Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56CDFA2C96FD11F194856AE5CE1D38B0.roa
File:                     56CDFA2C96FD11F194856AE5CE1D38B0.roa (raw, json)
Hash identifier:          zufpHyi88biWZ18vsIJb5cRzJKrJaVsfG8a7kCx0lkE=
Subject key identifier:   AC:7E:58:DA:DF:2C:13:9A:5F:0C:0F:0E:6B:76:6F:21:BD:EB:77:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56CDFA2C96FD11F194856AE5CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 09:57:08 +0000
ROA not before:           Thu 13 Aug 2026 09:57:01 +0000
ROA not after:            Thu 24 Sep 2026 09:57:01 +0000
asID:                     63099
IP address blocks:        45.192.14.0/24 maxlen: 24
                          45.192.15.0/24 maxlen: 24
                          45.192.16.0/24 maxlen: 24
                          45.196.68.0/24 maxlen: 24
                          45.197.135.0/24 maxlen: 24
                          45.198.84.0/24 maxlen: 24
                          45.198.176.0/24 maxlen: 24
                          45.198.226.0/24 maxlen: 24
                          45.201.36.0/24 maxlen: 24
                          45.201.39.0/24 maxlen: 24
                          45.202.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117902 (0x1cc8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 09:57:01 2026 GMT
            Not After : Sep 24 09:57:01 2026 GMT
        Subject: CN=6a7d94f4-65ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:9a:64:eb:ed:90:b3:b5:e5:89:46:b0:a9:
                    27:1b:3e:e1:0d:e4:4c:6c:c7:a3:c1:55:73:7b:2a:
                    03:a7:8c:a9:9c:e0:04:0c:76:c9:6f:bc:e9:18:2e:
                    f5:eb:22:d0:6f:fd:5c:d5:46:90:7d:0c:4c:15:24:
                    84:8f:17:06:2f:4d:a5:fd:b4:17:59:92:cd:4d:eb:
                    20:df:ef:77:5e:8b:39:e9:1c:f0:fa:40:f0:b7:ae:
                    c7:fd:a6:a3:f6:44:7b:37:a1:b4:b0:9d:81:9d:8e:
                    fb:de:ed:88:13:2c:54:64:1e:dd:3d:0c:f2:07:32:
                    f9:db:fb:34:22:41:76:40:6c:79:97:27:35:5a:76:
                    16:e6:a0:c1:38:d7:1b:08:be:4a:86:cd:8d:37:2a:
                    2b:6f:f4:8e:0c:93:ed:53:b7:f1:51:8d:4a:59:84:
                    8f:7e:4f:90:65:17:66:10:ac:bb:0a:b4:35:aa:2d:
                    9a:ee:d6:6d:a8:1c:fe:3d:96:9a:7e:5f:dd:b5:7e:
                    bc:45:a2:fb:34:28:0c:b2:ee:58:8b:59:7c:82:86:
                    da:07:e8:96:7d:c9:94:6b:84:cb:ad:96:dc:a2:88:
                    14:b4:14:03:b2:0e:7b:1c:d0:af:5c:79:4e:d0:e7:
                    3f:45:fd:71:0a:a7:94:1c:85:ed:60:d5:75:9f:75:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7E:58:DA:DF:2C:13:9A:5F:0C:0F:0E:6B:76:6F:21:BD:EB:77:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56CDFA2C96FD11F194856AE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.14.0-45.192.16.255
                  45.196.68.0/24
                  45.197.135.0/24
                  45.198.84.0/24
                  45.198.176.0/24
                  45.198.226.0/24
                  45.201.36.0/24
                  45.201.39.0/24
                  45.202.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:a9:b6:9a:b0:92:2a:2d:ea:1b:45:c5:fa:b4:4c:95:e4:
         b5:bf:a0:90:7a:28:a2:b3:b3:d3:6c:84:a3:d2:b9:ac:3a:b5:
         51:d8:ee:ac:29:9e:aa:93:ab:02:e1:af:68:69:2b:c2:13:93:
         b6:8e:c2:ef:c9:33:5c:82:57:e6:14:79:09:39:95:26:9a:2f:
         37:aa:c3:5c:43:1d:82:eb:17:0e:4c:ca:7f:f6:53:6f:4d:a4:
         4e:f1:80:1b:5b:2a:2d:a1:47:44:66:b3:fd:25:5b:0c:5d:87:
         6d:6d:bf:8d:3c:96:eb:98:d6:9a:1f:70:75:08:93:93:73:af:
         e7:31:12:d7:a2:09:7f:89:c3:9e:b0:37:0b:04:6b:b7:f9:90:
         de:bb:f4:b8:e7:f1:26:2e:b7:a6:4a:64:01:e5:6c:42:96:c8:
         68:ab:0a:f0:0f:62:ce:54:72:49:6c:f1:20:ae:67:e1:f6:45:
         03:b7:05:25:94:52:f9:a2:ef:94:4d:2f:67:e7:9e:6b:83:ad:
         62:db:cb:27:8f:bf:31:57:8e:04:f3:c5:e9:73:35:b3:05:4e:
         51:fe:fa:ac:e7:99:43:8a:93:d2:a1:d6:b6:3e:bf:84:06:62:
         7a:55:c9:50:f6:93:aa:56:62:cb:ad:13:19:7d:b3:21:37:56:
         fe:4c:34:76
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAcyOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEzMDk1NzAxWhcNMjYwOTI0MDk1NzAxWjAYMRYw
FAYDVQQDEw02YTdkOTRmNC02NWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx3iaZOvtkLO15YlGsKknGz7hDeRMbMejwVVzeyoDp4ypnOAEDHbJb7zp
GC716yLQb/1c1UaQfQxMFSSEjxcGL02l/bQXWZLNTesg3+93Xos56Rzw+kDwt67H
/aaj9kR7N6G0sJ2BnY773u2IEyxUZB7dPQzyBzL52/s0IkF2QGx5lyc1WnYW5qDB
ONcbCL5Khs2NNyorb/SODJPtU7fxUY1KWYSPfk+QZRdmEKy7CrQ1qi2a7tZtqBz+
PZaafl/dtX68RaL7NCgMsu5Yi1l8gobaB+iWfcmUa4TLrZbcoogUtBQDsg57HNCv
XHlO0Oc/Rf1xCqeUHIXtYNV1n3W4awIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFKx+
WNrfLBOaXwwPDmt2byG963frMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NkNERkEyQzk2RkQxMUYxOTQ4NTZBRTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+MAwDBAEtwA4DBAAtwBADBAAtxEQD
BAAtxYcDBAAtxlQDBAAtxrADBAAtxuIDBAAtySQDBAAtyScDBAAtym8wDQYJKoZI
hvcNAQELBQADggEBAK7wqbaasJIqLeobRcX6tEyV5LW/oJB6KKKzs9NshKPSuaw6
tVHY7qwpnqqTqwLhr2hpK8ITk7aOwu/JM1yCV+YUeQk5lSaaLzeqw1xDHYLrFw5M
yn/2U29NpE7xgBtbKi2hR0Rms/0lWwxdh21tv408luuY1pofcHUIk5Nzr+cxEtei
CX+Jw56wNwsEa7f5kN679Ljn8SYut6ZKZAHlbEKWyGirCvAPYs5Uckls8SCuZ+H2
RQO3BSWUUvmi75RNL2fnnmuDrWLbyyePvzFXjgTzxelzNbMFTlH++qznmUOKk9Kh
1rY+v4QGYnpVyVD2k6pWYsutExl9syE3Vv5MNHY=
-----END CERTIFICATE-----