Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCBC570CCA0E11F1896FEED9CE1D38B0.roa
File:                     DCBC570CCA0E11F1896FEED9CE1D38B0.roa (raw, json)
Hash identifier:          SDM9a1scdDibuDwfBBBecAThfbAbRWpe6UCThXgIyuE=
Subject key identifier:   22:86:31:B2:C0:FD:35:F8:37:E6:FA:15:DF:FD:F5:E7:73:C6:1B:BC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCBC570CCA0E11F1896FEED9CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 09:41:01 +0000
ROA not before:           Sat 17 Oct 2026 09:40:56 +0000
ROA not after:            Mon 26 Oct 2026 09:40:56 +0000
asID:                     140224
IP address blocks:        45.194.16.0/21 maxlen: 24
                          45.194.16.0/24 maxlen: 24
                          45.207.8.0/24 maxlen: 24
                          45.207.9.0/24 maxlen: 24
                          45.207.10.0/24 maxlen: 24
                          45.207.11.0/24 maxlen: 24
                          45.207.12.0/24 maxlen: 24
                          45.207.13.0/24 maxlen: 24
                          45.207.14.0/24 maxlen: 24
                          45.207.15.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122410 (0x1de2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 17 09:40:56 2026 GMT
            Not After : Oct 26 09:40:56 2026 GMT
        Subject: CN=6ad342ad-5979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:b4:24:79:31:a3:18:06:98:bc:74:31:02:
                    c0:a4:32:58:62:02:5d:f9:29:fb:e7:a6:53:5d:b7:
                    8c:c8:55:3f:53:d9:36:20:6f:70:a3:1b:11:86:30:
                    47:57:19:bc:fc:45:18:fe:7b:67:5e:31:5a:cb:61:
                    2c:f5:57:7d:20:8a:e2:32:89:7d:f8:02:a9:73:3b:
                    96:05:cd:58:8c:85:ba:c8:b9:6e:e9:ad:0d:66:eb:
                    b0:57:3e:c5:34:20:4b:3d:3a:5c:e7:62:01:bd:ea:
                    3b:dd:54:60:94:bc:a7:4b:b2:bc:32:19:69:4b:80:
                    a0:db:98:77:07:10:30:01:73:94:38:94:b7:79:ab:
                    28:fc:2a:08:5f:87:2a:f6:40:ee:e7:01:2a:f7:56:
                    70:c7:8d:01:43:44:0e:37:9b:3b:2c:81:b1:3e:c2:
                    ad:6c:4e:a1:a7:2d:d8:c8:c0:15:de:ce:c4:c0:c2:
                    cc:79:22:99:29:62:a2:ff:3d:0d:9b:a1:0b:8b:5f:
                    25:f6:c9:ec:7b:71:fb:e3:d5:bd:16:6a:89:aa:20:
                    de:a7:16:68:f8:13:c8:84:af:d3:ba:c9:a3:7c:63:
                    2f:96:1a:ec:06:7a:ff:4a:24:bf:f3:18:75:a2:e9:
                    c7:17:4f:66:8c:91:16:95:13:c4:dc:7a:5a:6b:50:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:86:31:B2:C0:FD:35:F8:37:E6:FA:15:DF:FD:F5:E7:73:C6:1B:BC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCBC570CCA0E11F1896FEED9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:f2:d9:ed:ff:ee:f1:44:7a:2e:2d:9c:45:9c:32:fa:73:
         bd:0f:95:3d:12:01:cb:35:dd:78:16:50:4c:82:31:ee:ab:81:
         7a:4e:1a:bc:18:b6:28:b3:6e:c4:56:60:8e:c8:5f:51:8e:ab:
         e4:9f:f4:1b:e0:51:b4:a7:e2:b4:f5:0b:c8:87:ce:bc:f6:24:
         40:a1:2b:1e:2d:f1:43:fb:7c:98:75:a8:18:c6:03:a6:2c:6f:
         dd:17:67:66:fb:9f:03:89:6e:73:72:7e:56:6a:26:db:ae:d7:
         9b:22:3c:d0:28:96:9f:84:1e:c8:4c:ce:75:84:cd:8c:3a:9e:
         7c:5b:c4:cb:60:64:0d:b7:c0:a1:c7:ee:89:7a:ce:e3:45:a6:
         f6:c5:91:03:d2:b2:b5:ce:46:a6:a6:3d:d8:9d:15:b7:8c:7c:
         06:b1:65:d8:d4:ea:56:68:3b:cc:09:0d:85:56:d8:fe:31:0c:
         94:77:27:1c:af:a1:30:9a:d1:76:11:bc:ac:09:ad:45:97:1b:
         01:a6:4b:29:a0:d3:58:11:3f:0e:24:ac:82:cf:2a:3b:15:32:
         6c:ae:ad:7b:4e:9b:32:26:b4:21:83:72:be:f4:b9:ce:0f:04:
         b2:f1:d8:92:6b:9b:bb:27:7d:53:12:25:12:b1:55:db:fe:cc:
         f7:c4:c7:c5
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAd4qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDE3MDk0MDU2WhcNMjYxMDI2MDk0MDU2WjAYMRYw
FAYDVQQDEw02YWQzNDJhZC01OTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwru0JHkxoxgGmLx0MQLApDJYYgJd+Sn756ZTXbeMyFU/U9k2IG9woxsR
hjBHVxm8/EUY/ntnXjFay2Es9Vd9IIriMol9+AKpczuWBc1YjIW6yLlu6a0NZuuw
Vz7FNCBLPTpc52IBveo73VRglLynS7K8MhlpS4Cg25h3BxAwAXOUOJS3easo/CoI
X4cq9kDu5wEq91Zwx40BQ0QON5s7LIGxPsKtbE6hpy3YyMAV3s7EwMLMeSKZKWKi
/z0Nm6ELi18l9snse3H749W9FmqJqiDepxZo+BPIhK/TusmjfGMvlhrsBnr/SiS/
8xh1ounHF09mjJEWlRPE3Hpaa1Av0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKG
MbLA/TX4N+b6Fd/99edzxhu8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQ0JDNTcwQ0NBMEUxMUYxODk2RkVFRDlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLcIQAwQDLc8IMA0GCSqGSIb3
DQEBCwUAA4IBAQBWPfLZ7f/u8UR6Li2cRZwy+nO9D5U9EgHLNd14FlBMgjHuq4F6
Thq8GLYos27EVmCOyF9Rjqvkn/Qb4FG0p+K09QvIh8689iRAoSseLfFD+3yYdagY
xgOmLG/dF2dm+58DiW5zcn5WaibbrtebIjzQKJafhB7ITM51hM2MOp58W8TLYGQN
t8Chx+6Jes7jRab2xZED0rK1zkampj3YnRW3jHwGsWXY1OpWaDvMCQ2FVtj+MQyU
dyccr6EwmtF2EbysCa1FlxsBpkspoNNYET8OJKyCzyo7FTJsrq17TpsyJrQhg3K+
9LnODwSy8diSa5u7J31TEiUSsVXb/sz3xMfF
-----END CERTIFICATE-----