Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9933021E9EEF11F1B0AE49CBCE1D38B0.roa
File:                     9933021E9EEF11F1B0AE49CBCE1D38B0.roa (raw, json)
Hash identifier:          8q3f7T/EWuTgH4HspdwCtYxNDGeeD/cr+rA8C10va/M=
Subject key identifier:   B0:8D:4C:FA:94:BF:44:FD:A3:AF:5C:12:70:C5:AF:D3:43:2A:6D:5D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D028
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9933021E9EEF11F1B0AE49CBCE1D38B0.roa
Signing time:             Sun 23 Aug 2026 12:38:53 +0000
ROA not before:           Sun 23 Aug 2026 12:38:48 +0000
ROA not after:            Tue 11 Apr 2028 12:38:48 +0000
asID:                     17561
IP address blocks:        45.192.4.0/24 maxlen: 24
                          45.192.5.0/24 maxlen: 24
                          45.192.6.0/24 maxlen: 24
                          45.192.7.0/24 maxlen: 24
                          45.198.64.0/24 maxlen: 24
                          45.198.65.0/24 maxlen: 24
                          45.198.66.0/24 maxlen: 24
                          45.198.70.0/24 maxlen: 24
                          45.198.71.0/24 maxlen: 24
                          45.198.74.0/24 maxlen: 24
                          45.198.75.0/24 maxlen: 24
                          45.198.76.0/24 maxlen: 24
                          45.198.80.0/24 maxlen: 24
                          45.198.83.0/24 maxlen: 24
                          45.198.85.0/24 maxlen: 24
                          45.198.86.0/24 maxlen: 24
                          45.202.100.0/24 maxlen: 24
                          45.202.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118824 (0x1d028)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 23 12:38:48 2026 GMT
            Not After : Apr 11 12:38:48 2028 GMT
        Subject: CN=6a8ae9dd-d099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:87:32:ca:94:ae:5c:29:05:c5:b8:fb:1e:
                    35:da:a4:ff:83:ef:ad:bb:cd:17:02:64:45:31:9d:
                    07:c4:36:de:cc:f6:b5:2a:ec:98:40:fd:3e:2c:b9:
                    10:6f:35:17:c9:f8:ac:ef:34:e3:ab:a8:01:18:96:
                    a9:aa:47:f7:f4:40:1a:d0:57:a0:af:81:a3:c9:4f:
                    65:75:63:89:e6:7d:fa:79:a2:60:41:cb:8f:32:84:
                    c1:43:c2:dd:99:2d:30:73:aa:da:25:be:fe:cf:8d:
                    d2:b4:4d:16:4c:05:2b:5b:6d:d2:47:22:dd:f9:96:
                    88:83:2d:be:14:e4:98:ba:0b:50:02:7d:e7:5d:79:
                    1e:0b:25:49:a0:4a:7f:50:46:0f:f1:2d:37:d8:5e:
                    b5:bf:7a:e0:7a:cc:a8:ed:b5:19:6d:aa:c1:ea:af:
                    b7:8a:12:15:1e:43:79:65:87:96:2b:41:b4:9f:d5:
                    79:4e:83:d8:6c:0c:14:e7:79:fc:cb:e1:e7:5c:1d:
                    bd:c0:de:b0:f4:af:c2:97:1a:f3:ab:41:bd:e6:50:
                    c3:dd:45:b8:b8:a2:40:cb:6b:8e:9b:c4:65:25:99:
                    e6:9e:5a:eb:6b:b7:36:2c:4e:ac:e7:64:12:f5:d3:
                    d2:1e:96:fd:fc:5c:d9:24:11:81:28:be:45:f0:1d:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8D:4C:FA:94:BF:44:FD:A3:AF:5C:12:70:C5:AF:D3:43:2A:6D:5D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9933021E9EEF11F1B0AE49CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.4.0/22
                  45.198.64.0-45.198.66.255
                  45.198.70.0/23
                  45.198.74.0-45.198.76.255
                  45.198.80.0/24
                  45.198.83.0/24
                  45.198.85.0-45.198.86.255
                  45.202.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:41:97:8f:bf:7c:c4:19:8a:0d:4c:fc:08:5e:62:37:3d:27:
         d3:e6:e5:f7:42:0b:80:a4:10:9b:1d:7e:6a:b5:90:20:3d:24:
         3e:d8:77:f8:da:46:92:c5:89:d5:ff:12:80:2f:0e:6e:5a:3d:
         fa:3a:be:cc:7d:8e:c5:7f:74:de:0b:8d:8c:0e:dd:33:26:a2:
         2f:ff:25:ed:20:63:4f:50:a8:9a:d2:57:5e:b8:1d:e7:63:f2:
         dc:12:0d:64:f0:de:2e:5c:4f:ab:dc:f5:6b:19:7b:d5:53:6c:
         fb:9e:da:12:1b:bd:3b:c0:79:bc:e0:0a:d3:34:f4:a3:01:fc:
         ab:55:40:0e:05:3d:29:dc:72:b7:94:07:4a:7d:81:32:54:d6:
         11:94:a6:ef:33:da:05:75:4e:33:53:5e:ab:f4:23:a2:27:f6:
         dd:f5:e8:0b:22:7f:4f:d6:1b:81:66:8d:8f:99:4f:b0:a5:72:
         2e:59:ac:61:c2:1d:a0:8d:1c:d0:1b:55:b2:42:e0:7f:48:db:
         1e:e7:84:b3:bc:3b:54:1f:b9:ac:a3:51:4e:7f:02:dd:65:5c:
         ed:46:4b:1f:a8:44:d0:f8:54:b8:b0:31:a8:0f:b3:2d:d2:73:
         a1:71:73:97:c2:94:d7:a4:b9:10:6e:f7:75:b9:a6:40:2e:94:
         f9:74:d9:5a
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIDAdAoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODIzMTIzODQ4WhcNMjgwNDExMTIzODQ4WjAYMRYw
FAYDVQQDEw02YThhZTlkZC1kMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt4WHMsqUrlwpBcW4+x412qT/g++tu80XAmRFMZ0HxDbezPa1KuyYQP0+
LLkQbzUXyfis7zTjq6gBGJapqkf39EAa0Fegr4GjyU9ldWOJ5n36eaJgQcuPMoTB
Q8LdmS0wc6raJb7+z43StE0WTAUrW23SRyLd+ZaIgy2+FOSYugtQAn3nXXkeCyVJ
oEp/UEYP8S032F61v3rgesyo7bUZbarB6q+3ihIVHkN5ZYeWK0G0n9V5ToPYbAwU
53n8y+HnXB29wN6w9K/Clxrzq0G95lDD3UW4uKJAy2uOm8RlJZnmnlrra7c2LE6s
52QS9dPSHpb9/FzZJBGBKL5F8B2SOwIDAQABo4IC5DCCAuAwHQYDVR0OBBYEFLCN
TPqUv0T9o69cEnDFr9NDKm1dMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OTMzMDIxRTlFRUYxMUYxQjBBRTQ5Q0JDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCLcAEMAwDBAYtxkADBAAtxkID
BAEtxkYwDAMEAS3GSgMEAC3GTAMEAC3GUAMEAC3GUzAMAwQALcZVAwQALcZWAwQB
LcpkMA0GCSqGSIb3DQEBCwUAA4IBAQAUQZePv3zEGYoNTPwIXmI3PSfT5uX3QguA
pBCbHX5qtZAgPSQ+2Hf42kaSxYnV/xKALw5uWj36Or7MfY7Ff3TeC42MDt0zJqIv
/yXtIGNPUKia0ldeuB3nY/LcEg1k8N4uXE+r3PVrGXvVU2z7ntoSG707wHm84ArT
NPSjAfyrVUAOBT0p3HK3lAdKfYEyVNYRlKbvM9oFdU4zU16r9COiJ/bd9egLIn9P
1huBZo2PmU+wpXIuWaxhwh2gjRzQG1WyQuB/SNse54SzvDtUH7mso1FOfwLdZVzt
RksfqETQ+FS4sDGoD7Mt0nOhcXOXwpTXpLkQbvd1uaZALpT5dNla
-----END CERTIFICATE-----