Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E92E1344B25E11F1BAF9F204CF1D38B0.roa
File:                     E92E1344B25E11F1BAF9F204CF1D38B0.roa (raw, json)
Hash identifier:          vGfT30Ah1JNeHFa1DzU+aOG7vruGm18XK03EQPgJwNA=
Subject key identifier:   CA:80:A7:8A:23:4D:FD:35:D9:C9:B2:24:0C:96:AA:F7:4E:29:17:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D69F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E92E1344B25E11F1BAF9F204CF1D38B0.roa
Signing time:             Thu 17 Sep 2026 06:13:34 +0000
ROA not before:           Thu 17 Sep 2026 06:13:29 +0000
ROA not after:            Sat 26 Sep 2026 06:13:29 +0000
asID:                     138590
IP address blocks:        45.194.14.0/24 maxlen: 24
                          45.194.15.0/24 maxlen: 24
                          45.194.25.0/24 maxlen: 24
                          45.194.26.0/24 maxlen: 24
                          45.194.80.0/24 maxlen: 24
                          45.194.81.0/24 maxlen: 24
                          45.194.88.0/24 maxlen: 24
                          45.194.89.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120479 (0x1d69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 06:13:29 2026 GMT
            Not After : Sep 26 06:13:29 2026 GMT
        Subject: CN=6aab850e-d9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4b:ef:d5:c5:0f:b8:5e:36:4e:b6:b0:30:36:
                    a5:09:7a:2d:fb:e3:34:88:70:42:2d:2c:d9:00:ec:
                    4d:6c:07:cf:4d:fd:df:10:69:90:b0:08:78:03:e5:
                    11:be:4b:ee:f5:40:57:1b:c6:50:50:fd:ad:b2:8b:
                    04:65:9e:7c:46:40:7b:b4:15:94:6b:01:53:40:98:
                    84:c3:0d:11:a9:75:5b:8b:5a:b6:ff:61:53:4e:bb:
                    30:79:d6:9b:bb:8e:fa:13:6c:b4:c7:31:db:08:44:
                    99:73:53:65:33:e0:74:b2:f3:a6:3b:99:f6:e7:1d:
                    c4:8e:4b:bc:c8:09:00:2a:58:c7:e0:0b:b4:2c:35:
                    34:0a:1f:eb:fb:4c:e0:22:b5:fd:85:35:b1:85:49:
                    be:71:18:51:03:69:fb:41:e7:3d:50:bb:fb:96:68:
                    00:2a:dc:48:5d:a8:ba:f2:05:68:15:0f:bc:61:e6:
                    29:0f:79:a5:dc:7b:91:b1:fb:c0:23:55:ff:39:b5:
                    72:51:fc:d3:e1:b3:0f:78:4e:3b:a6:7a:0c:32:25:
                    27:b0:62:16:fe:96:b1:37:b4:48:04:3f:17:ad:f1:
                    00:ce:08:b3:1f:64:6b:a7:95:80:e7:c6:27:9e:29:
                    04:c4:a7:3c:b3:88:6f:dd:ff:e2:98:7f:40:90:21:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:80:A7:8A:23:4D:FD:35:D9:C9:B2:24:0C:96:AA:F7:4E:29:17:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E92E1344B25E11F1BAF9F204CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.14.0/23
                  45.194.25.0-45.194.26.255
                  45.194.80.0/23
                  45.194.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:21:7d:07:29:1d:da:f0:84:0d:9f:6e:d8:25:40:a9:d5:
         2b:36:b8:b5:35:0e:2e:49:95:b3:4c:83:e7:93:1a:4a:5d:1c:
         ac:30:fb:ef:68:ca:08:6e:f7:5b:3c:fd:37:ca:7c:25:80:aa:
         b6:ec:08:d3:2c:34:fd:2e:4e:7f:b8:28:61:59:d5:40:0f:3e:
         df:73:03:b8:99:4a:76:05:b9:1d:d5:29:c6:1f:44:96:0b:4e:
         74:c1:95:27:90:0f:91:c0:77:f5:f8:66:e3:a9:65:60:72:55:
         74:c5:8e:30:b8:4e:23:7c:0c:fa:fe:f7:ba:45:05:c7:7b:ca:
         18:9c:bd:87:70:3c:b8:ab:b7:e5:72:16:7c:73:12:dd:9d:c7:
         f0:c7:d9:36:a8:91:23:6a:6d:98:db:26:3d:7f:e1:56:f3:9d:
         4e:be:81:29:0e:9b:11:e5:19:81:65:3d:29:51:56:fd:47:c7:
         57:7d:31:6c:b5:72:6e:6a:bf:0a:89:8a:e6:1f:6b:12:38:d7:
         74:64:75:b8:20:c1:4f:4a:52:51:89:ff:32:f5:0c:7f:b5:2c:
         5d:d2:59:d5:47:10:a5:72:31:d2:da:bf:da:a9:48:45:49:63:
         89:72:46:58:9d:ff:8c:ed:01:36:e7:00:1a:43:70:9a:8a:91:
         4a:06:e5:83
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAdafMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE3MDYxMzI5WhcNMjYwOTI2MDYxMzI5WjAYMRYw
FAYDVQQDEw02YWFiODUwZS1kOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7Uvv1cUPuF42TrawMDalCXot++M0iHBCLSzZAOxNbAfPTf3fEGmQsAh4
A+URvkvu9UBXG8ZQUP2tsosEZZ58RkB7tBWUawFTQJiEww0RqXVbi1q2/2FTTrsw
edabu476E2y0xzHbCESZc1NlM+B0svOmO5n25x3Ejku8yAkAKljH4Au0LDU0Ch/r
+0zgIrX9hTWxhUm+cRhRA2n7Qec9ULv7lmgAKtxIXai68gVoFQ+8YeYpD3ml3HuR
sfvAI1X/ObVyUfzT4bMPeE47pnoMMiUnsGIW/paxN7RIBD8XrfEAzgizH2Rrp5WA
58YnnikExKc8s4hv3f/imH9AkCEvzQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFMqA
p4ojTf012cmyJAyWqvdOKRfZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOTJFMTM0NEIyNUUxMUYxQkFGOUYyMDRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLcIOMAwDBAAtwhkDBAAtwhoD
BAEtwlADBAEtwlgwDQYJKoZIhvcNAQELBQADggEBAJwIIX0HKR3a8IQNn27YJUCp
1Ss2uLU1Di5JlbNMg+eTGkpdHKww++9oyghu91s8/TfKfCWAqrbsCNMsNP0uTn+4
KGFZ1UAPPt9zA7iZSnYFuR3VKcYfRJYLTnTBlSeQD5HAd/X4ZuOpZWByVXTFjjC4
TiN8DPr+97pFBcd7yhicvYdwPLirt+VyFnxzEt2dx/DH2TaokSNqbZjbJj1/4Vbz
nU6+gSkOmxHlGYFlPSlRVv1Hx1d9MWy1cm5qvwqJiuYfaxI413RkdbggwU9KUlGJ
/zL1DH+1LF3SWdVHEKVyMdLav9qpSEVJY4lyRlid/4ztATbnABpDcJqKkUoG5YM=
-----END CERTIFICATE-----