Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/133F639A966711F18C250DCFCE1D38B0.roa
File:                     133F639A966711F18C250DCFCE1D38B0.roa (raw, json)
Hash identifier:          uS0lLwcsXwqF5TdglDvA3KPihZz0FKKxcR6m0r4yeks=
Subject key identifier:   A8:CA:3F:DF:32:D5:B8:51:58:3C:CA:F3:54:41:28:7C:4A:13:0C:18
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/133F639A966711F18C250DCFCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 16:01:28 +0000
ROA not before:           Wed 12 Aug 2026 16:01:23 +0000
ROA not after:            Sun 12 Aug 2029 16:01:23 +0000
asID:                     17561
IP address blocks:        45.194.147.0/24 maxlen: 24
                          45.194.148.0/24 maxlen: 24
                          45.194.149.0/24 maxlen: 24
                          45.194.150.0/24 maxlen: 24
                          45.194.151.0/24 maxlen: 24
                          45.194.152.0/24 maxlen: 24
                          45.194.153.0/24 maxlen: 24
                          45.194.154.0/24 maxlen: 24
                          45.194.155.0/24 maxlen: 24
                          45.194.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117808 (0x1cc30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 16:01:23 2026 GMT
            Not After : Aug 12 16:01:23 2029 GMT
        Subject: CN=6a7c98d8-4977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:97:0e:e5:9f:47:d1:fb:a6:5c:e2:38:a0:5f:
                    4f:97:09:aa:60:bc:37:59:5b:d7:16:b0:45:e9:36:
                    04:b6:fd:5e:09:99:5c:04:03:06:44:96:ca:5b:0d:
                    2e:32:cf:cc:5d:5d:e3:25:fd:56:72:7e:67:e3:44:
                    52:e2:aa:f8:05:a5:ab:18:75:34:a7:f7:00:df:31:
                    bf:d1:10:6a:67:7a:bc:e4:46:e3:23:e4:c1:47:c0:
                    89:35:c3:b6:fa:58:d8:b3:98:9e:13:94:f9:56:77:
                    f4:a0:64:10:cd:cf:c4:6f:fc:3c:ab:ad:a8:c3:20:
                    24:ee:0f:43:50:50:0f:7b:bb:6b:6d:ad:1a:59:5e:
                    b7:48:dd:54:14:71:18:39:60:92:bf:98:4d:fe:d9:
                    04:af:85:53:f2:e4:c5:61:0e:34:2a:b2:aa:6c:d2:
                    26:8e:d9:29:53:32:c6:4a:9a:9a:b2:c6:76:7e:b4:
                    c8:4e:bc:ba:8a:fe:9f:c2:a6:b9:50:8d:4b:dd:fd:
                    77:e7:a7:e2:7e:61:fe:52:ac:e5:ec:7c:e4:f0:7e:
                    75:a0:83:00:6d:c1:0d:18:f2:f8:35:ca:6a:6e:dc:
                    b4:d2:3a:9d:2a:e9:1d:fd:99:df:09:88:be:f8:67:
                    df:43:4d:2a:ee:72:5f:42:40:3d:14:37:d3:b2:f1:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CA:3F:DF:32:D5:B8:51:58:3C:CA:F3:54:41:28:7C:4A:13:0C:18
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/133F639A966711F18C250DCFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.147.0-45.194.156.255

    Signature Algorithm: sha256WithRSAEncryption
         15:dd:91:c0:8d:24:84:50:b8:14:77:a3:38:27:7f:82:d4:7f:
         da:ad:c7:49:20:f4:55:8b:25:30:3b:e2:46:ae:20:95:37:f2:
         68:ec:82:2f:f3:0a:92:f4:ab:a6:7e:1f:05:2a:4b:5d:dc:7c:
         ee:41:a6:93:ad:da:7b:5b:16:1a:10:35:b4:3e:2e:1c:bd:0f:
         7d:5e:5d:57:2a:29:36:56:16:b3:48:62:9b:0e:1a:41:dd:21:
         c1:53:35:f9:1e:ee:b9:ba:90:43:04:d0:f2:91:fd:b0:c0:58:
         01:f2:c3:40:bc:7c:12:88:61:aa:f1:6f:47:4f:c1:f1:6c:48:
         9a:8a:bb:b7:d7:4c:eb:c5:00:2e:be:bd:95:48:59:b1:25:df:
         f4:3c:46:20:54:ed:a4:96:c7:59:bd:d8:ad:fc:3b:7e:3b:e5:
         d0:b4:88:53:76:a4:bf:33:a7:12:fc:e8:73:42:e6:16:87:b3:
         e1:06:dd:8d:83:a9:9f:86:ee:41:7b:e8:61:9a:8f:7a:d9:3c:
         2d:9b:9b:73:ea:19:44:fa:b1:65:f0:0c:73:c6:ea:0d:36:d0:
         7d:72:0e:9d:19:0b:25:34:a3:c0:2b:76:f3:d3:3e:6e:6e:c5:
         62:9d:6a:dd:86:ad:fb:ce:02:9e:29:12:af:ac:50:c6:2e:8f:
         c7:8c:e7:77
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcwwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEyMTYwMTIzWhcNMjkwODEyMTYwMTIzWjAYMRYw
FAYDVQQDEw02YTdjOThkOC00OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+ZcO5Z9H0fumXOI4oF9PlwmqYLw3WVvXFrBF6TYEtv1eCZlcBAMGRJbK
Ww0uMs/MXV3jJf1Wcn5n40RS4qr4BaWrGHU0p/cA3zG/0RBqZ3q85EbjI+TBR8CJ
NcO2+ljYs5ieE5T5Vnf0oGQQzc/Eb/w8q62owyAk7g9DUFAPe7trba0aWV63SN1U
FHEYOWCSv5hN/tkEr4VT8uTFYQ40KrKqbNImjtkpUzLGSpqassZ2frTITry6iv6f
wqa5UI1L3f1356fifmH+Uqzl7Hzk8H51oIMAbcENGPL4Ncpqbty00jqdKukd/Znf
CYi++GffQ00q7nJfQkA9FDfTsvHnYQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFKjK
P98y1bhRWDzK81RBKHxKEwwYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzNGNjM5QTk2NjcxMUYxOEMyNTBEQ0ZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtwpMDBAAtwpwwDQYJKoZI
hvcNAQELBQADggEBABXdkcCNJIRQuBR3ozgnf4LUf9qtx0kg9FWLJTA74kauIJU3
8mjsgi/zCpL0q6Z+HwUqS13cfO5BppOt2ntbFhoQNbQ+Lhy9D31eXVcqKTZWFrNI
YpsOGkHdIcFTNfke7rm6kEME0PKR/bDAWAHyw0C8fBKIYarxb0dPwfFsSJqKu7fX
TOvFAC6+vZVIWbEl3/Q8RiBU7aSWx1m92K38O3475dC0iFN2pL8zpxL86HNC5haH
s+EG3Y2DqZ+G7kF76GGaj3rZPC2bm3PqGUT6sWXwDHPG6g020H1yDp0ZCyU0o8Ar
dvPTPm5uxWKdat2GrfvOAp4pEq+sUMYuj8eM53c=
-----END CERTIFICATE-----