Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/130BD47E9D3511F18FF1B71BCF1D38B0.roa
File:                     130BD47E9D3511F18FF1B71BCF1D38B0.roa (raw, json)
Hash identifier:          +qKLxtpeVt13zW7Pqnyw1p/deKWE2f0MODu6GFiaJg4=
Subject key identifier:   5A:26:CB:18:7E:44:F9:53:E7:05:E7:27:8B:C9:59:AD:3C:95:E0:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/130BD47E9D3511F18FF1B71BCF1D38B0.roa
Signing time:             Fri 21 Aug 2026 07:51:11 +0000
ROA not before:           Fri 21 Aug 2026 07:51:07 +0000
ROA not after:            Tue 01 Dec 2026 07:51:07 +0000
asID:                     55720
IP address blocks:        45.207.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118637 (0x1cf6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 07:51:07 2026 GMT
            Not After : Dec  1 07:51:07 2026 GMT
        Subject: CN=6a88036f-438c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c0:ca:ab:32:ec:33:16:d3:76:fe:33:f3:8a:
                    47:c1:7d:1f:0f:88:67:87:5d:ec:3b:5b:cd:0c:7e:
                    d4:c5:c8:af:96:f6:49:c5:d9:6e:c4:c4:7b:a4:54:
                    d7:36:2f:cc:f3:52:57:bc:c7:8f:55:7b:f3:8e:32:
                    73:7e:f5:a6:43:20:2b:c9:2b:a2:3a:bd:9c:6b:86:
                    68:32:7b:c1:fc:1f:da:7a:a0:19:e3:8f:12:36:54:
                    40:c6:34:4a:df:76:57:53:e6:40:4f:62:92:a6:52:
                    d8:9a:29:c3:11:6f:97:d4:a3:5e:e2:1f:ff:fc:cd:
                    8e:f3:2a:25:57:2a:ab:54:64:66:f4:41:12:b1:ab:
                    53:b7:84:93:28:66:1e:cd:7d:f6:d9:a1:76:3e:a2:
                    31:cd:cf:ff:8b:92:73:a7:77:c7:ff:16:a7:ef:5d:
                    8b:89:58:b9:af:91:df:dc:d6:21:5c:18:09:9c:15:
                    60:a5:e5:94:80:5e:01:64:19:ec:9d:84:aa:7f:e0:
                    59:70:bd:f5:ef:46:07:18:a1:63:a7:66:4a:cb:72:
                    47:ef:17:9d:ee:03:a5:60:9b:05:83:12:f7:80:3b:
                    e7:6c:10:01:36:d8:bf:aa:38:e5:8b:a2:ea:5c:e1:
                    55:0e:bb:37:54:46:70:e1:32:a1:08:38:21:f3:f8:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:26:CB:18:7E:44:F9:53:E7:05:E7:27:8B:C9:59:AD:3C:95:E0:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/130BD47E9D3511F18FF1B71BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:21:52:f5:90:9e:7f:8c:a2:2b:04:49:cc:c0:1f:12:5e:ee:
         80:69:3f:9e:4b:ed:e1:9d:0b:a6:ae:73:f1:1d:fb:88:21:36:
         32:82:a1:f9:3a:49:2a:15:01:c9:6a:38:90:7e:b4:06:9e:63:
         b1:e8:b9:67:a0:9a:89:81:49:92:5b:55:0a:2e:d5:6d:e9:96:
         66:41:74:58:5b:a1:07:7c:c6:61:56:46:5f:c3:a1:a3:dc:7f:
         24:a9:df:21:14:d3:c9:c8:70:3b:17:7f:0c:c8:38:cf:38:29:
         5f:5e:f6:e5:1d:78:ed:31:2f:0f:55:64:f8:9e:bf:c2:39:24:
         20:0c:c8:75:f4:9c:06:66:4c:ef:99:6d:7c:41:51:5e:e3:6b:
         36:c8:5f:9f:5a:45:56:b0:3c:1c:4f:d6:09:8e:b3:22:3b:96:
         9d:8b:27:4c:e6:09:e5:eb:73:c0:d3:99:43:91:d5:5a:05:cb:
         67:8a:57:6f:86:13:4b:9e:bf:65:3c:06:cb:aa:a2:6d:05:d6:
         85:16:2d:8a:38:8b:bf:61:1e:80:2a:69:b9:ae:2e:f4:85:8c:
         4e:62:a4:52:53:15:8e:d8:47:a0:e6:65:eb:77:97:a1:2f:3f:
         22:85:56:cc:00:4d:12:ce:47:69:fe:e3:09:3e:3b:e1:2a:a3:
         b4:bd:c2:2b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAc9tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODIxMDc1MTA3WhcNMjYxMjAxMDc1MTA3WjAYMRYw
FAYDVQQDEw02YTg4MDM2Zi00MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5sDKqzLsMxbTdv4z84pHwX0fD4hnh13sO1vNDH7UxcivlvZJxdluxMR7
pFTXNi/M81JXvMePVXvzjjJzfvWmQyArySuiOr2ca4ZoMnvB/B/aeqAZ448SNlRA
xjRK33ZXU+ZAT2KSplLYminDEW+X1KNe4h///M2O8yolVyqrVGRm9EESsatTt4ST
KGYezX322aF2PqIxzc//i5Jzp3fH/xan712LiVi5r5Hf3NYhXBgJnBVgpeWUgF4B
ZBnsnYSqf+BZcL3170YHGKFjp2ZKy3JH7xed7gOlYJsFgxL3gDvnbBABNti/qjjl
i6LqXOFVDrs3VEZw4TKhCDgh8/iH3wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFom
yxh+RPlT5wXnJ4vJWa08leCAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzBCRDQ3RTlEMzUxMUYxOEZGMUI3MUJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8gMA0GCSqGSIb3DQEBCwUA
A4IBAQBEIVL1kJ5/jKIrBEnMwB8SXu6AaT+eS+3hnQumrnPxHfuIITYygqH5Okkq
FQHJajiQfrQGnmOx6LlnoJqJgUmSW1UKLtVt6ZZmQXRYW6EHfMZhVkZfw6Gj3H8k
qd8hFNPJyHA7F38MyDjPOClfXvblHXjtMS8PVWT4nr/COSQgDMh19JwGZkzvmW18
QVFe42s2yF+fWkVWsDwcT9YJjrMiO5adiydM5gnl63PA05lDkdVaBctnildvhhNL
nr9lPAbLqqJtBdaFFi2KOIu/YR6AKmm5ri70hYxOYqRSUxWO2Eeg5mXrd5ehLz8i
hVbMAE0Szkdp/uMJPjvhKqO0vcIr
-----END CERTIFICATE-----