Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/15BADC18CDED11F1B01F7D18CF1D38B0.roa
File:                     15BADC18CDED11F1B01F7D18CF1D38B0.roa (raw, json)
Hash identifier:          CWauGwHWbt6BWA131ocqtzdSXRZkkMOn/J1Umic7zVc=
Subject key identifier:   05:B2:F2:94:FF:1B:61:6F:A7:41:9C:3C:B1:F7:08:59:DD:84:4C:1E
Certificate issuer:       /CN=F3629FF7AF/serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
Certificate serial:       15
Authority key identifier: 4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/15BADC18CDED11F1B01F7D18CF1D38B0.roa
Signing time:             Thu 22 Oct 2026 07:49:18 +0000
ROA not before:           Thu 22 Oct 2026 07:49:14 +0000
ROA not after:            Mon 22 Oct 2029 07:49:14 +0000
asID:                     37055
IP address blocks:        41.222.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AF, serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
        Validity
            Not Before: Oct 22 07:49:14 2026 GMT
            Not After : Oct 22 07:49:14 2029 GMT
        Subject: CN=6ad9bffe-4dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d4:af:4e:7e:75:f7:74:f6:7f:99:87:7a:1e:
                    6a:8f:69:a0:09:a5:18:84:37:a3:52:27:1c:90:ba:
                    ae:22:3b:d6:00:cb:66:98:29:1b:7c:d1:1a:60:01:
                    c0:1f:19:cf:0f:9d:26:1a:06:dc:8b:b1:73:a0:6e:
                    d9:b5:6e:b7:63:ba:50:d5:49:4e:68:46:92:6d:f7:
                    ce:8f:32:61:cc:26:74:59:d3:56:06:61:11:ca:18:
                    dc:0b:93:a7:19:84:5a:cc:05:7b:32:5c:a9:a6:9a:
                    bf:5b:e0:37:79:07:1c:1d:bb:a3:8c:0b:fa:35:d2:
                    b6:68:40:62:76:15:0c:9a:43:2f:b0:bd:72:27:1a:
                    a5:88:23:3f:51:6e:ca:61:72:c2:f2:62:81:e2:fa:
                    e9:cf:cf:cb:ba:4d:ec:53:66:9a:73:11:d0:57:f9:
                    63:b8:57:18:59:6f:6b:d1:88:94:d2:8d:01:c9:10:
                    7a:8f:af:ae:ae:56:d4:92:4e:92:bf:3e:86:6f:c9:
                    38:49:37:3b:bf:22:f4:74:3a:91:ec:cd:4e:8a:63:
                    4e:3b:4b:24:1e:d0:3c:31:b5:ec:08:14:cc:11:ee:
                    2b:62:ae:4e:36:08:83:30:6c:df:e8:77:e4:e8:80:
                    61:28:95:71:65:07:ed:a6:9a:30:54:4f:6e:3c:d3:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B2:F2:94:FF:1B:61:6F:A7:41:9C:3C:B1:F7:08:59:DD:84:4C:1E
            X509v3 Authority Key Identifier:
                keyid:4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/15BADC18CDED11F1B01F7D18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.222.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:2c:97:5e:f2:00:66:07:08:44:01:68:67:67:50:9b:96:
         48:ab:fc:35:40:42:7d:1e:84:8b:55:3e:c3:53:58:b3:80:59:
         28:ec:c8:91:89:e4:81:f0:c8:14:ae:a8:14:da:29:0d:7d:19:
         f6:08:f9:4d:4f:39:4e:e6:0c:b2:c7:84:60:06:95:db:97:f8:
         ee:e2:76:d7:f1:1a:39:59:04:16:bb:ae:61:3a:ce:3a:0a:f0:
         d7:62:3a:1b:7e:f5:65:76:f7:0e:0d:81:dc:cd:7e:68:59:22:
         21:af:7c:6b:b4:5d:26:f2:0a:ea:3b:7e:a8:b7:a3:fb:a6:f1:
         49:fa:78:d0:ed:e2:5d:51:86:84:4a:58:8a:f8:b6:75:8f:ec:
         43:8c:72:c6:a3:40:a0:c1:9a:19:a4:a9:b7:4a:2c:03:a6:45:
         c6:d8:98:78:e7:7c:d2:7b:70:fe:d2:73:22:42:c5:d2:01:b0:
         ad:9d:cd:c1:12:46:ba:8d:c6:e6:32:94:74:05:e6:d2:69:da:
         13:e9:1e:0f:41:ea:5a:c7:ba:df:7c:43:62:e0:4b:fc:c9:c7:
         42:54:86:2c:e4:1f:c4:0e:05:a6:6e:21:db:26:83:f4:d3:64:
         6a:14:db:93:bf:9e:35:cb:83:c8:bb:79:96:d3:64:04:72:c3:
         52:c9:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----