Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07A3E00A12811F1992FE4CECE1D38B0.roa
File:                     D07A3E00A12811F1992FE4CECE1D38B0.roa (raw, json)
Hash identifier:          UA0IpXdlbw+pJ/Z6ho4Ex8zCRujLbmAbCU0gYOpHHeg=
Subject key identifier:   92:58:E4:63:E1:40:54:18:84:74:47:5E:F0:60:D2:72:5C:5A:E1:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D101
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07A3E00A12811F1992FE4CECE1D38B0.roa
Signing time:             Wed 26 Aug 2026 08:33:30 +0000
ROA not before:           Wed 26 Aug 2026 08:33:25 +0000
ROA not after:            Mon 05 Oct 2026 08:33:25 +0000
asID:                     61112
IP address blocks:        45.207.34.0/23 maxlen: 24
                          45.207.40.0/24 maxlen: 24
                          45.207.41.0/24 maxlen: 24
                          45.207.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119041 (0x1d101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 08:33:25 2026 GMT
            Not After : Oct  5 08:33:25 2026 GMT
        Subject: CN=6a8ea4da-fea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:2a:3d:f1:89:6f:2d:35:26:e0:af:70:cc:
                    18:a5:63:db:c0:d3:5d:64:90:4c:25:8e:07:71:ff:
                    e1:d9:58:cd:a5:c4:ad:93:3a:fe:21:37:f6:ae:63:
                    ba:bf:4c:12:b1:5c:fd:81:8b:30:3a:e0:24:66:9b:
                    e0:01:83:7d:82:f7:d5:d2:e3:ad:ca:ee:3d:b5:80:
                    73:cc:56:05:1d:e5:b1:8a:41:a4:cf:12:87:0b:32:
                    34:f9:67:ef:c4:d3:14:13:8b:77:9f:d7:0a:54:a8:
                    33:8c:e1:37:d7:b8:e4:96:b5:23:0d:4d:fb:8a:d2:
                    2c:ad:b4:d2:c4:4f:e2:16:c6:0c:8c:24:77:a9:38:
                    06:52:ae:d0:20:5c:29:ca:0d:56:4d:a3:55:6c:84:
                    91:c0:9a:39:83:57:ce:2f:a2:44:55:bd:c6:cb:8a:
                    55:d3:70:16:b4:c5:d9:f2:91:ec:b6:ab:d4:34:c4:
                    ea:95:2a:11:1a:d1:a1:17:4e:91:3e:1b:4b:8d:1d:
                    3a:94:8d:8c:9f:7e:e1:e8:22:32:65:c5:45:99:a9:
                    30:02:5c:81:57:a8:17:a9:ce:73:36:78:4d:33:fe:
                    2f:07:9b:24:f7:53:96:98:4a:ec:94:e5:92:48:aa:
                    db:cc:fc:6c:37:cf:1d:d9:9e:4f:ef:88:4d:7f:82:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:58:E4:63:E1:40:54:18:84:74:47:5E:F0:60:D2:72:5C:5A:E1:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07A3E00A12811F1992FE4CECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.34.0/23
                  45.207.40.0/23
                  45.207.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c2:90:dc:28:d6:57:df:69:5e:30:83:7d:88:ac:de:ad:dc:
         f9:25:b5:0d:4c:2b:51:67:23:b8:7a:64:52:fa:e1:8a:9b:40:
         99:78:e8:98:b0:25:9a:3a:d8:31:55:6d:73:6a:c6:55:c5:75:
         0c:67:da:88:c9:08:3d:0d:bf:8b:d1:e7:d3:99:a2:0f:b7:e2:
         91:24:7c:0d:18:92:21:a5:65:b4:63:06:bb:23:47:f9:ec:3f:
         42:9d:2a:9a:62:df:5d:a4:af:c1:94:73:2b:2f:d1:62:e3:58:
         a4:ad:08:a4:96:92:3e:93:89:6d:aa:a9:15:98:a7:99:3c:98:
         66:87:20:92:b1:12:1a:43:b4:fa:90:05:fd:f8:25:ef:3b:00:
         30:5e:c1:d2:fe:b1:2e:e4:26:45:2d:ca:ff:0f:0e:dc:8e:78:
         2d:8b:d0:a9:17:eb:5a:b3:3c:b3:9b:7e:15:da:c1:e2:24:f8:
         79:dc:cd:b7:d4:b3:56:47:c3:ca:04:9c:09:b7:87:c1:3f:2c:
         b0:71:88:ac:f6:10:22:01:48:be:ee:59:54:54:29:ca:4c:a2:
         84:21:0d:c2:79:3c:99:48:c7:e5:4f:0e:5f:b5:5a:80:9c:84:
         ff:08:e8:35:59:eb:9c:2b:f9:ef:38:3d:b1:09:53:67:c8:2e:
         4f:de:58:af
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAdEBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI2MDgzMzI1WhcNMjYxMDA1MDgzMzI1WjAYMRYw
FAYDVQQDEw02YThlYTRkYS1mZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0jcqPfGJby01JuCvcMwYpWPbwNNdZJBMJY4Hcf/h2VjNpcStkzr+ITf2
rmO6v0wSsVz9gYswOuAkZpvgAYN9gvfV0uOtyu49tYBzzFYFHeWxikGkzxKHCzI0
+WfvxNMUE4t3n9cKVKgzjOE317jklrUjDU37itIsrbTSxE/iFsYMjCR3qTgGUq7Q
IFwpyg1WTaNVbISRwJo5g1fOL6JEVb3Gy4pV03AWtMXZ8pHstqvUNMTqlSoRGtGh
F06RPhtLjR06lI2Mn37h6CIyZcVFmakwAlyBV6gXqc5zNnhNM/4vB5sk91OWmErs
lOWSSKrbzPxsN88d2Z5P74hNf4IAsQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFJJY
5GPhQFQYhHRHXvBg0nJcWuHDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMDdBM0UwMEExMjgxMUYxOTkyRkU0Q0VDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLc8iAwQBLc8oAwQALc87MA0G
CSqGSIb3DQEBCwUAA4IBAQBdwpDcKNZX32leMIN9iKzerdz5JbUNTCtRZyO4emRS
+uGKm0CZeOiYsCWaOtgxVW1zasZVxXUMZ9qIyQg9Db+L0efTmaIPt+KRJHwNGJIh
pWW0Ywa7I0f57D9CnSqaYt9dpK/BlHMrL9Fi41ikrQiklpI+k4ltqqkVmKeZPJhm
hyCSsRIaQ7T6kAX9+CXvOwAwXsHS/rEu5CZFLcr/Dw7cjngti9CpF+taszyzm34V
2sHiJPh53M231LNWR8PKBJwJt4fBPyywcYis9hAiAUi+7llUVCnKTKKEIQ3CeTyZ
SMflTw5ftVqAnIT/COg1WeucK/nvOD2xCVNnyC5P3liv
-----END CERTIFICATE-----