Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E68F0BAB97511F1A4EA4BF6CE1D38B0.roa
File:                     2E68F0BAB97511F1A4EA4BF6CE1D38B0.roa (raw, json)
Hash identifier:          Q63GaSPHLylWij6az35Vt+QgAx3OZUeoox6ZW2XFVZI=
Subject key identifier:   59:BA:E0:6B:8D:DB:7C:88:DB:D1:4C:7D:53:5A:26:A8:5F:AF:65:E4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E68F0BAB97511F1A4EA4BF6CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 06:40:37 +0000
ROA not before:           Sat 26 Sep 2026 06:40:33 +0000
ROA not after:            Sun 18 Oct 2026 06:40:33 +0000
asID:                     139613
IP address blocks:        45.199.191.0/24 maxlen: 24
                          45.202.8.0/24 maxlen: 24
                          45.202.9.0/24 maxlen: 24
                          45.202.10.0/24 maxlen: 24
                          45.202.11.0/24 maxlen: 24
                          45.202.63.0/24 maxlen: 24
                          45.204.1.0/24 maxlen: 24
                          45.204.64.0/24 maxlen: 24
                          45.204.71.0/24 maxlen: 24
                          45.207.163.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121024 (0x1d8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 06:40:33 2026 GMT
            Not After : Oct 18 06:40:33 2026 GMT
        Subject: CN=6ab768e5-de99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:e0:83:dd:5f:2d:39:d5:b1:00:f5:d1:1a:
                    d1:c7:87:bd:e8:07:ca:18:f0:ba:be:69:7a:70:ef:
                    e3:d3:ec:68:6d:30:6f:ea:21:fa:4d:42:eb:8e:08:
                    29:55:d3:ce:23:95:5b:e7:3a:67:b1:9e:1c:89:a1:
                    99:6a:9e:b6:dd:f8:e7:3a:e4:46:4b:62:3f:59:26:
                    50:57:2f:73:5d:ad:8a:72:ac:47:fe:73:f4:73:5a:
                    5d:10:b5:40:f7:aa:e4:d6:58:c0:76:bb:d3:b1:ff:
                    e4:d8:be:88:a1:90:6f:81:ff:86:e5:e1:66:89:b5:
                    01:7d:da:85:7b:0e:d5:17:e7:24:4d:0c:3e:a5:db:
                    bf:58:83:1a:8b:6f:c9:5f:40:dd:11:67:37:aa:62:
                    20:91:ba:80:b6:d0:0e:90:c7:20:ab:9b:34:e3:1b:
                    3d:e9:14:90:87:98:fb:5e:62:b9:65:64:24:6c:57:
                    ff:70:7d:9b:e4:e1:2b:79:36:02:03:5c:86:72:a3:
                    4b:59:0c:56:78:d9:69:8a:7a:4d:5d:7c:2e:ff:2b:
                    c3:29:36:e6:05:3d:27:29:dc:ad:7d:01:8d:8d:d7:
                    90:1c:e6:a9:c6:5d:33:22:48:08:46:d2:40:cc:56:
                    bb:1e:fe:ba:ba:17:22:98:48:4f:1a:d7:43:83:9f:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:E0:6B:8D:DB:7C:88:DB:D1:4C:7D:53:5A:26:A8:5F:AF:65:E4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E68F0BAB97511F1A4EA4BF6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.191.0/24
                  45.202.8.0/22
                  45.202.63.0/24
                  45.204.1.0/24
                  45.204.64.0/24
                  45.204.71.0/24
                  45.207.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:e2:fc:7e:86:4f:24:ad:d3:ac:51:b8:d5:71:33:f3:20:c5:
         b4:5d:14:20:4e:cf:d4:78:66:98:0f:40:56:17:be:dc:4f:f2:
         d3:6d:b1:a2:8e:e5:27:26:23:de:fc:e4:be:95:62:cf:9f:5c:
         bf:87:ce:5a:12:f7:17:5e:ca:61:50:f6:76:d2:07:89:f0:ad:
         b7:6c:fd:97:22:16:11:2d:75:2b:71:ab:60:73:ab:a5:7a:18:
         31:5b:79:32:3d:0c:dd:4f:28:3a:d0:99:05:f9:97:8d:0a:58:
         6c:fb:d4:95:f7:3c:0a:83:0c:22:39:6d:17:bd:bc:29:57:9b:
         87:83:a4:96:09:7d:39:8e:32:13:e2:15:c5:16:67:3a:33:93:
         fc:69:38:64:c1:5b:ad:7c:6d:1b:91:1a:2e:cd:8c:67:62:c2:
         2d:84:88:76:d8:6a:a3:46:e6:05:a9:8b:6f:d2:17:3a:59:85:
         e1:c1:5b:1e:96:90:f7:91:4c:70:ba:9a:ec:64:fe:4e:68:02:
         08:a2:5e:61:d4:57:49:29:64:09:20:63:e4:be:76:5d:b6:c5:
         c3:a2:26:7b:5f:9d:13:db:03:0a:dd:e9:14:f5:2a:db:c4:1f:
         96:1a:b8:57:80:48:70:33:db:98:1a:68:61:61:ee:04:85:d2:
         91:32:9a:19
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIDAdjAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI2MDY0MDMzWhcNMjYxMDE4MDY0MDMzWjAYMRYw
FAYDVQQDEw02YWI3NjhlNS1kZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwKvgg91fLTnVsQD10RrRx4e96AfKGPC6vml6cO/j0+xobTBv6iH6TULr
jggpVdPOI5Vb5zpnsZ4ciaGZap623fjnOuRGS2I/WSZQVy9zXa2KcqxH/nP0c1pd
ELVA96rk1ljAdrvTsf/k2L6IoZBvgf+G5eFmibUBfdqFew7VF+ckTQw+pdu/WIMa
i2/JX0DdEWc3qmIgkbqAttAOkMcgq5s04xs96RSQh5j7XmK5ZWQkbFf/cH2b5OEr
eTYCA1yGcqNLWQxWeNlpinpNXXwu/yvDKTbmBT0nKdytfQGNjdeQHOapxl0zIkgI
RtJAzFa7Hv66uhcimEhPGtdDg5/XjQIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFFm6
4GuN23yI29FMfVNaJqhfr2XkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRTY4RjBCQUI5NzUxMUYxQTRFQTRCRjZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALce/AwQCLcoIAwQALco/AwQA
LcwBAwQALcxAAwQALcxHAwQALc+jMA0GCSqGSIb3DQEBCwUAA4IBAQCR4vx+hk8k
rdOsUbjVcTPzIMW0XRQgTs/UeGaYD0BWF77cT/LTbbGijuUnJiPe/OS+lWLPn1y/
h85aEvcXXsphUPZ20geJ8K23bP2XIhYRLXUrcatgc6ulehgxW3kyPQzdTyg60JkF
+ZeNClhs+9SV9zwKgwwiOW0XvbwpV5uHg6SWCX05jjIT4hXFFmc6M5P8aThkwVut
fG0bkRouzYxnYsIthIh22GqjRuYFqYtv0hc6WYXhwVselpD3kUxwuprsZP5OaAII
ol5h1FdJKWQJIGPkvnZdtsXDoiZ7X50T2wMK3ekU9SrbxB+WGrhXgEhwM9uYGmhh
Ye4EhdKRMpoZ
-----END CERTIFICATE-----