Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0D7F0AA9FA911F18379D5B4CE1D38B0.roa
File:                     A0D7F0AA9FA911F18379D5B4CE1D38B0.roa (raw, json)
Hash identifier:          50CJ5fiiRn/jwrvfJhetdFn2CXzTypLA6ghgcK2jMA4=
Subject key identifier:   E5:96:91:64:69:D5:EB:C9:89:6A:7A:7D:CF:CE:CB:45:AD:CC:1D:58
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D09A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0D7F0AA9FA911F18379D5B4CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:50:32 +0000
ROA not before:           Mon 24 Aug 2026 10:50:28 +0000
ROA not after:            Mon 28 Sep 2026 10:50:28 +0000
asID:                     18229
IP address blocks:        45.198.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118938 (0x1d09a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 10:50:28 2026 GMT
            Not After : Sep 28 10:50:28 2026 GMT
        Subject: CN=6a8c21f8-be60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:7d:84:61:15:db:73:bd:44:ee:b1:b1:5e:
                    64:18:6c:87:92:9b:47:a2:d9:9f:61:68:eb:c7:50:
                    45:84:d4:15:cf:ef:e4:7e:49:ac:df:07:db:35:81:
                    35:e1:69:4d:fe:9e:f2:69:8f:0d:d1:cb:09:ad:5b:
                    54:0d:fd:a4:20:6d:2a:b6:c0:e1:74:24:b1:73:07:
                    af:15:7b:6d:06:3a:45:99:95:69:37:1b:bb:e1:ce:
                    a8:05:84:49:74:d6:22:af:93:b4:a7:d8:ed:3c:e1:
                    27:b4:6f:86:6e:57:15:bb:4e:0b:65:8b:43:58:19:
                    aa:60:ae:5f:df:b8:33:b2:f0:4e:89:a4:3b:a7:9c:
                    58:46:78:1e:28:b5:71:bc:f0:1e:b6:c8:18:07:90:
                    1b:f0:aa:7e:ec:63:d0:4b:d0:57:67:55:1d:f9:90:
                    27:4d:a8:b9:19:dc:a9:20:98:4d:2d:4a:36:7c:22:
                    5f:6f:7f:97:da:85:47:de:16:05:b7:30:61:97:cc:
                    5a:12:b1:a2:30:25:e3:12:fd:ac:8c:53:03:e8:fe:
                    9a:3a:ab:6a:15:f0:a7:66:7c:b3:da:b8:07:d4:6b:
                    5e:5e:e9:d5:5f:c3:4a:1b:12:19:93:ff:83:14:0c:
                    f2:53:ab:76:c5:46:bd:4b:30:a5:98:4c:61:e3:63:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:96:91:64:69:D5:EB:C9:89:6A:7A:7D:CF:CE:CB:45:AD:CC:1D:58
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0D7F0AA9FA911F18379D5B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:4f:e4:89:57:f4:51:4e:62:e0:00:06:c9:1f:24:cc:fb:ad:
         21:ac:f9:a3:a0:c8:d6:5a:37:a1:f0:87:c3:a7:17:18:6e:2f:
         e9:bd:7d:67:a2:04:26:05:a6:60:d3:97:38:a4:df:63:f9:2a:
         d3:f3:39:20:6f:5d:ad:2b:a7:25:2f:d9:83:d4:a6:01:38:72:
         24:98:25:5e:85:5d:cc:e6:c0:6d:27:a1:cf:40:55:c9:0b:39:
         a6:af:97:f4:a9:a9:6d:8c:5a:21:64:89:9c:58:2f:74:47:96:
         0e:37:f3:4b:07:c7:de:a7:2c:f5:c6:cb:a1:44:a0:19:90:8d:
         3d:18:49:50:83:9c:bc:b5:c2:dc:c8:de:0a:16:ba:3a:81:14:
         da:4e:2f:b7:0f:0c:93:25:18:c2:fb:f1:f5:0d:af:b0:16:18:
         26:7b:b7:6a:9e:f0:bb:a8:38:a3:ad:fd:ef:fe:78:36:00:cb:
         ec:08:86:83:76:2c:1d:ac:c1:ba:85:a2:1d:d8:e9:51:5a:5b:
         e1:0d:cf:4c:e1:ef:c1:bf:03:24:e8:fc:df:ab:43:e5:3e:b7:
         01:2e:86:65:c0:b1:54:06:6a:27:30:82:a8:13:e6:40:25:77:
         1e:61:04:df:21:a0:16:29:1a:62:5a:cf:e4:b4:d7:1f:01:4a:
         a3:9f:fb:b3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdCaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI0MTA1MDI4WhcNMjYwOTI4MTA1MDI4WjAYMRYw
FAYDVQQDEw02YThjMjFmOC1iZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtTp9hGEV23O9RO6xsV5kGGyHkptHotmfYWjrx1BFhNQVz+/kfkms3wfb
NYE14WlN/p7yaY8N0csJrVtUDf2kIG0qtsDhdCSxcwevFXttBjpFmZVpNxu74c6o
BYRJdNYir5O0p9jtPOEntG+GblcVu04LZYtDWBmqYK5f37gzsvBOiaQ7p5xYRnge
KLVxvPAetsgYB5Ab8Kp+7GPQS9BXZ1Ud+ZAnTai5GdypIJhNLUo2fCJfb3+X2oVH
3hYFtzBhl8xaErGiMCXjEv2sjFMD6P6aOqtqFfCnZnyz2rgH1GteXunVX8NKGxIZ
k/+DFAzyU6t2xUa9SzClmExh42MSfQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOWW
kWRp1evJiWp6fc/Oy0WtzB1YMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMEQ3RjBBQTlGQTkxMUYxODM3OUQ1QjRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcbBMA0GCSqGSIb3DQEBCwUA
A4IBAQAYT+SJV/RRTmLgAAbJHyTM+60hrPmjoMjWWjeh8IfDpxcYbi/pvX1nogQm
BaZg05c4pN9j+SrT8zkgb12tK6clL9mD1KYBOHIkmCVehV3M5sBtJ6HPQFXJCzmm
r5f0qaltjFohZImcWC90R5YON/NLB8fepyz1xsuhRKAZkI09GElQg5y8tcLcyN4K
Fro6gRTaTi+3DwyTJRjC+/H1Da+wFhgme7dqnvC7qDijrf3v/ng2AMvsCIaDdiwd
rMG6haId2OlRWlvhDc9M4e/BvwMk6Pzfq0PlPrcBLoZlwLFUBmonMIKoE+ZAJXce
YQTfIaAWKRpiWs/ktNcfAUqjn/uz
-----END CERTIFICATE-----