Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BDC0E04A14E11F189530AAFCE1D38B0.roa
File:                     5BDC0E04A14E11F189530AAFCE1D38B0.roa (raw, json)
Hash identifier:          2zGzBFw59A8hOy3bTDWlTCSP+Y4HaNd8GJcufL92leg=
Subject key identifier:   CB:87:A0:7C:C0:98:2D:54:93:53:C2:80:4B:D8:A2:D3:B3:EC:0D:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D155
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BDC0E04A14E11F189530AAFCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 13:02:15 +0000
ROA not before:           Wed 26 Aug 2026 13:02:11 +0000
ROA not after:            Sat 25 Aug 2029 13:02:11 +0000
asID:                     17561
IP address blocks:        45.203.94.0/24 maxlen: 24
                          45.203.95.0/24 maxlen: 24
                          45.203.96.0/24 maxlen: 24
                          45.203.97.0/24 maxlen: 24
                          45.203.98.0/24 maxlen: 24
                          45.203.99.0/24 maxlen: 24
                          45.203.100.0/24 maxlen: 24
                          45.203.101.0/24 maxlen: 24
                          45.203.102.0/24 maxlen: 24
                          45.203.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119125 (0x1d155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 13:02:11 2026 GMT
            Not After : Aug 25 13:02:11 2029 GMT
        Subject: CN=6a8ee3d7-6fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:71:6a:e2:7c:d8:cb:ca:22:7e:43:c0:57:03:
                    4d:e5:09:ab:00:6b:98:4a:37:c8:5d:1e:fa:4e:72:
                    35:65:33:f6:4f:05:d0:b6:81:a2:fb:50:78:8a:de:
                    f2:ab:5b:6e:22:e3:92:27:5a:8e:26:2c:e2:f0:da:
                    47:02:15:20:2e:c2:68:14:26:1d:79:31:a1:7f:29:
                    dc:d5:1c:20:c8:36:3e:2b:a6:d6:08:48:03:d3:d3:
                    08:64:8b:11:e0:2b:ce:ce:47:cc:78:31:06:47:de:
                    a7:9d:ed:23:14:1a:2a:e7:94:56:86:33:cf:44:31:
                    6f:37:47:3c:96:30:45:16:56:39:bb:c4:b8:1c:a0:
                    14:05:f1:e8:33:4f:7d:07:d6:c2:29:5d:1e:2f:04:
                    3e:66:51:5e:6f:e3:ab:fc:7d:d7:ac:13:d4:93:ff:
                    99:9b:c7:ac:94:c8:a1:5b:ad:cc:64:f3:18:54:77:
                    5d:21:b1:cb:57:fd:06:81:d1:eb:76:b5:2e:ef:d4:
                    1c:a6:f3:23:bb:24:fd:7c:66:80:cb:63:a1:10:58:
                    0e:a8:e1:90:82:af:8a:23:ce:85:97:48:42:cf:89:
                    59:f7:d7:88:22:50:01:47:3f:a2:eb:a0:4c:13:8f:
                    ac:f7:63:64:50:85:b3:29:c2:d8:57:96:9e:2e:af:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:87:A0:7C:C0:98:2D:54:93:53:C2:80:4B:D8:A2:D3:B3:EC:0D:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BDC0E04A14E11F189530AAFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.94.0-45.203.103.255

    Signature Algorithm: sha256WithRSAEncryption
         49:77:8f:98:c4:93:1e:2b:99:70:77:56:1f:ee:9c:96:ec:23:
         81:5c:a4:c1:06:e3:e4:35:0f:a6:91:59:bf:79:9a:b7:62:05:
         09:e9:a9:68:dc:83:c0:af:ce:3a:0a:f2:34:47:6e:14:f4:1d:
         4b:7b:f5:99:b8:23:9b:d3:14:ce:1d:61:64:05:64:11:73:23:
         d5:62:88:ba:d3:e8:47:0b:03:f1:91:b4:83:e4:34:c5:52:4b:
         af:31:09:8a:ba:d7:2a:65:f6:e9:67:b4:12:7e:95:5c:7f:f5:
         45:2c:2f:51:25:4b:af:ae:06:5c:83:4e:57:52:0d:2e:5f:0c:
         2b:67:50:b9:59:fb:82:32:88:31:f6:90:ee:05:f0:4f:f2:a1:
         0a:6f:42:fc:93:cc:79:bd:5c:aa:e6:c7:52:6a:d6:60:47:1c:
         3f:de:06:01:78:e2:ac:41:e8:0f:1d:0d:35:2a:2a:84:7a:aa:
         c5:74:bb:81:f0:1b:d0:70:2a:58:f7:44:76:d6:ab:c3:7a:c4:
         3d:4a:88:ed:fe:6a:0c:8b:08:5f:16:e0:93:0e:77:01:fe:6f:
         ab:53:cf:d7:9f:b4:e0:24:d2:09:fc:14:75:40:18:51:f1:c2:
         73:81:11:48:66:f1:a2:2a:1d:84:00:86:cb:b4:91:df:34:10:
         9a:93:a0:6d
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdFVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI2MTMwMjExWhcNMjkwODI1MTMwMjExWjAYMRYw
FAYDVQQDEw02YThlZTNkNy02ZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3HFq4nzYy8oifkPAVwNN5QmrAGuYSjfIXR76TnI1ZTP2TwXQtoGi+1B4
it7yq1tuIuOSJ1qOJizi8NpHAhUgLsJoFCYdeTGhfync1RwgyDY+K6bWCEgD09MI
ZIsR4CvOzkfMeDEGR96nne0jFBoq55RWhjPPRDFvN0c8ljBFFlY5u8S4HKAUBfHo
M099B9bCKV0eLwQ+ZlFeb+Or/H3XrBPUk/+Zm8eslMihW63MZPMYVHddIbHLV/0G
gdHrdrUu79QcpvMjuyT9fGaAy2OhEFgOqOGQgq+KI86Fl0hCz4lZ99eIIlABRz+i
66BME4+s92NkUIWzKcLYV5aeLq+Y0QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMuH
oHzAmC1Uk1PCgEvYotOz7A0DMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QkRDMEUwNEExNEUxMUYxODk1MzBBQUZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEty14DBAMty2AwDQYJKoZI
hvcNAQELBQADggEBAEl3j5jEkx4rmXB3Vh/unJbsI4FcpMEG4+Q1D6aRWb95mrdi
BQnpqWjcg8CvzjoK8jRHbhT0HUt79Zm4I5vTFM4dYWQFZBFzI9ViiLrT6EcLA/GR
tIPkNMVSS68xCYq61ypl9ulntBJ+lVx/9UUsL1ElS6+uBlyDTldSDS5fDCtnULlZ
+4IyiDH2kO4F8E/yoQpvQvyTzHm9XKrmx1Jq1mBHHD/eBgF44qxB6A8dDTUqKoR6
qsV0u4HwG9BwKlj3RHbWq8N6xD1KiO3+agyLCF8W4JMOdwH+b6tTz9eftOAk0gn8
FHVAGFHxwnOBEUhm8aIqHYQAhsu0kd80EJqToG0=
-----END CERTIFICATE-----