:C9:57:47:75:C3:17:E5:ED:03:AB:43:A0:F1:4D:74:D2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CEEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/741CE1749CCA11F1B4D42C05CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 19:07:57 +0000
ROA not before:           Thu 20 Aug 2026 19:07:53 +0000
ROA not after:            Tue 22 Sep 2026 19:07:53 +0000
asID:                     22516
IP address blocks:        156.227.160.0/19 maxlen: 24
                          156.237.0.0/18 maxlen: 24
                          156.237.64.0/19 maxlen: 24
                          156.242.192.0/20 maxlen: 24
                          156.243.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118508 (0x1ceec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 19:07:53 2026 GMT
            Not After : Sep 22 19:07:53 2026 GMT
        Subject: CN=6a87508d-2f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:85:2b:4c:07:c2:b1:8d:81:5c:0d:d0:48:
                    41:67:9a:2d:85:a0:79:5c:2b:77:db:ee:50:45:f9:
                    71:41:af:99:35:e6:0a:1d:2d:2b:8b:b7:22:22:3e:
                    17:bb:a2:e2:27:94:26:d3:2a:39:26:0e:2c:02:64:
                    fc:dd:f2:a9:b0:b9:22:1d:1e:4e:9b:c6:f4:e8:4a:
                    22:d2:72:2e:6f:b0:ec:9c:d4:14:e6:5a:be:a3:32:
                    79:c2:f0:2d:20:8c:cd:53:67:1f:45:d1:d2:88:8e:
                    be:6b:7d:d9:47:15:10:ac:1a:46:14:97:b3:79:14:
                    a5:8f:91:f7:b1:f2:62:f8:08:9c:a6:9b:2a:89:c2:
                    ea:e4:c2:f4:c4:18:75:1b:e2:cc:34:fb:23:82:fa:
                    43:5a:78:69:a2:a0:e4:86:fc:2e:a3:da:e7:30:e2:
                    53:d8:d9:dc:39:be:ef:57:9b:a9:48:f4:93:62:16:
                    55:cb:e6:9d:b1:cf:3b:ee:4e:1b:b5:ca:13:fb:6e:
                    c5:49:08:bb:f9:29:c4:a4:4d:09:33:79:42:fa:1c:
                    43:ef:3f:c6:85:b4:9c:55:53:cf:6e:9c:79:c9:fa:
                    f7:15:f2:0a:92:54:b8:34:ec:9c:a5:38:a4:95:28:
                    b0:88:46:5a:7a:c2:4a:3f:dd:39:47:ba:39:1b:a9:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2E:64:77:C9:57:47:75:C3:17:E5:ED:03:AB:43:A0:F1:4D:74:D2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/741CE1749CCA11F1B4D42C05CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.160.0/19
                  156.237.0.0-156.237.95.255
                  156.242.192.0/20
                  156.243.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:ff:d5:ae:e8:59:0c:36:b8:fc:8e:06:cf:a6:7e:5a:20:27:
         2e:28:08:4c:b2:b1:b3:fb:cd:a8:f0:80:aa:4c:b5:02:7c:b3:
         4d:79:95:31:23:38:d2:b5:76:69:81:b2:7f:1f:59:ce:b3:3e:
         eb:29:f9:a2:af:9e:ba:a5:24:ef:7f:c4:82:00:25:5e:46:7d:
         aa:4b:70:a3:5e:cf:10:33:e5:70:81:ef:c1:17:2f:b2:7d:8c:
         95:f2:01:45:f1:a1:f5:88:10:6e:d6:f4:8a:12:28:ca:c0:70:
         8f:8d:2c:fd:8d:37:96:38:d3:26:d0:31:b1:f6:34:95:cc:74:
         bf:0c:8c:01:fc:48:bd:f8:34:cc:68:47:35:d6:01:ce:63:0e:
         de:9b:74:e4:ba:02:f0:58:81:f8:d0:e8:c2:f9:dd:1b:30:7a:
         c6:07:c7:aa:90:80:42:55:4d:f6:49:f6:51:82:57:4a:8d:f3:
         d9:54:c7:64:04:43:f8:05:3c:20:f8:d2:68:69:98:b6:ab:3c:
         e7:1a:4e:86:60:d6:d0:74:10:d2:3b:0d:27:ac:56:28:9a:5d:
         e6:08:12:75:60:9a:9b:75:1c:8a:45:14:e3:46:8b:7f:35:46:
         5c:08:b2:08:cb:c8:52:c0:a3:d0:17:7e:96:dc:a2:06:54:c7:
         38:87:88:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----