Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B198F948909F11F1BD970DD2CE1D38B0.roa
File:                     B198F948909F11F1BD970DD2CE1D38B0.roa (raw, json)
Hash identifier:          rV/8gRFFFj9UNb9ZN1bxx+nvtucBaorZDt0WonNchI8=
Subject key identifier:   3D:89:93:62:A6:9F:B1:20:A4:1C:8B:91:7A:2D:13:62:7E:29:79:60
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B198F948909F11F1BD970DD2CE1D38B0.roa
Signing time:             Wed 05 Aug 2026 07:31:38 +0000
ROA not before:           Wed 05 Aug 2026 07:31:34 +0000
ROA not after:            Tue 15 Sep 2026 07:31:34 +0000
asID:                     214941
IP address blocks:        45.195.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117179 (0x1c9bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  5 07:31:34 2026 GMT
            Not After : Sep 15 07:31:34 2026 GMT
        Subject: CN=6a72e6da-bc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:30:09:9f:56:a1:37:4c:6e:86:13:f4:77:
                    92:67:1c:a2:3c:9d:82:d3:7f:8a:c7:27:dc:28:bc:
                    24:64:e0:bd:0b:31:42:f3:1a:3f:de:51:18:15:28:
                    82:cc:2c:f9:70:8b:7a:2b:82:a2:b8:d7:b4:89:f9:
                    bc:3e:b0:50:34:70:f9:c4:88:98:7b:37:23:52:15:
                    05:27:7d:e1:f3:07:17:65:b5:58:3c:9a:ae:db:6e:
                    e3:68:cc:e1:40:32:2f:8c:cc:ec:bc:ce:c1:a5:0f:
                    c0:d9:0c:5d:64:47:1e:c3:06:51:8f:9d:b0:ff:d2:
                    fe:b8:eb:a4:f8:d6:e1:3c:36:36:54:15:20:58:2c:
                    a2:57:4c:a3:71:a2:75:5e:4f:60:3f:a8:ce:09:61:
                    ae:3e:0d:c3:77:3a:27:32:fb:21:85:36:73:18:0e:
                    e9:64:ff:3c:f2:26:aa:ca:fd:a1:f5:45:70:08:48:
                    e4:c1:01:32:c3:9f:cd:41:ab:24:97:74:b8:dd:ff:
                    3d:89:dd:41:fd:b8:01:f5:5e:b6:59:ba:f4:06:c4:
                    a7:3b:98:b8:aa:2f:c4:29:39:5e:34:24:3d:c4:04:
                    da:f2:27:fe:8b:39:f4:a2:dd:33:b7:b8:b2:27:4c:
                    67:ab:e0:45:ac:ba:cc:6e:e0:07:7d:be:b1:45:2b:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:89:93:62:A6:9F:B1:20:A4:1C:8B:91:7A:2D:13:62:7E:29:79:60
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B198F948909F11F1BD970DD2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b3:1d:88:83:5d:b8:26:ca:3a:d0:1b:7c:6d:1d:61:ff:2a:
         c4:cf:a5:06:07:3c:c0:24:95:bb:53:fd:8c:73:6c:14:89:49:
         5b:f9:5b:26:87:5d:d6:d8:a4:e3:7e:f1:b5:fd:54:9d:18:5e:
         da:ae:4b:1b:03:af:60:4f:b5:e7:be:7e:fd:85:fe:91:47:e6:
         9d:42:81:0c:6a:6c:83:f4:0c:1c:ca:eb:67:f7:2c:8b:36:b1:
         27:6d:70:6d:50:9f:42:bd:6c:56:f2:6c:19:01:a1:f3:88:63:
         5d:6e:f9:ba:0a:f0:28:c8:9b:04:bd:f8:29:76:1b:69:a6:6a:
         45:34:4f:1e:4e:d2:31:62:b5:66:98:ac:75:fc:06:7f:d6:3b:
         6a:9a:33:5d:b2:92:c8:04:bc:58:ae:3d:e1:bf:46:c1:19:70:
         62:3d:6e:76:71:22:15:bd:6e:fe:e1:88:52:3b:d5:c9:f0:4f:
         4d:02:f4:1f:29:ea:ee:bc:3a:01:cd:e9:fb:83:57:85:a2:9a:
         f1:9b:30:9e:d1:57:cf:7a:60:09:9e:b0:31:3b:ea:1d:14:22:
         61:30:bc:23:12:76:8d:3a:55:68:86:bf:bb:d4:19:16:5b:fb:
         06:db:c8:42:a2:52:50:18:1c:23:c0:30:77:0b:32:46:2d:ee:
         58:97:c3:8d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcm7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODA1MDczMTM0WhcNMjYwOTE1MDczMTM0WjAYMRYw
FAYDVQQDEw02YTcyZTZkYS1iYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx0MwCZ9WoTdMboYT9HeSZxyiPJ2C03+KxyfcKLwkZOC9CzFC8xo/3lEY
FSiCzCz5cIt6K4KiuNe0ifm8PrBQNHD5xIiYezcjUhUFJ33h8wcXZbVYPJqu227j
aMzhQDIvjMzsvM7BpQ/A2QxdZEcewwZRj52w/9L+uOuk+NbhPDY2VBUgWCyiV0yj
caJ1Xk9gP6jOCWGuPg3DdzonMvshhTZzGA7pZP888iaqyv2h9UVwCEjkwQEyw5/N
Qaskl3S43f89id1B/bgB9V62Wbr0BsSnO5i4qi/EKTleNCQ9xATa8if+izn0ot0z
t7iyJ0xnq+BFrLrMbuAHfb6xRSvrwwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD2J
k2Kmn7EgpByLkXotE2J+KXlgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMTk4Rjk0ODkwOUYxMUYxQkQ5NzBERDJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPnMA0GCSqGSIb3DQEBCwUA
A4IBAQCCsx2Ig124Jso60Bt8bR1h/yrEz6UGBzzAJJW7U/2Mc2wUiUlb+Vsmh13W
2KTjfvG1/VSdGF7arksbA69gT7Xnvn79hf6RR+adQoEMamyD9Awcyutn9yyLNrEn
bXBtUJ9CvWxW8mwZAaHziGNdbvm6CvAoyJsEvfgpdhtppmpFNE8eTtIxYrVmmKx1
/AZ/1jtqmjNdspLIBLxYrj3hv0bBGXBiPW52cSIVvW7+4YhSO9XJ8E9NAvQfKeru
vDoBzen7g1eFoprxmzCe0VfPemAJnrAxO+odFCJhMLwjEnaNOlVohr+71BkWW/sG
28hColJQGBwjwDB3CzJGLe5Yl8ON
-----END CERTIFICATE-----