Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11D6E8EA9CE111F1B5B94D0BCF1D38B0.roa
File:                     11D6E8EA9CE111F1B5B94D0BCF1D38B0.roa (raw, json)
Hash identifier:          VZo8ypDst4x3gU10AHyd0KTQMTRPNHCprhkqZTCjOYk=
Subject key identifier:   F5:56:96:A7:CB:02:A8:8D:0B:AD:5C:E4:5D:34:7A:65:8E:9B:EC:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11D6E8EA9CE111F1B5B94D0BCF1D38B0.roa
Signing time:             Thu 20 Aug 2026 21:49:51 +0000
ROA not before:           Thu 20 Aug 2026 21:49:46 +0000
ROA not after:            Sat 10 Oct 2026 21:49:46 +0000
asID:                     395793
IP address blocks:        45.192.228.0/24 maxlen: 24
                          45.192.229.0/24 maxlen: 24
                          45.192.230.0/24 maxlen: 24
                          45.192.231.0/24 maxlen: 24
                          45.192.232.0/22 maxlen: 24
                          45.192.236.0/22 maxlen: 24
                          45.192.239.0/24 maxlen: 24
                          45.192.244.0/24 maxlen: 24
                          45.197.6.0/23 maxlen: 24
                          45.198.183.0/24 maxlen: 24
                          45.201.21.0/24 maxlen: 24
                          45.201.22.0/24 maxlen: 24
                          45.201.23.0/24 maxlen: 24
                          45.201.24.0/23 maxlen: 24
                          45.201.24.0/24 maxlen: 24
                          45.201.25.0/24 maxlen: 24
                          45.201.26.0/24 maxlen: 24
                          45.201.31.0/24 maxlen: 24
                          45.206.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118540 (0x1cf0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 21:49:46 2026 GMT
            Not After : Oct 10 21:49:46 2026 GMT
        Subject: CN=6a87767f-3bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:85:fb:83:3f:60:0f:02:a2:01:7f:43:47:
                    98:67:c4:a5:b4:c7:94:97:06:3d:27:c7:f5:79:ca:
                    9d:17:a3:b5:21:69:32:0e:0a:4a:ef:ce:24:b6:ed:
                    d7:c2:5d:d6:21:9b:d7:bf:85:92:97:4a:a0:21:e1:
                    6d:74:79:b0:90:a7:7e:7e:76:b9:bb:a7:7f:c2:01:
                    20:2a:36:26:13:9a:f8:35:a6:79:ce:12:45:25:35:
                    3c:66:5e:8b:43:7c:31:39:f6:8e:74:86:9e:29:ee:
                    a7:a9:70:88:ed:08:66:52:67:c6:29:30:2c:d2:bc:
                    10:df:e1:77:ea:ea:46:d9:67:68:c6:af:85:f3:74:
                    b1:87:44:fb:93:75:f2:1b:8b:63:a0:2d:4e:d1:b9:
                    59:28:8c:55:4b:60:96:57:8f:60:1b:a0:01:c1:67:
                    0a:1a:79:5e:8d:8d:25:66:e2:bf:8d:4e:65:3e:bd:
                    b9:a4:37:6f:51:0e:66:25:86:8b:cb:d4:53:20:27:
                    c9:af:18:7f:ce:16:e7:0c:a2:5c:be:ee:2e:6b:29:
                    83:b6:75:ed:c7:e7:ef:c9:57:81:e1:49:7f:ab:df:
                    9b:39:89:0c:4f:15:8d:c6:7e:b6:4f:a6:b1:33:50:
                    72:1e:d4:c9:52:71:d9:77:40:f1:16:56:86:16:55:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:56:96:A7:CB:02:A8:8D:0B:AD:5C:E4:5D:34:7A:65:8E:9B:EC:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11D6E8EA9CE111F1B5B94D0BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.228.0-45.192.239.255
                  45.192.244.0/24
                  45.197.6.0/23
                  45.198.183.0/24
                  45.201.21.0-45.201.26.255
                  45.201.31.0/24
                  45.206.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:85:5e:68:2a:64:01:b8:bd:59:c7:ef:81:cb:99:73:48:b2:
         3b:4b:f5:9b:68:97:76:35:cb:6d:7e:ff:a6:c2:8a:22:24:d8:
         98:e3:af:60:7c:34:0d:a6:09:34:6d:21:ef:14:87:2f:70:e9:
         a3:47:f4:a5:2f:ca:ab:17:eb:fd:59:26:83:56:c8:3a:a4:df:
         20:b9:4d:f4:3f:4f:fc:63:c8:97:dd:e5:1f:ef:ac:0e:c2:70:
         28:a3:f4:5b:d4:9e:d2:d5:5f:5a:79:f4:91:52:d2:e3:1c:8a:
         6f:7a:22:bc:e3:fe:e2:fe:ae:73:d7:e2:dd:43:8b:03:90:6e:
         c1:11:ed:4a:1b:42:b2:d8:e1:58:70:76:10:79:e0:95:26:e2:
         0d:56:9b:7c:09:42:52:90:c1:90:a2:59:da:3f:72:27:c2:da:
         5a:59:98:76:74:4f:11:75:db:00:a2:38:d2:45:b5:7c:b1:d1:
         96:1e:4b:69:6d:c4:74:8f:5d:87:14:61:9d:2a:27:ab:d8:1f:
         48:94:5d:6e:a6:28:23:8f:e0:20:88:37:0c:23:b4:81:1e:57:
         6d:b5:cb:2d:c6:1f:5a:ba:a5:4e:56:de:1b:59:a8:a4:18:d7:
         5d:ca:7b:96:7d:a3:8f:4c:cc:53:86:69:30:dc:3a:ea:4f:82:
         d4:bc:45:e7
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIDAc8MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODIwMjE0OTQ2WhcNMjYxMDEwMjE0OTQ2WjAYMRYw
FAYDVQQDEw02YTg3NzY3Zi0zYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmdyF+4M/YA8CogF/Q0eYZ8SltMeUlwY9J8f1ecqdF6O1IWkyDgpK784k
tu3Xwl3WIZvXv4WSl0qgIeFtdHmwkKd+fna5u6d/wgEgKjYmE5r4NaZ5zhJFJTU8
Zl6LQ3wxOfaOdIaeKe6nqXCI7QhmUmfGKTAs0rwQ3+F36upG2Wdoxq+F83Sxh0T7
k3XyG4tjoC1O0blZKIxVS2CWV49gG6ABwWcKGnlejY0lZuK/jU5lPr25pDdvUQ5m
JYaLy9RTICfJrxh/zhbnDKJcvu4uaymDtnXtx+fvyVeB4Ul/q9+bOYkMTxWNxn62
T6axM1ByHtTJUnHZd0DxFlaGFlUdGwIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFPVW
lqfLAqiNC61c5F00emWOm+zmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMUQ2RThFQTlDRTExMUYxQjVCOTREMEJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAItwOQDBAQtwOADBAAtwPQD
BAEtxQYDBAAtxrcwDAMEAC3JFQMEAC3JGgMEAC3JHwMEAC3OQjANBgkqhkiG9w0B
AQsFAAOCAQEAU4VeaCpkAbi9WcfvgcuZc0iyO0v1m2iXdjXLbX7/psKKIiTYmOOv
YHw0DaYJNG0h7xSHL3Dpo0f0pS/Kqxfr/Vkmg1bIOqTfILlN9D9P/GPIl93lH++s
DsJwKKP0W9Se0tVfWnn0kVLS4xyKb3oivOP+4v6uc9fi3UOLA5BuwRHtShtCstjh
WHB2EHnglSbiDVabfAlCUpDBkKJZ2j9yJ8LaWlmYdnRPEXXbAKI40kW1fLHRlh5L
aW3EdI9dhxRhnSonq9gfSJRdbqYoI4/gIIg3DCO0gR5XbbXLLcYfWrqlTlbeG1mo
pBjXXcp7ln2jj0zMU4ZpMNw66k+C1LxF5w==
-----END CERTIFICATE-----