Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00350960A6B811F19937DBF2CE1D38B0.roa
File:                     00350960A6B811F19937DBF2CE1D38B0.roa (raw, json)
Hash identifier:          ZaxfC66EwynuLiG2V2EGIEPSxibTp3ld1vlD0+/E1dQ=
Subject key identifier:   B9:F9:E5:0B:72:99:03:59:50:89:B6:6C:24:91:F1:00:62:F8:B2:F8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D27C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00350960A6B811F19937DBF2CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 10:21:04 +0000
ROA not before:           Wed 02 Sep 2026 10:21:00 +0000
ROA not after:            Fri 09 Oct 2026 10:21:00 +0000
asID:                     401362
IP address blocks:        45.203.131.0/24 maxlen: 24
                          45.203.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119420 (0x1d27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 10:21:00 2026 GMT
            Not After : Oct  9 10:21:00 2026 GMT
        Subject: CN=6a97f88f-7a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:c0:86:d3:18:71:d9:a3:d8:6e:53:5a:c0:
                    d9:47:da:5a:53:db:20:f5:a4:e0:10:05:0d:02:55:
                    67:28:58:50:f4:37:28:c6:d0:43:8e:be:5b:c5:53:
                    0d:8c:69:38:6a:b3:cb:63:ee:30:c8:06:64:d0:03:
                    e0:4c:b3:39:60:27:44:5a:33:d2:76:ab:34:62:dc:
                    d7:d6:a7:9f:dc:f1:fc:0f:64:55:b5:0c:40:f0:4b:
                    d8:bf:38:9a:a4:73:4f:76:90:51:5e:40:15:88:ff:
                    a0:6e:ea:96:09:82:20:6b:a6:d1:c6:9a:4c:e0:dd:
                    1f:90:02:f8:55:d2:fb:3c:28:cb:1e:6d:93:65:9f:
                    2e:51:bf:09:1c:2c:8f:91:12:a2:b3:d0:e7:ab:2c:
                    45:d1:7a:76:fb:75:f6:2c:9e:a8:db:df:d1:85:78:
                    24:0c:11:9d:29:e3:fa:02:77:50:0c:de:7a:35:16:
                    b5:d8:7e:ef:63:e9:fc:05:ba:8a:df:65:8b:90:df:
                    02:9b:44:00:49:7c:e1:bc:e1:9e:a2:bd:71:7c:e3:
                    8b:05:ea:a1:06:50:b3:b1:01:a6:fb:a8:3b:48:78:
                    d5:ab:c5:64:9e:43:b7:67:c2:98:f8:70:0d:d9:b3:
                    14:c9:a1:b1:eb:26:5b:34:f1:54:d3:9f:b3:07:fa:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:E5:0B:72:99:03:59:50:89:B6:6C:24:91:F1:00:62:F8:B2:F8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00350960A6B811F19937DBF2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.131.0/24
                  45.203.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f1:12:02:04:a8:e2:cb:6c:cc:40:aa:ea:46:80:ee:2c:8e:
         c8:b5:3b:77:d7:3c:07:19:fd:de:c7:bd:fb:95:c7:91:73:a6:
         c5:94:d0:d2:87:65:1d:ee:53:f5:57:cf:5b:6e:ab:6e:eb:67:
         5a:2e:04:80:57:90:da:b7:14:8b:36:cc:83:ef:40:d6:66:7c:
         89:56:bb:38:47:1c:3a:c3:d6:d3:06:1e:cb:f6:10:57:3f:bf:
         a1:37:16:a3:db:bc:8a:4b:9e:b6:e6:1e:99:72:f4:bb:05:5b:
         2c:89:50:52:77:3f:11:79:d8:9d:ef:1c:03:fd:9c:02:d3:c9:
         54:7e:06:07:fb:a3:c0:ef:59:50:15:3d:26:80:42:4d:e0:b1:
         f2:19:c6:36:23:09:3a:d1:e6:db:a8:ad:7c:74:e1:a1:36:d3:
         4b:02:86:9c:a8:6f:97:3b:21:9c:1c:fe:5c:d8:17:b7:3f:d1:
         e8:0f:10:b9:32:d7:ca:c5:a1:40:46:e0:be:ef:c4:ac:9f:f3:
         39:80:da:c4:8d:88:74:e3:bc:7f:1d:76:69:b7:cb:f8:dd:dd:
         f3:1b:5c:a4:48:84:98:2a:68:70:a0:72:42:73:75:02:b5:b2:
         6d:e2:c4:5a:6d:d4:9a:f6:c6:9c:bf:2e:c2:f7:cf:23:1f:82:
         c7:a8:f5:da
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdJ8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTAyMTAyMTAwWhcNMjYxMDA5MTAyMTAwWjAYMRYw
FAYDVQQDEw02YTk3Zjg4Zi03YTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA13rAhtMYcdmj2G5TWsDZR9paU9sg9aTgEAUNAlVnKFhQ9DcoxtBDjr5b
xVMNjGk4arPLY+4wyAZk0APgTLM5YCdEWjPSdqs0YtzX1qef3PH8D2RVtQxA8EvY
vziapHNPdpBRXkAViP+gbuqWCYIga6bRxppM4N0fkAL4VdL7PCjLHm2TZZ8uUb8J
HCyPkRKis9DnqyxF0Xp2+3X2LJ6o29/RhXgkDBGdKeP6AndQDN56NRa12H7vY+n8
BbqK32WLkN8Cm0QASXzhvOGeor1xfOOLBeqhBlCzsQGm+6g7SHjVq8VknkO3Z8KY
+HAN2bMUyaGx6yZbNPFU05+zB/ogswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn5
5QtymQNZUIm2bCSR8QBi+LL4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMDM1MDk2MEE2QjgxMUYxOTkzN0RCRjJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcuDAwQALcuIMA0GCSqGSIb3
DQEBCwUAA4IBAQAa8RICBKjiy2zMQKrqRoDuLI7ItTt31zwHGf3ex737lceRc6bF
lNDSh2Ud7lP1V89bbqtu62daLgSAV5DatxSLNsyD70DWZnyJVrs4Rxw6w9bTBh7L
9hBXP7+hNxaj27yKS5625h6ZcvS7BVssiVBSdz8Redid7xwD/ZwC08lUfgYH+6PA
71lQFT0mgEJN4LHyGcY2Iwk60ebbqK18dOGhNtNLAoacqG+XOyGcHP5c2Be3P9Ho
DxC5MtfKxaFARuC+78Ssn/M5gNrEjYh047x/HXZpt8v43d3zG1ykSISYKmhwoHJC
c3UCtbJt4sRabdSa9sacvy7C988jH4LHqPXa
-----END CERTIFICATE-----