Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A99DC94B32811F1A2EDBCC8CE1D38B0.roa
File:                     3A99DC94B32811F1A2EDBCC8CE1D38B0.roa (raw, json)
Hash identifier:          NiKFSTEGhoqPYC6q0D6NxRTO998F3GCJucU8DNnpPus=
Subject key identifier:   66:E7:83:48:4E:27:03:BE:D5:0C:EF:BA:3B:E1:69:A1:CF:7D:8E:9B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A99DC94B32811F1A2EDBCC8CE1D38B0.roa
Signing time:             Fri 18 Sep 2026 06:14:39 +0000
ROA not before:           Fri 18 Sep 2026 06:14:35 +0000
ROA not after:            Sun 18 Oct 2026 06:14:35 +0000
asID:                     215925
IP address blocks:        45.194.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120527 (0x1d6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 18 06:14:35 2026 GMT
            Not After : Oct 18 06:14:35 2026 GMT
        Subject: CN=6aacd6cf-339c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:99:5f:a8:24:3b:38:54:2f:6d:bc:58:03:95:
                    dc:e8:92:4b:84:44:c2:77:5f:56:02:96:1a:90:f6:
                    dd:06:47:97:c4:d0:9b:14:f4:48:de:b2:78:7e:bb:
                    5b:6c:5b:ff:b0:52:6d:01:74:0a:9b:ab:bd:41:9e:
                    3f:2f:cc:3b:0a:c0:d3:b1:b8:76:28:02:09:c6:37:
                    ba:df:7b:a1:ad:b7:21:08:17:36:2e:ee:22:a5:b5:
                    45:1e:2a:c6:69:d6:9a:53:3d:21:95:40:a4:ce:34:
                    63:3e:6b:ec:27:aa:0b:ce:4f:3a:90:06:e6:12:5d:
                    9a:d3:32:e1:63:35:ee:1d:93:c5:1f:f0:a0:48:1e:
                    76:57:c4:86:8b:d0:85:a1:90:62:08:ba:bf:e6:4c:
                    3a:5a:3d:55:21:6a:9f:4e:1f:1e:27:52:38:99:92:
                    25:67:cf:cc:53:1a:a2:f7:60:e1:73:c9:51:e1:30:
                    7d:dd:55:70:73:c4:96:04:18:fb:e9:6b:74:c0:ca:
                    70:3a:41:53:e5:f3:f1:e4:70:dd:4d:09:59:50:5b:
                    8b:4e:aa:29:f9:91:85:16:f5:d0:92:1e:dc:b4:6f:
                    f9:dd:ed:69:dc:cb:b5:4e:22:8c:ee:b2:98:13:87:
                    0a:82:c9:25:7e:2c:a4:6a:85:f8:91:ec:a2:7d:22:
                    f1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E7:83:48:4E:27:03:BE:D5:0C:EF:BA:3B:E1:69:A1:CF:7D:8E:9B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A99DC94B32811F1A2EDBCC8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:65:6b:75:d1:fa:85:cb:f9:a4:20:18:53:ce:14:f0:17:
         8d:5f:9b:a4:f3:67:cb:95:06:35:f6:d7:91:a6:3e:0b:9d:93:
         6c:6b:66:3b:a3:b1:39:94:55:89:c6:34:b1:d8:20:d2:5f:70:
         8e:91:9e:43:5e:2f:8c:7b:be:99:97:a8:a9:a3:f6:75:7f:f0:
         e3:0d:65:e4:70:3d:64:9a:c5:95:dd:5b:b7:02:9e:63:7f:91:
         5c:7f:29:10:68:26:81:0e:a8:53:0a:a6:67:63:21:ce:39:f4:
         e3:0b:98:5a:73:f8:96:2c:21:4c:64:01:43:5b:82:b6:54:31:
         73:8f:e4:22:6e:b8:92:cd:1d:1f:18:a1:a0:f6:7c:3f:05:67:
         b0:66:88:35:95:c2:57:28:81:10:27:aa:df:76:8c:87:ac:44:
         3d:36:f8:84:32:ce:d4:67:29:3d:2a:d0:c8:7e:1a:0d:e7:67:
         90:e3:60:c9:73:6b:f5:5a:1f:0c:1f:f9:6c:91:76:a5:f4:a6:
         52:40:0e:e1:06:c0:66:7b:45:9b:b3:93:9c:1c:01:fc:b0:0c:
         c4:36:27:b2:c9:e4:29:d1:40:5a:bb:ee:53:1c:68:ad:dc:c2:
         dc:5c:99:82:61:a1:c2:d0:b5:1b:8c:43:69:eb:28:37:40:82:
         82:f7:43:f6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdbPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE4MDYxNDM1WhcNMjYxMDE4MDYxNDM1WjAYMRYw
FAYDVQQDEw02YWFjZDZjZi0zMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA85lfqCQ7OFQvbbxYA5Xc6JJLhETCd19WApYakPbdBkeXxNCbFPRI3rJ4
frtbbFv/sFJtAXQKm6u9QZ4/L8w7CsDTsbh2KAIJxje633uhrbchCBc2Lu4ipbVF
HirGadaaUz0hlUCkzjRjPmvsJ6oLzk86kAbmEl2a0zLhYzXuHZPFH/CgSB52V8SG
i9CFoZBiCLq/5kw6Wj1VIWqfTh8eJ1I4mZIlZ8/MUxqi92Dhc8lR4TB93VVwc8SW
BBj76Wt0wMpwOkFT5fPx5HDdTQlZUFuLTqop+ZGFFvXQkh7ctG/53e1p3Mu1TiKM
7rKYE4cKgsklfiykaoX4keyifSLxmQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGbn
g0hOJwO+1QzvujvhaaHPfY6bMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQTk5REM5NEIzMjgxMUYxQTJFREJDQzhDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJcMA0GCSqGSIb3DQEBCwUA
A4IBAQB0rWVrddH6hcv5pCAYU84U8BeNX5uk82fLlQY19teRpj4LnZNsa2Y7o7E5
lFWJxjSx2CDSX3COkZ5DXi+Me76Zl6ipo/Z1f/DjDWXkcD1kmsWV3Vu3Ap5jf5Fc
fykQaCaBDqhTCqZnYyHOOfTjC5hac/iWLCFMZAFDW4K2VDFzj+QibriSzR0fGKGg
9nw/BWewZog1lcJXKIEQJ6rfdoyHrEQ9NviEMs7UZyk9KtDIfhoN52eQ42DJc2v1
Wh8MH/lskXal9KZSQA7hBsBme0Wbs5OcHAH8sAzENieyyeQp0UBau+5THGit3MLc
XJmCYaHC0LUbjENp6yg3QIKC90P2
-----END CERTIFICATE-----