Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F3A4932B65311F1AEC8FE05CF1D38B0.roa
File:                     2F3A4932B65311F1AEC8FE05CF1D38B0.roa (raw, json)
Hash identifier:          ThAqfn7ZG/3OK3XPtcHgl+sJ7ltnYlpZkfpGTUD+F54=
Subject key identifier:   3C:3B:1F:B9:62:47:BC:96:00:98:05:6B:0C:DC:14:0B:57:3B:4D:9C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F3A4932B65311F1AEC8FE05CF1D38B0.roa
Signing time:             Tue 22 Sep 2026 06:59:42 +0000
ROA not before:           Tue 22 Sep 2026 06:59:38 +0000
ROA not after:            Sun 25 Oct 2026 06:59:38 +0000
asID:                     401362
IP address blocks:        45.195.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120759 (0x1d7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 06:59:38 2026 GMT
            Not After : Oct 25 06:59:38 2026 GMT
        Subject: CN=6ab2275e-7a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:1f:91:e6:2c:47:85:2b:bc:6a:b6:3d:48:
                    a1:03:c0:60:2b:84:32:82:8b:84:93:ee:f5:40:d3:
                    a0:07:91:85:12:b4:8f:ce:8e:e4:67:b5:34:d7:d5:
                    11:9a:26:28:e6:37:f2:3a:61:48:fc:9a:91:3b:f1:
                    c3:a7:51:82:9c:b6:a0:8c:20:61:e7:be:bd:3b:11:
                    80:ca:9f:c0:cc:46:8b:59:91:24:1e:64:82:cf:8b:
                    24:c7:78:11:cd:cf:a2:e1:6b:d8:87:a0:31:b4:32:
                    2f:89:bf:33:6c:27:ee:95:4d:cf:85:bd:19:ac:a9:
                    e6:e2:c9:67:d0:0f:39:81:ae:4b:4f:72:de:92:ac:
                    90:09:6d:20:4a:58:66:e0:a8:b8:95:d2:b1:0f:68:
                    0a:11:4d:23:b0:e8:0e:d1:b9:dd:24:f3:6e:12:48:
                    f2:b5:e1:ae:f1:c6:35:77:41:d9:f5:43:60:86:31:
                    44:f6:22:14:96:6f:d8:fd:ba:07:2b:4c:35:2b:77:
                    0f:cf:8f:5d:26:40:1c:a0:8b:6b:e9:9e:de:f8:3f:
                    c3:e2:fc:b1:dc:dd:f6:bd:14:05:0a:ba:f9:ff:09:
                    32:34:56:97:c6:1d:53:8a:75:ba:8e:14:5e:55:ef:
                    bb:e0:e4:38:1f:61:38:23:04:37:3b:8d:49:60:d7:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3B:1F:B9:62:47:BC:96:00:98:05:6B:0C:DC:14:0B:57:3B:4D:9C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F3A4932B65311F1AEC8FE05CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ea:af:33:49:f7:95:a1:7f:2b:6b:7e:ce:b0:0f:60:65:d8:
         68:f0:cf:3a:f1:47:55:7a:0a:35:a9:9c:a7:27:d8:b0:e3:a5:
         7c:02:d4:10:dc:e4:9a:11:81:b9:5b:fd:72:55:11:3f:35:0d:
         51:b3:51:61:b3:d9:53:df:5c:44:74:84:ef:90:8e:c2:22:92:
         13:60:43:26:0e:40:9f:db:3a:b9:03:89:c5:e6:22:97:88:bf:
         b9:aa:86:18:e7:5d:34:0d:15:07:df:27:70:6d:b5:04:54:a3:
         c3:0c:2c:e5:8b:5d:50:af:b5:2c:ef:3d:fc:d0:41:e2:52:f2:
         04:29:97:d3:2d:9d:9a:86:9e:b4:ff:2d:35:65:ce:d0:86:09:
         cd:10:98:d6:89:5b:9c:f3:ef:69:b9:55:1e:d0:b2:34:25:53:
         30:cd:0d:1d:1a:a5:6a:c5:9b:f3:89:04:25:c5:6e:96:dd:c9:
         db:83:f6:60:b0:c5:2a:04:1e:79:e4:ec:a3:4c:36:0d:a3:62:
         9d:d0:cc:0e:f1:7b:c9:3f:44:67:c8:e3:27:c5:af:90:8a:dd:
         cc:25:8d:a2:19:9d:47:43:e7:7a:4b:49:fc:27:5a:b0:8d:b1:
         ed:ee:bc:6a:26:2d:25:bd:97:b9:8b:2f:ae:91:9b:72:63:19:
         e1:27:a4:a5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAde3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMDY1OTM4WhcNMjYxMDI1MDY1OTM4WjAYMRYw
FAYDVQQDEw02YWIyMjc1ZS03YTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvqAfkeYsR4UrvGq2PUihA8BgK4QygouEk+71QNOgB5GFErSPzo7kZ7U0
19URmiYo5jfyOmFI/JqRO/HDp1GCnLagjCBh5769OxGAyp/AzEaLWZEkHmSCz4sk
x3gRzc+i4WvYh6AxtDIvib8zbCfulU3Phb0ZrKnm4sln0A85ga5LT3LekqyQCW0g
Slhm4Ki4ldKxD2gKEU0jsOgO0bndJPNuEkjyteGu8cY1d0HZ9UNghjFE9iIUlm/Y
/boHK0w1K3cPz49dJkAcoItr6Z7e+D/D4vyx3N32vRQFCrr5/wkyNFaXxh1TinW6
jhReVe+74OQ4H2E4IwQ3O41JYNfwDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDw7
H7liR7yWAJgFawzcFAtXO02cMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRjNBNDkzMkI2NTMxMUYxQUVDOEZFMDVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcNdMA0GCSqGSIb3DQEBCwUA
A4IBAQBw6q8zSfeVoX8ra37OsA9gZdho8M868UdVego1qZynJ9iw46V8AtQQ3OSa
EYG5W/1yVRE/NQ1Rs1Fhs9lT31xEdITvkI7CIpITYEMmDkCf2zq5A4nF5iKXiL+5
qoYY5100DRUH3ydwbbUEVKPDDCzli11Qr7Us7z380EHiUvIEKZfTLZ2ahp60/y01
Zc7QhgnNEJjWiVuc8+9puVUe0LI0JVMwzQ0dGqVqxZvziQQlxW6W3cnbg/ZgsMUq
BB555OyjTDYNo2Kd0MwO8XvJP0RnyOMnxa+Qit3MJY2iGZ1HQ+d6S0n8J1qwjbHt
7rxqJi0lvZe5iy+ukZtyYxnhJ6Sl
-----END CERTIFICATE-----