Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9D94562C30111F19C08A1D9CE1D38B0.roa
File:                     E9D94562C30111F19C08A1D9CE1D38B0.roa (raw, json)
Hash identifier:          QuKDtv0hPnhf+86JgW8maUSQrcqgNUL/2S5jb5B8qHw=
Subject key identifier:   71:89:A6:A5:C2:3B:24:E9:FC:C8:D9:A9:E5:33:54:D6:C5:02:7D:3D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9D94562C30111F19C08A1D9CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 10:20:41 +0000
ROA not before:           Thu 08 Oct 2026 10:20:37 +0000
ROA not after:            Sat 28 Nov 2026 10:20:37 +0000
asID:                     198566
IP address blocks:        45.199.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121818 (0x1dbda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  8 10:20:37 2026 GMT
            Not After : Nov 28 10:20:37 2026 GMT
        Subject: CN=6ac76e79-c5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:63:9b:5e:69:ae:39:b1:ab:20:64:0b:a4:19:
                    e9:c2:0d:34:fc:7c:91:51:d3:31:0f:4f:b8:95:88:
                    94:51:94:33:74:a7:4c:45:12:46:81:a1:12:04:28:
                    b9:c6:1b:7a:01:d9:25:2c:13:7e:59:b1:7c:67:f2:
                    56:aa:57:3e:f7:8f:cb:3c:5b:77:f6:b1:15:93:57:
                    a1:bb:2e:75:59:27:3b:42:e9:0e:04:7d:dd:41:c5:
                    11:48:c8:bb:54:5c:7a:f7:1f:a0:d4:91:03:b7:cd:
                    07:0c:0c:dc:0e:b3:f3:b9:73:38:bf:67:30:c1:0f:
                    7b:17:93:45:6c:fe:4d:56:59:45:ef:6c:bb:22:cf:
                    ce:0a:ac:e7:f0:e8:4a:af:ef:1d:1f:e5:3d:82:f6:
                    40:3f:dc:3f:fd:d0:06:36:67:2a:91:3b:1c:89:75:
                    af:81:95:53:60:96:4a:4e:89:46:fb:47:24:89:9b:
                    4b:dd:4d:0f:53:40:c0:99:9a:0e:3a:26:3e:cb:1c:
                    e4:92:d7:41:8a:3a:e2:5f:e7:62:e2:3b:9b:4a:23:
                    74:67:d8:ed:dd:81:7e:f2:0e:b6:cf:90:9c:2c:67:
                    62:41:23:7f:50:6c:b5:5e:eb:ac:f4:5d:7b:31:19:
                    df:39:55:69:31:1c:d6:f9:64:eb:75:57:6b:34:b4:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:89:A6:A5:C2:3B:24:E9:FC:C8:D9:A9:E5:33:54:D6:C5:02:7D:3D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9D94562C30111F19C08A1D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:66:f6:82:9b:9b:96:fa:75:9f:69:63:3e:88:98:ae:7e:d6:
         2a:f7:8a:28:38:f7:f8:a0:04:31:2b:b5:30:26:c4:68:80:c1:
         90:6b:24:42:d3:cd:4d:cb:10:cd:a6:68:bc:e1:f7:9b:5e:cd:
         ba:77:e0:07:7a:a0:7b:e5:a6:e0:46:18:ea:76:29:78:78:2e:
         0e:bc:da:26:0d:cd:1f:32:43:55:a5:22:97:80:06:de:95:d7:
         66:87:9b:84:c5:50:fd:cc:e1:33:28:cf:e5:c1:19:8e:51:cc:
         96:0e:ac:47:ee:e6:60:02:cf:46:cb:52:0c:84:d6:99:48:0e:
         39:1d:84:55:5f:6e:fa:f4:3e:7b:49:ae:2e:5d:52:66:37:63:
         eb:0a:1c:63:96:cd:36:db:6e:c2:51:46:d7:87:3f:02:84:2d:
         e8:bd:0d:00:8f:ef:46:f8:7a:78:8f:88:75:18:e7:f7:d2:01:
         64:cf:34:7b:05:1d:b5:53:d6:ab:64:7a:49:50:37:58:b2:4c:
         39:eb:7b:bc:71:b7:bc:5d:b3:fc:ba:d5:d4:4a:dd:f4:b7:5a:
         0c:d7:c5:66:75:cf:c0:32:f3:5e:0a:f3:d1:50:47:67:6a:70:
         8e:f5:5a:bd:48:a7:74:1e:6f:4e:83:10:47:7f:9a:de:f8:ed:
         2f:92:cf:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdvaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA4MTAyMDM3WhcNMjYxMTI4MTAyMDM3WjAYMRYw
FAYDVQQDEw02YWM3NmU3OS1jNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA72ObXmmuObGrIGQLpBnpwg00/HyRUdMxD0+4lYiUUZQzdKdMRRJGgaES
BCi5xht6AdklLBN+WbF8Z/JWqlc+94/LPFt39rEVk1ehuy51WSc7QukOBH3dQcUR
SMi7VFx69x+g1JEDt80HDAzcDrPzuXM4v2cwwQ97F5NFbP5NVllF72y7Is/OCqzn
8OhKr+8dH+U9gvZAP9w//dAGNmcqkTsciXWvgZVTYJZKTolG+0ckiZtL3U0PU0DA
mZoOOiY+yxzkktdBijriX+di4jubSiN0Z9jt3YF+8g62z5CcLGdiQSN/UGy1Xuus
9F17MRnfOVVpMRzW+WTrdVdrNLR2GQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHGJ
pqXCOyTp/MjZqeUzVNbFAn09MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOUQ5NDU2MkMzMDExMUYxOUMwOEExRDlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceaMA0GCSqGSIb3DQEBCwUA
A4IBAQBoZvaCm5uW+nWfaWM+iJiuftYq94ooOPf4oAQxK7UwJsRogMGQayRC081N
yxDNpmi84febXs26d+AHeqB75abgRhjqdil4eC4OvNomDc0fMkNVpSKXgAbelddm
h5uExVD9zOEzKM/lwRmOUcyWDqxH7uZgAs9Gy1IMhNaZSA45HYRVX2769D57Sa4u
XVJmN2PrChxjls02227CUUbXhz8ChC3ovQ0Aj+9G+Hp4j4h1GOf30gFkzzR7BR21
U9arZHpJUDdYskw563u8cbe8XbP8utXUSt30t1oM18Vmdc/AMvNeCvPRUEdnanCO
9Vq9SKd0Hm9OgxBHf5re+O0vks++
-----END CERTIFICATE-----