Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/903AA5FA96F611F1A3FBECBCCE1D38B0.roa
File:                     903AA5FA96F611F1A3FBECBCCE1D38B0.roa (raw, json)
Hash identifier:          xS3igg36k0cuXJoJANKp9Ix+vI036WjDne9tijThEyA=
Subject key identifier:   C1:43:36:22:3A:1F:EB:F8:73:E4:A1:C5:11:D2:AA:DC:EA:CB:82:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/903AA5FA96F611F1A3FBECBCCE1D38B0.roa
Signing time:             Thu 13 Aug 2026 09:08:35 +0000
ROA not before:           Thu 13 Aug 2026 09:08:31 +0000
ROA not after:            Mon 21 Sep 2026 09:08:31 +0000
asID:                     32043
IP address blocks:        45.203.224.0/24 maxlen: 24
                          45.203.225.0/24 maxlen: 24
                          45.203.226.0/24 maxlen: 24
                          45.203.227.0/24 maxlen: 24
                          45.203.228.0/24 maxlen: 24
                          45.203.229.0/24 maxlen: 24
                          45.203.230.0/24 maxlen: 24
                          45.203.231.0/24 maxlen: 24
                          45.203.232.0/24 maxlen: 24
                          45.203.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117880 (0x1cc78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 09:08:31 2026 GMT
            Not After : Sep 21 09:08:31 2026 GMT
        Subject: CN=6a7d8993-49d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:ee:ae:1f:77:9e:9e:3c:97:ed:d2:6d:86:
                    af:bb:8f:89:12:19:d1:8e:e0:fa:9f:e0:25:d6:4a:
                    c2:43:ab:83:d8:59:cb:1c:55:05:c3:85:60:6a:c3:
                    b3:84:ec:03:5b:7a:52:5c:08:2d:b0:57:ee:5f:a7:
                    df:13:9f:2f:80:bb:1d:18:a6:65:33:79:ec:de:4e:
                    af:5b:37:4b:25:65:26:50:2c:ab:db:96:0c:ec:c6:
                    1d:fe:62:7d:9f:df:b2:a8:46:0d:a0:5a:11:d8:67:
                    d0:52:fe:e3:cb:00:ee:c6:76:a9:c4:cf:15:ed:1a:
                    7e:c8:1f:50:4e:af:bc:0c:69:db:a5:e7:03:7e:31:
                    b4:c0:c2:da:66:b2:4e:43:ab:bf:62:b5:22:49:06:
                    30:87:b6:81:43:1b:6c:10:df:5c:9e:3e:82:d4:d4:
                    2a:35:fc:2a:9e:41:2b:78:92:0f:83:6d:eb:cd:3d:
                    7e:d3:5e:84:57:b1:23:be:32:30:d3:a8:99:d6:91:
                    9f:2e:cd:7d:90:88:0b:01:4a:87:8b:02:1b:59:c1:
                    1f:d1:e8:a4:ba:ef:52:32:eb:3c:2d:6f:77:d2:32:
                    22:e3:a4:ed:48:ba:46:cf:ae:86:91:90:c0:d7:28:
                    5c:f2:71:99:a3:8c:18:99:d1:3a:5e:87:7f:1a:1d:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:43:36:22:3A:1F:EB:F8:73:E4:A1:C5:11:D2:AA:DC:EA:CB:82:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/903AA5FA96F611F1A3FBECBCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.224.0-45.203.233.255

    Signature Algorithm: sha256WithRSAEncryption
         4b:3a:f1:0b:3a:83:09:56:b3:41:12:8b:2b:d0:26:7d:3c:7c:
         94:fc:90:b2:18:05:fb:b9:07:3c:5a:a3:22:67:4c:e0:ca:09:
         a3:76:1a:95:3e:a5:b4:fe:d4:97:47:25:c0:1e:11:a1:a3:59:
         c1:a1:26:8a:9a:2b:a7:cd:30:45:fd:ce:26:63:29:53:18:4e:
         6d:95:86:72:f5:a4:8f:4d:11:01:d7:6a:82:84:99:e2:96:92:
         9f:a4:ce:3c:08:ba:2e:9b:16:c3:71:fa:82:26:26:5d:ed:d1:
         d7:9c:e0:dd:a6:d6:e5:1f:ec:4a:b3:8d:65:82:b7:88:18:ec:
         b9:a3:2f:e5:03:46:8e:54:5c:09:33:d0:e7:44:a1:8a:2d:5e:
         17:4c:1f:91:94:ac:8e:f6:ff:b0:4e:7c:bf:8d:a8:e9:d8:ac:
         84:66:bf:b2:5f:62:8b:e5:51:45:87:9c:d1:6d:af:78:79:87:
         b8:8c:fd:8e:cb:b6:40:d3:b2:1d:68:d2:6e:51:5d:d5:f4:56:
         00:e3:c7:10:b9:b6:36:7a:47:62:91:b4:07:c4:4e:bc:95:d0:
         ec:02:5b:e2:06:d8:af:de:6f:6d:00:c0:50:12:34:a7:95:9b:
         c4:b3:73:b3:05:ca:02:96:a0:3f:10:18:89:36:19:67:e6:5d:
         1e:0e:f2:3d
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcx4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEzMDkwODMxWhcNMjYwOTIxMDkwODMxWjAYMRYw
FAYDVQQDEw02YTdkODk5My00OWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuwHurh93np48l+3SbYavu4+JEhnRjuD6n+Al1krCQ6uD2FnLHFUFw4Vg
asOzhOwDW3pSXAgtsFfuX6ffE58vgLsdGKZlM3ns3k6vWzdLJWUmUCyr25YM7MYd
/mJ9n9+yqEYNoFoR2GfQUv7jywDuxnapxM8V7Rp+yB9QTq+8DGnbpecDfjG0wMLa
ZrJOQ6u/YrUiSQYwh7aBQxtsEN9cnj6C1NQqNfwqnkEreJIPg23rzT1+016EV7Ej
vjIw06iZ1pGfLs19kIgLAUqHiwIbWcEf0eikuu9SMus8LW930jIi46TtSLpGz66G
kZDA1yhc8nGZo4wYmdE6Xod/Gh1ArwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMFD
NiI6H+v4c+ShxRHSqtzqy4IPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MDNBQTVGQTk2RjYxMUYxQTNGQkVDQkNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUty+ADBAEty+gwDQYJKoZI
hvcNAQELBQADggEBAEs68Qs6gwlWs0ESiyvQJn08fJT8kLIYBfu5BzxaoyJnTODK
CaN2GpU+pbT+1JdHJcAeEaGjWcGhJoqaK6fNMEX9ziZjKVMYTm2VhnL1pI9NEQHX
aoKEmeKWkp+kzjwIui6bFsNx+oImJl3t0dec4N2m1uUf7EqzjWWCt4gY7LmjL+UD
Ro5UXAkz0OdEoYotXhdMH5GUrI72/7BOfL+NqOnYrIRmv7JfYovlUUWHnNFtr3h5
h7iM/Y7LtkDTsh1o0m5RXdX0VgDjxxC5tjZ6R2KRtAfETryV0OwCW+IG2K/eb20A
wFASNKeVm8Szc7MFygKWoD8QGIk2GWfmXR4O8j0=
-----END CERTIFICATE-----