Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B312D5C4B0D311F193A1BFACCE1D38B0.roa
File:                     B312D5C4B0D311F193A1BFACCE1D38B0.roa (raw, json)
Hash identifier:          o5xbQZOfoFT/Z3N5peox5lVJDYWHqHnDoDymRF9NVW0=
Subject key identifier:   7F:C2:A4:13:AC:40:A1:06:B6:F8:75:27:60:BF:47:B6:77:9C:49:D7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D60B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B312D5C4B0D311F193A1BFACCE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:04:32 +0000
ROA not before:           Tue 15 Sep 2026 07:04:28 +0000
ROA not after:            Wed 21 Oct 2026 07:04:28 +0000
asID:                     214143
IP address blocks:        45.196.136.0/24 maxlen: 24
                          45.196.137.0/24 maxlen: 24
                          45.198.176.0/24 maxlen: 24
                          45.203.60.0/24 maxlen: 24
                          45.203.61.0/24 maxlen: 24
                          45.207.128.0/21 maxlen: 24
                          45.207.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120331 (0x1d60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 07:04:28 2026 GMT
            Not After : Oct 21 07:04:28 2026 GMT
        Subject: CN=6aa8ee00-64c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:8c:3d:64:cc:38:67:96:74:57:46:1b:eb:
                    95:19:f0:cc:32:15:80:e3:b0:ee:2b:bb:bf:10:be:
                    cd:3f:33:6d:38:35:13:26:2c:0c:c4:8d:56:95:4e:
                    5d:59:1f:9d:af:64:f5:52:21:88:b5:1b:1e:7c:3a:
                    11:18:48:f3:14:38:55:8d:e2:4e:a7:08:9d:8f:0d:
                    20:ec:3a:8a:00:06:5c:d1:28:b5:8b:bd:02:8f:9a:
                    a8:e3:2f:00:10:52:cb:af:8e:23:a6:95:38:53:ad:
                    31:07:8c:43:45:33:cf:be:d2:83:15:f8:38:b3:6d:
                    f8:99:17:9d:46:69:8e:3e:13:2d:46:26:13:7c:93:
                    39:09:39:58:54:d2:34:5c:6c:fa:96:7b:c8:55:06:
                    9c:ff:c8:23:71:6c:da:50:dd:b6:c5:d9:05:ab:82:
                    97:b4:c9:b2:99:e7:9c:6a:90:7e:b5:73:f5:b2:98:
                    eb:01:6a:f2:88:38:6e:6a:89:a5:d9:b8:bb:36:f9:
                    dc:fa:29:ce:85:07:55:84:8e:a5:05:73:a5:12:f5:
                    9f:ec:49:8c:3d:ae:88:96:47:6b:95:28:3c:c4:cb:
                    24:ea:03:43:c5:5e:65:d5:3e:7d:68:61:a9:b7:a1:
                    7c:c3:83:5e:f5:f9:6d:15:c8:33:1b:e5:41:e7:aa:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C2:A4:13:AC:40:A1:06:B6:F8:75:27:60:BF:47:B6:77:9C:49:D7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B312D5C4B0D311F193A1BFACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.136.0/23
                  45.198.176.0/24
                  45.203.60.0/23
                  45.207.128.0-45.207.137.255

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:2c:53:2c:7d:8d:fa:1a:1b:93:27:80:c2:21:1d:3b:aa:
         d0:56:19:57:26:cc:9a:bd:80:d2:26:47:dc:dd:31:9b:eb:15:
         fc:5b:45:19:2f:9d:17:fe:35:f6:fc:9a:34:aa:67:ea:2a:16:
         1f:7d:c5:f5:70:a1:c7:4c:99:82:00:44:63:06:62:7d:37:42:
         af:57:01:1b:cd:af:7c:b7:1f:c5:2f:e6:bf:42:22:70:74:c4:
         5e:4a:a5:07:f6:2d:a0:df:5e:e0:3f:e9:18:dd:73:c9:0c:31:
         99:f2:c7:31:6f:ce:33:93:91:6a:8d:79:af:49:a6:c8:3e:81:
         fa:56:47:47:1f:44:ac:22:3f:db:00:d3:1b:ed:62:22:75:31:
         41:49:45:f6:b3:c7:68:36:d6:29:e0:44:ab:60:de:89:2c:a9:
         11:8a:15:c2:ee:5a:02:86:74:68:19:26:ac:d2:d9:9e:63:b4:
         a1:86:82:7e:72:2c:4f:01:94:c8:db:34:96:36:25:6f:17:6b:
         54:d7:52:67:ce:7c:da:d9:0c:d0:12:f1:5e:d3:ba:44:17:ce:
         fc:e4:1b:6d:d7:c2:b4:57:fb:c9:5f:1d:67:ed:d8:80:01:01:
         aa:32:7b:a2:11:37:f8:97:0a:06:65:cd:44:16:fe:6c:1f:1a:
         f7:60:3f:a2
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAdYLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE1MDcwNDI4WhcNMjYxMDIxMDcwNDI4WjAYMRYw
FAYDVQQDEw02YWE4ZWUwMC02NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy02MPWTMOGeWdFdGG+uVGfDMMhWA47DuK7u/EL7NPzNtODUTJiwMxI1W
lU5dWR+dr2T1UiGItRsefDoRGEjzFDhVjeJOpwidjw0g7DqKAAZc0Si1i70Cj5qo
4y8AEFLLr44jppU4U60xB4xDRTPPvtKDFfg4s234mRedRmmOPhMtRiYTfJM5CTlY
VNI0XGz6lnvIVQac/8gjcWzaUN22xdkFq4KXtMmymeecapB+tXP1spjrAWryiDhu
aoml2bi7Nvnc+inOhQdVhI6lBXOlEvWf7EmMPa6IlkdrlSg8xMsk6gNDxV5l1T59
aGGpt6F8w4Ne9fltFcgzG+VB56oKIwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFH/C
pBOsQKEGtvh1J2C/R7Z3nEnXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMzEyRDVDNEIwRDMxMUYxOTNBMUJGQUNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLcSIAwQALcawAwQBLcs8MAwD
BActz4ADBAEtz4gwDQYJKoZIhvcNAQELBQADggEBAEO3LFMsfY36GhuTJ4DCIR07
qtBWGVcmzJq9gNImR9zdMZvrFfxbRRkvnRf+Nfb8mjSqZ+oqFh99xfVwocdMmYIA
RGMGYn03Qq9XARvNr3y3H8Uv5r9CInB0xF5KpQf2LaDfXuA/6Rjdc8kMMZnyxzFv
zjOTkWqNea9Jpsg+gfpWR0cfRKwiP9sA0xvtYiJ1MUFJRfazx2g21ingRKtg3oks
qRGKFcLuWgKGdGgZJqzS2Z5jtKGGgn5yLE8BlMjbNJY2JW8Xa1TXUmfOfNrZDNAS
8V7TukQXzvzkG23XwrRX+8lfHWft2IABAaoye6IRN/iXCgZlzUQW/mwfGvdgP6I=
-----END CERTIFICATE-----