Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/631E28529B9311F19C252CB7CE1D38B0.roa
File:                     631E28529B9311F19C252CB7CE1D38B0.roa (raw, json)
Hash identifier:          Lg0nrH777qt5v13QY2JGPbhpCkZWrbH9O1WmNjHCZ2E=
Subject key identifier:   82:D6:13:B1:F8:82:5A:F4:26:3B:10:85:E4:4D:06:A5:CB:15:36:DB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CDF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/631E28529B9311F19C252CB7CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 06:01:15 +0000
ROA not before:           Wed 19 Aug 2026 06:01:11 +0000
ROA not after:            Sat 21 Aug 2027 06:01:11 +0000
asID:                     55967
IP address blocks:        45.196.134.0/23 maxlen: 24
                          45.196.154.0/23 maxlen: 24
                          45.196.166.0/23 maxlen: 24
                          45.196.178.0/23 maxlen: 24
                          45.196.180.0/23 maxlen: 24
                          45.196.202.0/23 maxlen: 24
                          45.196.204.0/23 maxlen: 24
                          45.196.210.0/23 maxlen: 24
                          45.196.212.0/23 maxlen: 24
                          45.196.230.0/23 maxlen: 24
                          45.196.242.0/23 maxlen: 24
                          45.196.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118262 (0x1cdf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 06:01:11 2026 GMT
            Not After : Aug 21 06:01:11 2027 GMT
        Subject: CN=6a8546ab-52d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:0a:a4:ff:d3:c6:c6:a5:76:04:1f:74:ba:
                    a0:73:ee:91:9d:25:b3:e9:6a:48:c2:c3:a3:91:cb:
                    6c:31:6e:e7:53:f3:37:f8:ae:5c:0a:d8:03:02:37:
                    99:2a:b6:72:7e:94:27:c3:3e:8b:7f:c5:c8:8a:b3:
                    72:89:8a:4c:38:fc:d6:06:a8:e8:9b:f8:02:b7:d3:
                    f3:92:e6:c3:51:0b:ce:a1:bd:f2:4c:8e:0a:1f:42:
                    ab:8e:9e:eb:37:1d:33:8a:e1:0a:c0:82:32:be:c2:
                    9a:d4:19:18:f7:7f:cf:ec:44:0c:2a:72:0b:db:dc:
                    ee:c3:1b:ca:b9:b5:3e:9e:88:b2:92:b3:2d:8b:e1:
                    26:9c:96:13:c7:f7:5b:a7:23:f4:24:05:9f:dd:41:
                    14:ef:7c:b0:f1:17:9d:e7:f0:c0:91:67:c3:95:c8:
                    2e:ae:34:3d:f5:cf:78:0f:03:5b:25:af:b5:6f:6c:
                    90:dc:a7:9f:83:0d:7e:f6:79:46:d1:94:c5:d9:d4:
                    94:28:9e:3b:cd:84:3c:40:0a:63:bb:7e:ea:fe:a9:
                    28:a5:77:a6:2f:f5:e7:62:66:f8:cd:8e:d9:7e:6d:
                    0b:cf:04:dd:29:b6:76:03:2b:f8:4b:99:f3:f5:a9:
                    5f:ce:a5:20:00:a5:45:41:72:a1:40:1c:11:55:59:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:13:B1:F8:82:5A:F4:26:3B:10:85:E4:4D:06:A5:CB:15:36:DB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/631E28529B9311F19C252CB7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.134.0/23
                  45.196.154.0/23
                  45.196.166.0/23
                  45.196.178.0-45.196.181.255
                  45.196.202.0-45.196.205.255
                  45.196.210.0-45.196.213.255
                  45.196.230.0/23
                  45.196.242.0/23
                  45.196.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:f5:bf:f0:3a:8e:53:0a:df:b3:81:2d:9e:30:33:85:4b:
         ef:05:6f:36:17:55:47:cc:dc:27:19:0c:6a:bb:b9:08:47:16:
         00:b1:eb:29:b8:73:e0:22:13:4c:e1:ff:e9:97:3d:3e:af:bc:
         b9:9c:83:6a:85:2f:41:1f:ad:5b:77:5a:8b:95:76:b1:16:60:
         9f:3d:3e:a7:e4:1f:49:0e:af:93:35:6a:f5:07:8b:28:04:0e:
         8c:42:d4:c7:88:db:99:69:08:b1:e8:69:c0:63:b1:ce:6a:59:
         58:e8:0a:ba:a6:6c:60:52:41:f9:54:1a:27:d4:10:31:d8:d0:
         08:66:d7:5e:bf:49:ba:f5:df:e2:4f:92:2b:46:9a:37:be:db:
         7b:55:b2:eb:ce:d3:89:2f:77:b6:3a:9c:91:ad:44:68:a2:44:
         89:e8:bb:05:10:38:a4:ce:cb:63:62:c8:8e:3f:7b:71:0b:87:
         30:54:80:64:12:f9:a4:96:d4:29:d1:a3:90:ce:23:b2:92:db:
         64:9e:4e:63:c4:39:76:87:40:ca:10:64:6e:9e:82:52:33:43:
         76:ad:ee:f2:6e:72:28:ee:17:57:b5:29:15:f7:17:e7:38:50:
         6f:03:55:4e:f1:ff:ce:79:a7:5f:a5:3e:67:f5:bd:3a:96:12:
         8f:0e:4b:ea
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIDAc32MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE5MDYwMTExWhcNMjcwODIxMDYwMTExWjAYMRYw
FAYDVQQDEw02YTg1NDZhYi01MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuWAKpP/TxsaldgQfdLqgc+6RnSWz6WpIwsOjkctsMW7nU/M3+K5cCtgD
AjeZKrZyfpQnwz6Lf8XIirNyiYpMOPzWBqjom/gCt9PzkubDUQvOob3yTI4KH0Kr
jp7rNx0ziuEKwIIyvsKa1BkY93/P7EQMKnIL29zuwxvKubU+noiykrMti+EmnJYT
x/dbpyP0JAWf3UEU73yw8Red5/DAkWfDlcgurjQ99c94DwNbJa+1b2yQ3Kefgw1+
9nlG0ZTF2dSUKJ47zYQ8QApju37q/qkopXemL/XnYmb4zY7Zfm0LzwTdKbZ2Ayv4
S5nz9alfzqUgAKVFQXKhQBwRVVm4pQIDAQABo4IC6jCCAuYwHQYDVR0OBBYEFILW
E7H4glr0JjsQheRNBqXLFTbbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MzFFMjg1MjlCOTMxMUYxOUMyNTJDQjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBLcSGAwQBLcSaAwQBLcSmMAwD
BAEtxLIDBAEtxLQwDAMEAS3EygMEAS3EzDAMAwQBLcTSAwQBLcTUAwQBLcTmAwQB
LcTyAwQBLcT4MA0GCSqGSIb3DQEBCwUAA4IBAQCEXPW/8DqOUwrfs4EtnjAzhUvv
BW82F1VHzNwnGQxqu7kIRxYAsespuHPgIhNM4f/plz0+r7y5nINqhS9BH61bd1qL
lXaxFmCfPT6n5B9JDq+TNWr1B4soBA6MQtTHiNuZaQix6GnAY7HOallY6Aq6pmxg
UkH5VBon1BAx2NAIZtdev0m69d/iT5IrRpo3vtt7VbLrztOJL3e2OpyRrURookSJ
6LsFEDikzstjYsiOP3txC4cwVIBkEvmkltQp0aOQziOykttknk5jxDl2h0DKEGRu
noJSM0N2re7ybnIo7hdXtSkV9xfnOFBvA1VO8f/OeadfpT5n9b06lhKPDkvq
-----END CERTIFICATE-----