Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/364DEADEC47D11F194EB2D06CF1D38B0.roa
File:                     364DEADEC47D11F194EB2D06CF1D38B0.roa (raw, json)
Hash identifier:          8gzhxsnzIhzjGcqiP+cG5GbOQbr+pN1GnxdSdG+4aAI=
Subject key identifier:   99:A4:8D:22:E0:3B:8D:7A:F5:1C:10:F8:A0:0F:B4:CB:8D:B5:BD:99
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/364DEADEC47D11F194EB2D06CF1D38B0.roa
Signing time:             Sat 10 Oct 2026 07:35:49 +0000
ROA not before:           Sat 10 Oct 2026 07:35:44 +0000
ROA not after:            Mon 16 Nov 2026 07:35:44 +0000
asID:                     61112
IP address blocks:        45.192.204.0/23 maxlen: 24
                          45.192.206.0/23 maxlen: 24
                          45.192.248.0/23 maxlen: 24
                          45.196.215.0/24 maxlen: 24
                          45.196.222.0/24 maxlen: 24
                          45.196.233.0/24 maxlen: 24
                          45.196.234.0/23 maxlen: 24
                          45.196.235.0/24 maxlen: 24
                          45.196.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121936 (0x1dc50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 07:35:44 2026 GMT
            Not After : Nov 16 07:35:44 2026 GMT
        Subject: CN=6ac9ead5-6ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:73:df:07:ec:bf:a9:82:33:47:19:78:64:3e:
                    f0:e5:ab:8a:08:3e:79:30:d4:32:d7:9c:6d:62:54:
                    4c:c3:05:4b:3d:d6:2d:0f:ee:b1:d0:a2:22:e0:68:
                    46:66:9e:a7:20:02:84:39:99:dd:90:39:6d:3f:46:
                    82:c4:91:5a:ae:fe:9d:a7:77:8b:67:3e:dd:d7:08:
                    dc:45:72:4d:73:dd:c2:bc:63:54:f8:69:67:87:70:
                    8f:b0:19:f5:34:fc:57:52:69:33:fe:b9:5a:31:55:
                    7e:f3:5d:89:51:3c:d1:68:2c:b3:a8:66:bf:31:df:
                    09:0a:e9:d4:a3:7a:32:f1:16:a9:6d:1a:da:5e:c5:
                    c6:bf:1b:3d:d6:b5:74:0a:d9:7f:19:a9:0b:4d:df:
                    73:fc:af:31:85:6b:53:19:26:24:fd:a8:9f:c1:61:
                    6b:c1:de:47:be:95:7d:84:a3:fd:a5:82:02:0a:c3:
                    7b:27:e8:93:96:e5:2b:79:26:12:af:3b:5e:c7:2d:
                    e1:3f:32:a8:ef:10:88:44:e4:55:5f:31:1a:6b:c1:
                    9d:bd:7e:9c:0b:28:6e:f0:05:be:e0:24:62:f7:03:
                    44:41:c9:8a:9b:32:53:8b:6a:d3:98:f1:60:e4:eb:
                    e9:8f:80:31:e0:d0:5a:dc:1d:c0:11:db:8b:ed:16:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A4:8D:22:E0:3B:8D:7A:F5:1C:10:F8:A0:0F:B4:CB:8D:B5:BD:99
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/364DEADEC47D11F194EB2D06CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.204.0/22
                  45.192.248.0/23
                  45.196.215.0/24
                  45.196.222.0/24
                  45.196.233.0-45.196.235.255
                  45.196.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:5a:ff:58:37:53:51:f2:18:f8:b9:59:54:7d:17:b2:d3:
         61:e4:0d:7c:28:fa:0f:c5:ce:7c:11:54:79:3e:63:80:25:ff:
         a6:2b:50:80:dd:6c:ce:68:76:ca:ad:52:3d:fe:7e:61:82:a9:
         89:0e:03:94:01:07:0d:d2:c1:6f:a8:55:5d:d5:c4:94:e6:6a:
         5c:28:46:b0:74:d9:86:0b:1f:e4:82:d2:13:39:b8:9f:9d:15:
         d6:f3:fa:a7:52:22:30:77:09:79:6b:66:60:39:48:d7:5b:63:
         2a:81:e4:92:0b:fc:b9:72:66:44:6a:5e:94:0f:cd:a8:a5:65:
         4d:67:87:21:90:77:c5:9d:ce:9d:37:4b:ba:8f:29:35:93:b0:
         6b:9c:cb:f8:c6:f0:7b:33:0f:4a:2d:d9:d4:c0:f7:89:64:27:
         78:7c:f4:d9:a6:6e:f0:d5:54:b8:e4:73:64:0c:27:b1:ac:1c:
         32:91:27:03:ad:6c:74:8d:eb:61:a3:f9:0e:7c:39:dc:4f:a7:
         b6:12:a3:64:6b:05:3e:a5:88:0c:04:12:13:37:07:e5:4e:ec:
         58:4d:9c:12:6b:fe:1a:35:0f:e0:1e:18:fa:64:76:aa:fa:77:
         fd:02:c4:b3:8f:67:5c:c4:f1:19:20:f5:27:90:2f:a1:97:3b:
         3f:df:d5:3c
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIDAdxQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDEwMDczNTQ0WhcNMjYxMTE2MDczNTQ0WjAYMRYw
FAYDVQQDEw02YWM5ZWFkNS02YWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4XPfB+y/qYIzRxl4ZD7w5auKCD55MNQy15xtYlRMwwVLPdYtD+6x0KIi
4GhGZp6nIAKEOZndkDltP0aCxJFarv6dp3eLZz7d1wjcRXJNc93CvGNU+Glnh3CP
sBn1NPxXUmkz/rlaMVV+812JUTzRaCyzqGa/Md8JCunUo3oy8RapbRraXsXGvxs9
1rV0Ctl/GakLTd9z/K8xhWtTGSYk/aifwWFrwd5HvpV9hKP9pYICCsN7J+iTluUr
eSYSrztexy3hPzKo7xCIRORVXzEaa8GdvX6cCyhu8AW+4CRi9wNEQcmKmzJTi2rT
mPFg5Ovpj4Ax4NBa3B3AEduL7RbyGQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFJmk
jSLgO4169RwQ+KAPtMuNtb2ZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNjRERUFERUM0N0QxMUYxOTRFQjJEMDZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCLcDMAwQBLcD4AwQALcTXAwQA
LcTeMAwDBAAtxOkDBAItxOgDBAAtxPAwDQYJKoZIhvcNAQELBQADggEBAJrYWv9Y
N1NR8hj4uVlUfRey02HkDXwo+g/FznwRVHk+Y4Al/6YrUIDdbM5odsqtUj3+fmGC
qYkOA5QBBw3SwW+oVV3VxJTmalwoRrB02YYLH+SC0hM5uJ+dFdbz+qdSIjB3CXlr
ZmA5SNdbYyqB5JIL/LlyZkRqXpQPzailZU1nhyGQd8Wdzp03S7qPKTWTsGucy/jG
8HszD0ot2dTA94lkJ3h89NmmbvDVVLjkc2QMJ7GsHDKRJwOtbHSN62Gj+Q58OdxP
p7YSo2RrBT6liAwEEhM3B+VO7FhNnBJr/ho1D+AeGPpkdqr6d/0CxLOPZ1zE8Rkg
9SeQL6GXOz/f1Tw=
-----END CERTIFICATE-----