Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/B5C0EA4AB64111F1946E6910CF1D38B0.roa
File:                     B5C0EA4AB64111F1946E6910CF1D38B0.roa (raw, json)
Hash identifier:          fNFmQEHhuMHsod69TyrLA7ubSqMj3XIMoenaPvug/jM=
Subject key identifier:   48:91:15:4C:AA:68:65:34:33:78:EB:8F:D0:03:F4:45:26:BC:CD:F3
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       0311
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/B5C0EA4AB64111F1946E6910CF1D38B0.roa
Signing time:             Tue 22 Sep 2026 04:54:37 +0000
ROA not before:           Tue 22 Sep 2026 04:54:33 +0000
ROA not after:            Fri 22 Sep 2028 04:54:33 +0000
asID:                     153526
IP address blocks:        45.221.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                          rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR, serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Sep 22 04:54:33 2026 GMT
            Not After : Sep 22 04:54:33 2028 GMT
        Subject: CN=6ab20a0d-c19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:2f:a6:fa:20:6e:c5:c4:12:f5:81:0d:6f:
                    a0:d7:27:9c:4d:27:b3:d1:ac:e9:97:81:1b:47:b9:
                    d2:d7:d5:42:4b:0a:97:6b:76:5e:7b:4a:f6:16:cd:
                    04:ad:ad:62:96:00:0e:9a:aa:9e:67:25:1e:45:90:
                    08:cd:e4:73:28:52:0c:57:63:77:6d:fd:a5:08:aa:
                    2a:a4:9a:14:17:30:c7:6c:f0:11:12:33:ee:80:45:
                    9d:5e:98:09:cb:93:18:7b:98:4d:6b:6d:3d:c3:5a:
                    20:0d:86:e2:16:c2:13:28:23:8c:b6:43:3f:02:a4:
                    ea:47:a7:5c:fa:2a:0d:9b:e0:4a:b5:b6:d9:0f:40:
                    68:87:2f:e3:00:04:da:49:c5:89:19:09:a6:5e:fe:
                    49:4a:ef:d7:4b:c5:75:66:5d:1b:c5:ff:fb:48:77:
                    98:be:66:80:bc:68:4a:26:62:3f:f6:eb:5b:ff:f5:
                    75:14:bc:d1:e5:c3:88:90:a2:01:c2:d5:72:28:91:
                    95:aa:82:e8:4f:a3:da:e4:51:21:68:6b:59:0b:b7:
                    a4:2a:43:93:1d:71:ad:7d:6f:74:2b:88:f8:b7:dd:
                    49:7d:52:65:35:7a:34:4c:7a:77:d1:a2:93:85:86:
                    91:6f:81:f4:b8:c0:2a:58:9a:c0:14:3f:13:ae:88:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:91:15:4C:AA:68:65:34:33:78:EB:8F:D0:03:F4:45:26:BC:CD:F3
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/B5C0EA4AB64111F1946E6910CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:87:6e:b6:76:95:5f:81:ae:8b:b0:44:a3:ef:50:ec:25:96:
         68:86:55:10:f1:12:fd:0c:ba:d5:76:ca:70:1c:f5:1f:6a:17:
         8b:a6:19:2f:fc:7e:2b:4e:43:16:99:9e:d8:2b:01:93:b6:40:
         a9:92:0a:34:88:3e:56:98:e6:2f:55:93:ed:3c:75:07:43:95:
         86:e3:e6:02:ea:81:6a:73:0c:05:13:8d:aa:b5:40:fe:80:c4:
         1c:9b:46:e5:c8:f2:fa:b5:33:17:10:de:25:1f:c0:df:5c:bc:
         b6:57:42:e4:04:b2:14:29:e4:ab:fb:ac:73:1c:46:97:1b:8a:
         f3:c8:41:bc:b3:3d:9a:73:31:ec:b5:49:6d:a5:2f:07:14:aa:
         34:28:60:93:9c:a6:8c:f7:f8:f5:2e:73:96:05:ea:01:4a:e0:
         0b:62:00:7d:c8:6c:0f:5e:e3:5d:77:24:44:29:94:75:7a:a2:
         07:c9:c4:36:65:bc:a5:11:95:0a:70:91:cc:93:15:06:57:7d:
         26:6f:e5:d1:40:12:17:7a:ce:d3:2a:07:bd:05:ac:bf:d8:3d:
         18:20:4f:17:e5:f1:5b:f7:02:d1:65:c4:cb:38:43:9f:c8:11:
         0e:70:c1:68:70:cb:3a:92:1c:9c:a5:5f:0d:6c:6e:e6:3b:b0:
         73:bd:49:80
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDQ1NzRBUjExMC8GA1UEBRMoRjYwODYyOEE0NjgyRjU1MzgwNEFGM0FCMkU1OEEx
OUMzMEE4QUREMjAeFw0yNjA5MjIwNDU0MzNaFw0yODA5MjIwNDU0MzNaMBgxFjAU
BgNVBAMTDTZhYjIwYTBkLWMxOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJ2y+m+iBuxcQS9YENb6DXJ5xNJ7PRrOmXgRtHudLX1UJLCpdrdl57SvYW
zQStrWKWAA6aqp5nJR5FkAjN5HMoUgxXY3dt/aUIqiqkmhQXMMds8BESM+6ARZ1e
mAnLkxh7mE1rbT3DWiANhuIWwhMoI4y2Qz8CpOpHp1z6Kg2b4Eq1ttkPQGiHL+MA
BNpJxYkZCaZe/klK79dLxXVmXRvF//tId5i+ZoC8aEomYj/261v/9XUUvNHlw4iQ
ogHC1XIokZWqguhPo9rkUSFoa1kLt6QqQ5Mdca19b3QriPi33Ul9UmU1ejRMenfR
opOFhpFvgfS4wCpYmsAUPxOuiJw/AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUSJEV
TKpoZTQzeOuP0AP0RSa8zfMwHwYDVR0jBBgwFoAU9ghiikaC9VOASvOrLlihnDCo
rdIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0NTc0LzM3REI5MkIyNzc4MDExRUZBNkQ3MkVCMjc2MkU5NTFBLzlnaGlp
a2FDOVZPQVN2T3JMbGlobkRDb3JkSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzlnaGlpa2FDOVZPQVN2T3JMbGlobkRDb3JkSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjQ0NTc0LzM3REI5MkIyNzc4MDExRUZBNkQ3MkVCMjc2MkU5
NTFBL0I1QzBFQTRBQjY0MTExRjE5NDZFNjkxMENGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt3WQwDQYJKoZIhvcNAQELBQAD
ggEBAB6HbrZ2lV+BrouwRKPvUOwllmiGVRDxEv0MutV2ynAc9R9qF4umGS/8fitO
QxaZntgrAZO2QKmSCjSIPlaY5i9Vk+08dQdDlYbj5gLqgWpzDAUTjaq1QP6AxByb
RuXI8vq1MxcQ3iUfwN9cvLZXQuQEshQp5Kv7rHMcRpcbivPIQbyzPZpzMey1SW2l
LwcUqjQoYJOcpoz3+PUuc5YF6gFK4AtiAH3IbA9e4113JEQplHV6ogfJxDZlvKUR
lQpwkcyTFQZXfSZv5dFAEhd6ztMqB70FrL/YPRggTxfl8Vv3AtFlxMs4Q5/IEQ5w
wWhwyzqSHJylXw1sbuY7sHO9SYA=
-----END CERTIFICATE-----