Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41AB00D0B7E211F1BC3765B3CE1D38B0.roa
File:                     41AB00D0B7E211F1BC3765B3CE1D38B0.roa (raw, json)
Hash identifier:          0BiKIk3RBLUZq1ju8JFOZ44eDfNRertbYbvU95uDgzo=
Subject key identifier:   84:9A:60:3A:43:96:B8:9D:83:85:26:2F:7A:01:80:10:AF:39:5D:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D885
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41AB00D0B7E211F1BC3765B3CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 06:36:22 +0000
ROA not before:           Thu 24 Sep 2026 06:36:18 +0000
ROA not after:            Fri 30 Oct 2026 06:36:18 +0000
asID:                     328608
IP address blocks:        45.196.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 07:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120965 (0x1d885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 24 06:36:18 2026 GMT
            Not After : Oct 30 06:36:18 2026 GMT
        Subject: CN=6ab4c4e6-7624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:f0:42:e3:d8:1f:55:67:12:63:a5:09:63:
                    cc:f7:01:37:7d:55:2e:1e:53:a2:e0:e4:68:12:6a:
                    4d:f8:9a:9a:93:06:1f:a4:a6:14:a5:f5:23:c6:c0:
                    5a:9a:75:9a:a5:27:cc:4a:89:aa:4c:56:ed:02:d5:
                    18:f5:f5:31:d5:fe:c5:59:eb:6a:6b:f1:47:f7:c6:
                    d0:37:c1:ea:b6:31:d6:b8:bf:09:34:43:09:61:df:
                    e7:28:6e:2c:0a:e8:45:6c:4e:cd:e8:e5:64:87:61:
                    f7:31:81:10:af:b1:7d:3c:fb:e5:80:e5:8c:98:77:
                    01:fa:29:b0:d1:15:52:86:11:c7:33:36:64:70:d0:
                    43:81:10:81:b4:7b:1c:99:16:1b:50:29:33:75:d9:
                    e4:fb:07:7e:bf:63:8e:f8:38:29:73:24:47:49:23:
                    1b:e3:70:d6:17:8c:f0:2f:7c:b5:25:94:00:e4:0b:
                    e7:5c:aa:44:c2:df:61:24:4c:2a:c7:4a:06:0a:f2:
                    bd:0b:ca:4d:89:53:87:f5:f5:72:63:9e:9a:2f:5b:
                    08:b9:b8:a9:34:2d:20:0d:be:ab:da:e8:64:e0:9d:
                    5c:a3:19:38:84:17:48:f2:57:99:71:f2:0a:66:67:
                    19:05:22:29:6f:5a:26:1d:8c:cc:73:c4:2d:18:9c:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9A:60:3A:43:96:B8:9D:83:85:26:2F:7A:01:80:10:AF:39:5D:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41AB00D0B7E211F1BC3765B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:1a:95:2d:d3:55:a5:d3:02:11:f6:35:5e:93:07:b6:73:9a:
         31:a2:79:14:92:5f:e5:9e:07:a2:8d:b1:5f:e4:84:f3:15:34:
         11:a5:06:28:e6:fc:6a:6a:2b:84:10:49:0a:1b:90:7a:22:92:
         ce:05:02:c3:f3:3f:70:62:09:82:d1:b6:a2:77:4d:8d:2e:c2:
         a3:0f:69:de:43:b4:8e:60:bd:79:93:5b:a7:4b:80:0d:5d:15:
         dd:ea:60:6d:07:3d:97:11:24:ac:f7:10:d0:e7:7c:37:d8:bc:
         37:61:8e:e0:82:24:fb:70:2f:b4:12:02:a5:02:bb:1b:f9:ab:
         e1:f4:30:07:b3:b0:9d:87:34:68:24:2d:af:45:79:4b:f0:6d:
         e3:a9:e8:50:7c:be:b8:0d:31:03:ce:c8:ee:f8:17:91:c7:2b:
         39:34:d0:15:4b:1d:24:42:41:2f:8a:53:6d:e3:0c:14:7e:49:
         01:17:cc:01:2c:f9:46:3e:fe:7d:cd:a5:aa:81:42:13:07:88:
         19:4f:0e:72:7a:09:d8:ac:eb:cd:b0:6e:19:b4:82:52:4f:1b:
         dd:a3:5e:98:d4:26:f8:c5:90:b3:eb:7a:fe:9b:49:25:d5:39:
         11:6e:ad:6a:af:91:e1:f8:8c:b6:ab:4e:67:76:cc:9a:c1:a7:
         8b:8c:1c:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdiFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI0MDYzNjE4WhcNMjYxMDMwMDYzNjE4WjAYMRYw
FAYDVQQDEw02YWI0YzRlNi03NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2bfwQuPYH1VnEmOlCWPM9wE3fVUuHlOi4ORoEmpN+JqakwYfpKYUpfUj
xsBamnWapSfMSomqTFbtAtUY9fUx1f7FWetqa/FH98bQN8HqtjHWuL8JNEMJYd/n
KG4sCuhFbE7N6OVkh2H3MYEQr7F9PPvlgOWMmHcB+imw0RVShhHHMzZkcNBDgRCB
tHscmRYbUCkzddnk+wd+v2OO+DgpcyRHSSMb43DWF4zwL3y1JZQA5AvnXKpEwt9h
JEwqx0oGCvK9C8pNiVOH9fVyY56aL1sIubipNC0gDb6r2uhk4J1coxk4hBdI8leZ
cfIKZmcZBSIpb1omHYzMc8QtGJyfaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFISa
YDpDlridg4UmL3oBgBCvOV38MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MUFCMDBEMEI3RTIxMUYxQkMzNzY1QjNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcQeMA0GCSqGSIb3DQEBCwUA
A4IBAQC4GpUt01Wl0wIR9jVekwe2c5oxonkUkl/lngeijbFf5ITzFTQRpQYo5vxq
aiuEEEkKG5B6IpLOBQLD8z9wYgmC0baid02NLsKjD2neQ7SOYL15k1unS4ANXRXd
6mBtBz2XESSs9xDQ53w32Lw3YY7ggiT7cC+0EgKlArsb+avh9DAHs7CdhzRoJC2v
RXlL8G3jqehQfL64DTEDzsju+BeRxys5NNAVSx0kQkEvilNt4wwUfkkBF8wBLPlG
Pv59zaWqgUITB4gZTw5yegnYrOvNsG4ZtIJSTxvdo16Y1Cb4xZCz63r+m0kl1TkR
bq1qr5Hh+Iy2q05ndsyawaeLjBxC
-----END CERTIFICATE-----