Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D8CB430962011F1A7C292A2CE1D38B0.roa
File:                     0D8CB430962011F1A7C292A2CE1D38B0.roa (raw, json)
Hash identifier:          v7fRdPVH+Omw3R3k6bW6lT6WgKEYh2UjZReZ3T+y0sE=
Subject key identifier:   4A:E3:74:1A:A8:6E:E0:34:E6:06:24:92:43:4D:A2:42:AD:67:D4:E1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D8CB430962011F1A7C292A2CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 07:33:04 +0000
ROA not before:           Wed 12 Aug 2026 07:33:00 +0000
ROA not after:            Sat 19 Sep 2026 07:33:00 +0000
asID:                     11404
IP address blocks:        45.195.0.0/24 maxlen: 24
                          45.195.84.0/22 maxlen: 24
                          45.196.92.0/22 maxlen: 24
                          45.197.200.0/21 maxlen: 24
                          45.197.224.0/21 maxlen: 24
                          45.200.144.0/20 maxlen: 24
                          45.202.16.0/20 maxlen: 24
                          45.204.32.0/20 maxlen: 24
                          45.205.176.0/20 maxlen: 24
                          45.205.240.0/20 maxlen: 24
                          45.206.128.0/18 maxlen: 24
                          45.206.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117686 (0x1cbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 07:33:00 2026 GMT
            Not After : Sep 19 07:33:00 2026 GMT
        Subject: CN=6a7c21b0-1ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:fa:22:21:20:dc:e2:66:e3:4f:6a:a0:b9:
                    2f:e0:b4:ab:22:59:68:54:2b:c1:eb:f6:c2:98:c1:
                    94:d4:5d:c8:80:02:43:55:9c:ca:31:f1:a4:ec:ff:
                    4c:cc:8b:06:5d:93:81:b4:c4:9e:5a:29:85:f8:dd:
                    74:b8:39:1f:6a:15:8c:90:04:37:d8:8b:33:2f:eb:
                    64:2b:94:1b:a6:b0:d2:2e:ba:28:31:43:6c:ab:d3:
                    69:14:7f:c9:6c:b3:75:61:79:2d:c0:55:fb:8e:49:
                    6b:66:55:2f:d9:90:1f:8d:d5:f5:2b:a0:0e:52:57:
                    65:cd:c1:79:e4:af:38:34:aa:1e:30:7a:32:e5:3c:
                    dd:1c:aa:dc:17:98:2e:a0:ed:87:76:9c:45:7d:e0:
                    cd:21:f0:ac:4b:45:05:25:85:ff:fe:fd:79:d5:b9:
                    22:07:a4:70:3e:19:05:5c:60:bc:3f:0e:89:52:9f:
                    a4:ed:f1:b3:1d:a8:da:dc:e5:25:0d:2c:60:ff:19:
                    0b:fa:9c:4a:fe:1b:e5:cf:bd:9a:aa:5e:ea:71:d3:
                    0e:a9:65:09:6d:f3:c6:42:9a:38:9e:9d:f3:40:b0:
                    03:b9:09:79:4a:53:9a:92:b9:51:d5:61:b4:73:40:
                    4e:1f:1a:bf:77:b5:3a:b4:aa:22:03:ce:55:db:d1:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E3:74:1A:A8:6E:E0:34:E6:06:24:92:43:4D:A2:42:AD:67:D4:E1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D8CB430962011F1A7C292A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.0.0/24
                  45.195.84.0/22
                  45.196.92.0/22
                  45.197.200.0/21
                  45.197.224.0/21
                  45.200.144.0/20
                  45.202.16.0/20
                  45.204.32.0/20
                  45.205.176.0/20
                  45.205.240.0/20
                  45.206.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         30:76:a4:96:78:8d:e0:cb:70:2d:68:88:d9:2c:db:e7:30:80:
         0a:b4:77:89:78:25:d4:c0:f8:8e:8b:90:e7:3d:1f:06:87:8d:
         81:9b:a5:89:b5:84:31:2a:b6:cf:a3:4c:4e:45:3f:1f:13:d0:
         69:e5:93:9c:77:be:33:b2:1e:ab:31:61:b6:df:ac:01:69:2a:
         99:c1:31:b8:e6:bf:d6:29:13:b1:e7:ac:d8:b1:55:4c:15:1a:
         11:df:cc:11:de:4a:ea:b6:b5:b3:9f:29:b0:95:ff:97:e0:45:
         a7:ab:a3:f7:90:93:7e:df:fb:3f:28:de:5d:7c:06:2d:eb:b8:
         26:a2:54:58:fe:fb:03:0b:77:8c:3a:6e:86:f8:4e:e3:4f:fd:
         85:ef:68:75:14:5d:58:65:e3:0c:fc:f0:a4:b7:38:91:2a:78:
         b7:8f:91:fd:c5:6b:aa:31:f3:2c:a5:5d:bc:40:52:85:59:d9:
         18:8f:e6:40:4f:f4:ba:21:7f:18:a4:b1:4d:16:dc:03:d6:97:
         f2:e1:a3:a0:d5:f4:dd:0b:64:2f:25:b3:bf:34:2f:83:b8:33:
         5e:65:6b:1f:d1:4d:f7:17:ed:79:50:0d:64:55:e9:39:df:48:
         cf:0f:bd:72:cf:05:1e:8e:2a:23:c3:80:d7:07:b6:98:4a:7c:
         59:47:d6:58
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIDAcu2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEyMDczMzAwWhcNMjYwOTE5MDczMzAwWjAYMRYw
FAYDVQQDEw02YTdjMjFiMC0xYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzQn6IiEg3OJm409qoLkv4LSrIlloVCvB6/bCmMGU1F3IgAJDVZzKMfGk
7P9MzIsGXZOBtMSeWimF+N10uDkfahWMkAQ32IszL+tkK5QbprDSLrooMUNsq9Np
FH/JbLN1YXktwFX7jklrZlUv2ZAfjdX1K6AOUldlzcF55K84NKoeMHoy5TzdHKrc
F5guoO2HdpxFfeDNIfCsS0UFJYX//v151bkiB6RwPhkFXGC8Pw6JUp+k7fGzHaja
3OUlDSxg/xkL+pxK/hvlz72aql7qcdMOqWUJbfPGQpo4np3zQLADuQl5SlOakrlR
1WG0c0BOHxq/d7U6tKoiA85V29HUAQIDAQABo4IC3jCCAtowHQYDVR0OBBYEFErj
dBqobuA05gYkkkNNokKtZ9ThMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRDhDQjQzMDk2MjAxMUYxQTdDMjkyQTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALcMAAwQCLcNUAwQCLcRcAwQD
LcXIAwQDLcXgAwQELciQAwQELcoQAwQELcwgAwQELc2wAwQELc3wAwQHLc6AMA0G
CSqGSIb3DQEBCwUAA4IBAQAwdqSWeI3gy3AtaIjZLNvnMIAKtHeJeCXUwPiOi5Dn
PR8Gh42Bm6WJtYQxKrbPo0xORT8fE9Bp5ZOcd74zsh6rMWG236wBaSqZwTG45r/W
KROx56zYsVVMFRoR38wR3krqtrWznymwlf+X4EWnq6P3kJN+3/s/KN5dfAYt67gm
olRY/vsDC3eMOm6G+E7jT/2F72h1FF1YZeMM/PCktziRKni3j5H9xWuqMfMspV28
QFKFWdkYj+ZAT/S6IX8YpLFNFtwD1pfy4aOg1fTdC2QvJbO/NC+DuDNeZWsf0U33
F+15UA1kVek530jPD71yzwUejiojw4DXB7aYSnxZR9ZY
-----END CERTIFICATE-----