Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B87A63FEB0F311F199FADBEBCE1D38B0.roa
File:                     B87A63FEB0F311F199FADBEBCE1D38B0.roa (raw, json)
Hash identifier:          JUS3dnSZqmaOyl/cnP2VDXjj+tLF1nCHBvdBFebP9KA=
Subject key identifier:   F7:4D:A8:26:A1:44:22:97:ED:FD:73:77:D9:2E:6C:E2:58:9C:22:F7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D663
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B87A63FEB0F311F199FADBEBCE1D38B0.roa
Signing time:             Tue 15 Sep 2026 10:53:45 +0000
ROA not before:           Tue 15 Sep 2026 10:53:41 +0000
ROA not after:            Mon 14 Dec 2026 10:53:41 +0000
asID:                     135097
IP address blocks:        45.207.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120419 (0x1d663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 10:53:41 2026 GMT
            Not After : Dec 14 10:53:41 2026 GMT
        Subject: CN=6aa923b9-72aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c4:ec:a3:24:27:5c:46:1e:9d:52:9f:1b:7a:
                    c6:ba:21:b5:52:d6:62:29:4e:bc:6d:23:c2:48:ad:
                    86:26:c2:13:d6:83:21:13:0b:c2:35:00:20:08:d6:
                    4c:4b:cc:44:19:04:c7:61:00:c1:cc:18:6f:70:5d:
                    77:6f:38:be:35:39:b0:a2:12:1e:bf:88:e0:f9:66:
                    0b:01:58:53:4d:25:0d:a3:dc:b6:98:27:7f:f5:72:
                    8e:ee:7f:1d:61:06:f0:a7:33:f7:c9:fe:ee:02:96:
                    c0:97:ae:87:9e:63:96:df:78:29:dc:2a:87:4a:a8:
                    e5:fb:ef:d0:cd:62:07:0a:c6:9d:8e:d5:ce:70:55:
                    2d:b8:9c:e4:29:f7:14:f2:fb:a1:a7:5b:e9:b2:2f:
                    db:b4:ed:be:64:34:89:1a:0e:49:93:a6:6f:e4:bd:
                    7b:2c:90:5a:86:23:a9:1f:4e:8a:28:98:12:c8:6f:
                    56:59:a6:16:89:c7:66:4b:0b:58:ca:39:05:53:f3:
                    cf:ee:49:03:a9:5d:49:1a:38:84:0f:f1:1f:e8:48:
                    14:44:b4:91:91:8a:3c:2e:6c:c0:e0:bb:d8:e8:67:
                    05:89:25:f8:fb:64:3d:48:7e:ba:27:16:e4:84:26:
                    0b:da:75:36:05:17:42:6f:15:f8:4c:13:f5:a7:a2:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4D:A8:26:A1:44:22:97:ED:FD:73:77:D9:2E:6C:E2:58:9C:22:F7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B87A63FEB0F311F199FADBEBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:7c:a8:8b:54:b6:38:03:00:1d:33:cd:3a:aa:d7:8d:72:
         8c:d6:31:ae:54:ab:36:18:e4:33:08:e4:ca:1b:b1:47:ad:3a:
         ff:41:cd:24:48:0b:99:32:63:33:0b:d7:b7:47:48:0d:1f:74:
         34:61:51:97:6e:a0:d8:6b:f2:ee:ec:d1:68:e4:e6:0b:5c:54:
         5b:51:45:13:43:9b:72:d1:e8:d8:d3:65:1e:29:69:a3:3b:3b:
         83:70:36:b4:c0:f3:69:1f:2d:e7:55:1c:37:36:09:ac:f4:53:
         9c:6d:e9:57:54:ba:32:db:ca:b5:8f:46:66:8c:e0:62:e2:a0:
         11:4f:19:65:95:32:6b:51:dd:f1:83:0e:98:02:e2:7d:40:87:
         17:94:b0:e1:89:a6:cb:1a:6e:c3:12:49:02:9e:40:55:b1:b8:
         77:27:1d:5b:90:c8:2c:55:04:b5:d2:68:9d:57:10:ca:7c:e6:
         d1:fd:f9:d6:8a:93:78:59:29:10:f6:e6:b5:36:4d:87:9e:23:
         38:7f:88:87:bf:b3:97:5e:cb:7a:d2:d7:b0:8b:5b:df:9c:0d:
         7b:0c:95:6d:66:30:6d:7c:67:91:b2:02:c0:9d:bd:7c:24:fb:
         b7:90:8c:83:b5:2a:70:e7:72:48:97:8c:32:a9:fb:e4:29:55:
         00:d6:fb:86
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdZjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE1MTA1MzQxWhcNMjYxMjE0MTA1MzQxWjAYMRYw
FAYDVQQDEw02YWE5MjNiOS03MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5cTsoyQnXEYenVKfG3rGuiG1UtZiKU68bSPCSK2GJsIT1oMhEwvCNQAg
CNZMS8xEGQTHYQDBzBhvcF13bzi+NTmwohIev4jg+WYLAVhTTSUNo9y2mCd/9XKO
7n8dYQbwpzP3yf7uApbAl66HnmOW33gp3CqHSqjl++/QzWIHCsadjtXOcFUtuJzk
KfcU8vuhp1vpsi/btO2+ZDSJGg5Jk6Zv5L17LJBahiOpH06KKJgSyG9WWaYWicdm
SwtYyjkFU/PP7kkDqV1JGjiED/Ef6EgURLSRkYo8LmzA4LvY6GcFiSX4+2Q9SH66
JxbkhCYL2nU2BRdCbxX4TBP1p6LhHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPdN
qCahRCKX7f1zd9kubOJYnCL3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CODdBNjNGRUIwRjMxMUYxOTlGQURCRUJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLc9AMA0GCSqGSIb3DQEBCwUA
A4IBAQB6x3yoi1S2OAMAHTPNOqrXjXKM1jGuVKs2GOQzCOTKG7FHrTr/Qc0kSAuZ
MmMzC9e3R0gNH3Q0YVGXbqDYa/Lu7NFo5OYLXFRbUUUTQ5ty0ejY02UeKWmjOzuD
cDa0wPNpHy3nVRw3Ngms9FOcbelXVLoy28q1j0ZmjOBi4qARTxlllTJrUd3xgw6Y
AuJ9QIcXlLDhiabLGm7DEkkCnkBVsbh3Jx1bkMgsVQS10midVxDKfObR/fnWipN4
WSkQ9ua1Nk2HniM4f4iHv7OXXst60tewi1vfnA17DJVtZjBtfGeRsgLAnb18JPu3
kIyDtSpw53JIl4wyqfvkKVUA1vuG
-----END CERTIFICATE-----