Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9036F60B65E11F18CC624D2CE1D38B0.roa
File:                     D9036F60B65E11F18CC624D2CE1D38B0.roa (raw, json)
Hash identifier:          KWEbkszeEp1bAauvvRTRR13J6+ozQgFP49rD++ck+ys=
Subject key identifier:   33:79:57:E3:D5:07:F2:D1:53:1B:9F:B9:87:8C:96:70:89:7A:E3:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9036F60B65E11F18CC624D2CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 08:23:11 +0000
ROA not before:           Tue 22 Sep 2026 08:23:07 +0000
ROA not after:            Thu 29 Oct 2026 08:23:07 +0000
asID:                     202656
IP address blocks:        45.200.174.0/24 maxlen: 24
                          45.200.175.0/24 maxlen: 24
                          45.200.176.0/24 maxlen: 24
                          45.200.177.0/24 maxlen: 24
                          45.200.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 07:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120794 (0x1d7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 08:23:07 2026 GMT
            Not After : Oct 29 08:23:07 2026 GMT
        Subject: CN=6ab23aef-6c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:a6:30:d5:a9:69:f2:da:0e:7e:4d:45:04:
                    d3:a6:55:df:b7:76:56:d6:d9:33:73:25:71:2a:97:
                    0b:59:b3:8d:06:90:d2:c5:05:f4:46:a7:2d:91:ab:
                    4d:43:b6:dd:56:6e:86:98:78:07:e3:97:b3:78:10:
                    d2:5d:0e:3a:5d:c5:35:6c:7d:21:0d:a4:b2:75:b8:
                    bf:1b:29:38:de:f1:e0:08:68:c0:b3:e3:dd:83:12:
                    05:e6:d6:7e:2c:df:37:18:ec:38:e7:0d:25:bf:a8:
                    1a:75:4f:c6:f9:2d:50:2f:c4:de:50:e1:74:ed:f8:
                    e3:04:4d:9f:90:24:d8:c4:58:12:08:8f:44:f2:5d:
                    cd:a2:50:2b:25:68:c4:f0:5d:e8:6e:01:6b:d5:82:
                    0a:fd:c7:1f:69:bd:0d:4f:18:18:57:41:19:cb:ae:
                    c6:e3:dd:34:98:71:cf:55:76:ec:47:93:24:6c:43:
                    91:c1:12:30:36:aa:df:0a:4e:45:52:70:99:86:be:
                    b0:7a:5c:4b:34:19:05:01:b7:ab:27:98:72:e0:b6:
                    23:29:e7:cd:70:2d:0d:03:81:c0:2d:65:3c:55:ff:
                    4a:41:e7:22:d2:85:2b:a3:69:19:1d:2d:99:11:cf:
                    ab:af:f7:fb:02:4c:99:56:d9:f1:2c:b3:d7:c9:26:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:57:E3:D5:07:F2:D1:53:1B:9F:B9:87:8C:96:70:89:7A:E3:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9036F60B65E11F18CC624D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.174.0-45.200.178.255

    Signature Algorithm: sha256WithRSAEncryption
         b4:85:ed:c4:5d:11:71:0a:a3:1f:b2:26:14:0c:e0:88:3d:67:
         cb:90:30:31:79:17:74:8a:90:a6:94:74:b9:cd:27:1e:c5:3b:
         ca:c8:e9:3a:87:5b:f6:4a:06:18:1c:73:f0:5e:bc:60:79:84:
         90:fa:4d:cc:0a:54:72:9a:ee:d6:30:7d:5c:8a:08:17:62:b9:
         79:83:d7:8e:8d:a8:79:c6:2f:47:a5:5b:35:1e:17:48:af:7c:
         09:c8:df:f7:b4:e0:7b:37:54:29:56:99:50:f4:34:a1:fc:c6:
         6c:d8:bc:24:67:63:5d:4c:52:80:52:6e:a7:74:9d:d9:dd:7b:
         f2:b7:59:61:31:b8:6e:80:f0:65:0a:a6:25:73:e4:e5:7d:68:
         eb:5f:f9:a7:0b:00:14:2c:7f:49:19:a9:84:55:b5:bd:02:ce:
         f9:33:f1:54:f7:50:27:69:45:12:71:c9:b9:02:a1:f8:9f:10:
         43:b7:7a:b8:37:0c:b0:7f:59:fc:0e:2e:bc:c1:f4:53:16:38:
         01:bf:9b:aa:70:33:f4:1d:47:69:0a:49:14:f2:4e:78:26:36:
         e8:ac:94:df:34:2c:0b:cf:b4:e6:12:42:94:3d:3f:82:fa:54:
         93:04:41:35:f9:6c:35:da:1d:62:f1:ca:60:0f:e0:bf:6e:f8:
         3d:1a:93:cb
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdfaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMDgyMzA3WhcNMjYxMDI5MDgyMzA3WjAYMRYw
FAYDVQQDEw02YWIyM2FlZi02YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuGGmMNWpafLaDn5NRQTTplXft3ZW1tkzcyVxKpcLWbONBpDSxQX0Rqct
katNQ7bdVm6GmHgH45ezeBDSXQ46XcU1bH0hDaSydbi/Gyk43vHgCGjAs+PdgxIF
5tZ+LN83GOw45w0lv6gadU/G+S1QL8TeUOF07fjjBE2fkCTYxFgSCI9E8l3NolAr
JWjE8F3obgFr1YIK/ccfab0NTxgYV0EZy67G4900mHHPVXbsR5MkbEORwRIwNqrf
Ck5FUnCZhr6welxLNBkFAberJ5hy4LYjKefNcC0NA4HALWU8Vf9KQeci0oUro2kZ
HS2ZEc+rr/f7AkyZVtnxLLPXySZ05wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDN5
V+PVB/LRUxufuYeMlnCJeuMAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOTAzNkY2MEI2NUUxMUYxOENDNjI0RDJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEtyK4DBAAtyLIwDQYJKoZI
hvcNAQELBQADggEBALSF7cRdEXEKox+yJhQM4Ig9Z8uQMDF5F3SKkKaUdLnNJx7F
O8rI6TqHW/ZKBhgcc/BevGB5hJD6TcwKVHKa7tYwfVyKCBdiuXmD146NqHnGL0el
WzUeF0ivfAnI3/e04Hs3VClWmVD0NKH8xmzYvCRnY11MUoBSbqd0ndnde/K3WWEx
uG6A8GUKpiVz5OV9aOtf+acLABQsf0kZqYRVtb0Czvkz8VT3UCdpRRJxybkCofif
EEO3erg3DLB/WfwOLrzB9FMWOAG/m6pwM/QdR2kKSRTyTngmNuislN80LAvPtOYS
QpQ9P4L6VJMEQTX5bDXaHWLxymAP4L9u+D0ak8s=
-----END CERTIFICATE-----