Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4556EC46955311F1B3E055CCCE1D38B0.roa
File:                     4556EC46955311F1B3E055CCCE1D38B0.roa (raw, json)
Hash identifier:          CZ5p6PkTaJUwnl0NroorNtNp4FDRVBC/+2aFdXSq6Bs=
Subject key identifier:   57:30:C3:30:4A:7B:82:E7:5F:28:08:12:6A:A7:33:7F:77:2B:11:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4556EC46955311F1B3E055CCCE1D38B0.roa
Signing time:             Tue 11 Aug 2026 07:07:11 +0000
ROA not before:           Tue 11 Aug 2026 07:07:07 +0000
ROA not after:            Fri 18 Sep 2026 07:07:07 +0000
asID:                     22773
IP address blocks:        45.192.4.0/22 maxlen: 24
                          45.192.24.0/21 maxlen: 24
                          45.194.72.0/23 maxlen: 24
                          45.194.76.0/23 maxlen: 24
                          45.194.78.0/24 maxlen: 24
                          45.194.82.0/24 maxlen: 24
                          45.194.84.0/24 maxlen: 24
                          45.194.121.0/24 maxlen: 24
                          45.196.116.0/22 maxlen: 24
                          45.197.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117578 (0x1cb4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 07:07:07 2026 GMT
            Not After : Sep 18 07:07:07 2026 GMT
        Subject: CN=6a7aca1e-c953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:02:8c:1a:d3:b5:5c:cd:01:5a:c5:16:7f:
                    25:59:72:96:5f:3f:f9:d9:13:28:b5:e8:0e:e7:77:
                    03:34:39:be:39:90:0a:6e:09:7e:63:6d:0c:68:0a:
                    a9:a9:1a:cd:c5:1c:8f:74:e7:6f:06:c7:8b:68:f5:
                    fb:2b:70:5a:ca:92:74:63:f1:98:ef:65:2d:a8:a8:
                    6d:af:40:8b:27:15:d2:94:c7:c6:52:33:59:1a:8c:
                    69:3c:4e:00:ed:77:88:87:42:b6:a5:ac:f5:ed:d9:
                    e4:46:f4:c0:8e:0e:7d:88:e1:f7:e3:0f:4b:62:00:
                    d3:4e:13:d3:d3:ba:1d:f9:98:6e:fe:5d:c9:57:3a:
                    b8:e6:4c:0f:2c:3e:62:57:85:04:6a:af:53:6b:d1:
                    35:b4:d5:a3:1b:76:61:89:2d:73:40:7f:d8:75:70:
                    cd:aa:b6:58:91:37:15:12:65:77:97:c4:ea:bf:4e:
                    a9:7a:8e:4d:db:32:bc:f7:b8:f6:ea:c1:89:0d:50:
                    75:c0:5b:fb:ff:e3:a1:5a:10:13:04:bc:2b:f6:d2:
                    9e:74:eb:7d:b4:d2:a6:aa:de:6d:48:74:a8:2a:e2:
                    bc:f0:ac:f2:6a:52:c8:ae:fa:17:f0:4b:e2:54:0b:
                    fa:d8:c3:19:01:e4:90:ad:0a:4c:01:db:c8:b1:ad:
                    c2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:30:C3:30:4A:7B:82:E7:5F:28:08:12:6A:A7:33:7F:77:2B:11:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4556EC46955311F1B3E055CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.4.0/22
                  45.192.24.0/21
                  45.194.72.0/23
                  45.194.76.0-45.194.78.255
                  45.194.82.0/24
                  45.194.84.0/24
                  45.194.121.0/24
                  45.196.116.0/22
                  45.197.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:72:97:9e:0f:24:f2:61:59:88:23:8e:8c:1e:be:cd:a5:66:
         68:35:2b:8a:8a:0a:e2:aa:ec:c1:f2:b1:bd:d9:fe:fc:67:f0:
         15:b8:04:8a:a7:a5:90:cb:64:74:e0:4b:bd:52:ca:f9:3a:96:
         e4:83:fb:05:24:dd:56:f7:30:ff:32:cd:aa:ec:e8:8d:1c:16:
         b9:cf:b5:45:9a:db:78:cd:cb:e8:cc:7e:35:89:05:7f:0a:1f:
         ee:0a:1b:8d:95:e9:29:dc:96:7b:c0:0e:89:2d:61:42:fd:87:
         5e:e4:38:85:c5:bb:6e:41:4e:6f:1a:04:46:4a:32:4e:38:2e:
         0e:ee:2f:36:cd:35:4b:66:2d:f4:54:c1:cc:e5:ad:2a:d0:4b:
         a8:b6:1a:89:79:69:12:22:28:c9:f2:9d:d0:14:5d:00:46:2f:
         77:b6:6e:16:df:ac:28:c5:51:d1:9d:b4:23:0e:ac:69:72:3a:
         3f:de:fd:d6:98:1e:62:d7:71:06:b4:db:4f:68:ca:c7:94:18:
         fe:eb:e4:87:20:1b:b3:f2:f7:67:f1:75:b5:87:8f:6a:c9:55:
         5e:99:87:d0:2a:10:a6:34:5c:70:36:16:da:bb:61:c4:77:1d:
         21:82:d9:96:f7:c6:ce:78:8b:c7:06:15:35:6d:4d:88:6d:8e:
         15:66:c0:32
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDActKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODExMDcwNzA3WhcNMjYwOTE4MDcwNzA3WjAYMRYw
FAYDVQQDEw02YTdhY2ExZS1jOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs7wCjBrTtVzNAVrFFn8lWXKWXz/52RMotegO53cDNDm+OZAKbgl+Y20M
aAqpqRrNxRyPdOdvBseLaPX7K3BaypJ0Y/GY72UtqKhtr0CLJxXSlMfGUjNZGoxp
PE4A7XeIh0K2paz17dnkRvTAjg59iOH34w9LYgDTThPT07od+Zhu/l3JVzq45kwP
LD5iV4UEaq9Ta9E1tNWjG3ZhiS1zQH/YdXDNqrZYkTcVEmV3l8Tqv06peo5N2zK8
97j26sGJDVB1wFv7/+OhWhATBLwr9tKedOt9tNKmqt5tSHSoKuK88KzyalLIrvoX
8EviVAv62MMZAeSQrQpMAdvIsa3CcwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFFcw
wzBKe4LnXygIEmqnM393KxG3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NTU2RUM0Njk1NTMxMUYxQjNFMDU1Q0NDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCLcAEAwQDLcAYAwQBLcJIMAwD
BAItwkwDBAAtwk4DBAAtwlIDBAAtwlQDBAAtwnkDBAItxHQDBAItxRwwDQYJKoZI
hvcNAQELBQADggEBAD1yl54PJPJhWYgjjowevs2lZmg1K4qKCuKq7MHysb3Z/vxn
8BW4BIqnpZDLZHTgS71Syvk6luSD+wUk3Vb3MP8yzars6I0cFrnPtUWa23jNy+jM
fjWJBX8KH+4KG42V6SnclnvADoktYUL9h17kOIXFu25BTm8aBEZKMk44Lg7uLzbN
NUtmLfRUwczlrSrQS6i2Gol5aRIiKMnyndAUXQBGL3e2bhbfrCjFUdGdtCMOrGly
Oj/e/daYHmLXcQa0209oyseUGP7r5IcgG7Py92fxdbWHj2rJVV6Zh9AqEKY0XHA2
Ftq7YcR3HSGC2Zb3xs54i8cGFTVtTYhtjhVmwDI=
-----END CERTIFICATE-----
Generated at Wed Aug 19 05:14:19 2026 by rpki-client