Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAF120EEA12211F1BF1BB5A9CE1D38B0.roa
File:                     CAF120EEA12211F1BF1BB5A9CE1D38B0.roa (raw, json)
Hash identifier:          +q0nEWBIpavO+BG9lK9Cmd0Ya9Ux1WKAkk7XicfkoPk=
Subject key identifier:   00:5E:57:0F:24:54:75:45:3E:17:37:A3:CC:4F:1B:5A:04:77:D6:3E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAF120EEA12211F1BF1BB5A9CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 07:50:23 +0000
ROA not before:           Wed 26 Aug 2026 07:50:19 +0000
ROA not after:            Thu 10 Sep 2026 07:50:19 +0000
asID:                     54801
IP address blocks:        45.200.14.0/23 maxlen: 24
                          45.200.16.0/23 maxlen: 24
                          45.200.18.0/23 maxlen: 24
                          45.200.20.0/22 maxlen: 24
                          45.200.24.0/21 maxlen: 24
                          45.200.32.0/19 maxlen: 24
                          45.200.49.0/24 maxlen: 24
                          45.201.214.0/23 maxlen: 24
                          45.201.216.0/21 maxlen: 24
                          45.201.224.0/21 maxlen: 24
                          45.201.240.0/20 maxlen: 24
                          45.204.0.0/24 maxlen: 24
                          45.207.224.0/19 maxlen: 24
                          45.207.224.0/20 maxlen: 24
                          45.207.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119027 (0x1d0f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 07:50:19 2026 GMT
            Not After : Sep 10 07:50:19 2026 GMT
        Subject: CN=6a8e9abf-7e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:b8:c0:21:89:95:cb:82:1b:aa:32:8c:08:
                    13:4c:7c:16:81:57:66:54:37:ba:11:6e:e3:3b:2c:
                    3a:6a:5e:b0:46:f0:2a:8e:47:1d:ae:09:45:cc:37:
                    28:ee:1b:5f:0c:37:f3:fc:b4:ae:f2:67:7d:a0:96:
                    dd:77:a0:5a:37:c1:df:40:73:32:14:19:9b:07:5b:
                    5b:44:cf:dc:10:eb:54:a5:2b:8d:2a:d7:45:c4:ca:
                    ed:33:2c:ce:83:02:54:a3:4d:ad:67:87:fb:ab:ea:
                    84:94:e9:ff:f8:d3:b3:b9:23:b1:f6:d1:56:59:f4:
                    73:97:1d:48:ac:68:12:8f:8c:54:b1:6e:80:7d:e7:
                    74:d2:20:e0:c1:40:43:cc:a6:c7:63:79:14:b8:7a:
                    83:ad:f9:a0:d0:cc:60:46:20:43:f3:bf:b6:ef:76:
                    ea:db:63:ab:ee:40:b6:f8:2e:37:f3:8c:8f:da:b7:
                    78:f6:78:18:7a:b7:2a:ab:30:be:4d:2e:e3:2c:bf:
                    80:be:41:2d:cd:07:1a:2c:17:4f:79:b4:54:70:be:
                    de:9e:6b:0d:c3:0e:47:81:c8:91:77:0e:8e:98:3f:
                    e6:1f:1b:99:eb:d1:de:5b:93:8b:90:ab:f2:59:14:
                    21:88:33:16:98:d9:ea:bc:f2:e0:81:3a:ac:88:85:
                    8b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5E:57:0F:24:54:75:45:3E:17:37:A3:CC:4F:1B:5A:04:77:D6:3E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAF120EEA12211F1BF1BB5A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.14.0-45.200.63.255
                  45.201.214.0-45.201.231.255
                  45.201.240.0/20
                  45.204.0.0/24
                  45.207.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:5c:e8:f4:41:75:ed:a8:6e:69:5e:d9:e0:76:75:40:57:
         8c:86:17:64:ef:c4:ac:6e:dc:b6:df:98:14:13:a6:b6:d3:51:
         00:34:d3:7e:f5:92:d1:19:42:a2:6f:7b:11:6e:fc:e0:3f:0e:
         6d:df:25:61:8e:b0:cc:f2:7b:d5:dd:26:54:df:fd:24:93:7a:
         22:b3:77:57:7f:ab:4d:b3:b6:a2:d1:b5:48:ae:00:02:ea:6b:
         7f:5f:30:85:16:66:fb:8b:49:70:d4:ca:9c:f3:d0:e9:47:e5:
         23:bb:24:0a:22:ed:88:5f:1b:53:a5:b3:71:f2:5b:9a:0b:64:
         09:6a:e9:b6:f0:f6:5d:28:09:c7:dc:9e:61:79:b3:3b:43:c7:
         cf:93:22:6c:a5:3e:36:40:36:41:3b:e5:41:b7:97:4b:e0:6e:
         f8:6d:0a:3c:a1:7e:54:f4:a7:24:c1:ba:a0:19:83:f5:d6:e9:
         11:b1:09:c7:b6:57:ab:0d:b0:d7:f7:c0:15:7c:bb:d0:d9:db:
         2d:8f:ae:66:c9:09:88:aa:44:99:bf:e5:0a:41:51:0a:14:85:
         a8:90:6e:e9:76:92:ed:c4:0a:6c:68:b1:b3:59:fd:2a:2b:c8:
         6f:8e:25:bb:2b:08:26:fd:df:9c:64:bc:8b:29:c5:58:ab:88:
         0a:5c:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----