Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/42EBC58ACDED11F183869C1ACF1D38B0.roa
File:                     42EBC58ACDED11F183869C1ACF1D38B0.roa (raw, json)
Hash identifier:          tDKcAYhuT+aW//I3S03BhHzK69gTIxE22Nsegs3prCY=
Subject key identifier:   91:BA:D6:AD:F7:EC:93:70:5B:BD:AD:EF:A6:C6:33:B2:28:8A:81:B2
Certificate issuer:       /CN=F3629FF7AF/serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
Certificate serial:       17
Authority key identifier: 4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/42EBC58ACDED11F183869C1ACF1D38B0.roa
Signing time:             Thu 22 Oct 2026 07:50:34 +0000
ROA not before:           Thu 22 Oct 2026 07:50:30 +0000
ROA not after:            Mon 22 Oct 2029 07:50:30 +0000
asID:                     37055
IP address blocks:        41.222.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AF, serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
        Validity
            Not Before: Oct 22 07:50:30 2026 GMT
            Not After : Oct 22 07:50:30 2029 GMT
        Subject: CN=6ad9c04a-c99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:ee:f6:45:c4:17:20:2b:16:9e:94:90:00:
                    95:63:82:23:07:97:89:cd:77:4b:5e:a3:67:13:e4:
                    c3:67:c8:dc:30:07:f8:c9:d5:e0:f5:ce:5e:26:d7:
                    fa:48:7e:0e:20:91:ef:45:d1:22:ac:63:30:1c:35:
                    73:2d:be:95:7c:74:f6:67:02:14:5b:74:45:0f:ec:
                    a9:28:22:d3:ca:73:54:dd:d0:8f:ed:27:af:a6:9a:
                    a6:f8:53:6b:fe:74:c2:6e:98:7a:b0:94:02:b1:d0:
                    34:bb:e6:cb:44:c9:f2:55:98:52:10:99:93:c0:ac:
                    94:85:68:5e:a0:d0:11:26:d6:a0:fb:59:b1:68:40:
                    81:74:30:8f:75:49:91:1c:69:cd:87:56:bb:7c:91:
                    32:cc:28:8e:8b:ac:11:1f:fb:8f:4a:b6:49:6c:75:
                    0a:62:1e:e6:97:09:16:bc:fe:4f:dc:c1:a3:6c:98:
                    87:bd:33:44:cd:59:c1:19:44:2e:1a:95:3c:3f:f4:
                    9f:3e:f2:ce:4d:c6:de:68:b4:e0:9a:56:cd:72:9f:
                    bc:01:c1:31:ee:b5:b4:ae:bd:0d:78:ba:99:d4:3b:
                    1f:3a:47:b7:13:20:30:42:c1:5e:ce:dd:9a:39:94:
                    3f:4a:68:7b:c7:b9:62:40:ad:b9:1d:14:d5:e1:c8:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BA:D6:AD:F7:EC:93:70:5B:BD:AD:EF:A6:C6:33:B2:28:8A:81:B2
            X509v3 Authority Key Identifier:
                keyid:4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/42EBC58ACDED11F183869C1ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.222.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:49:e6:9d:97:00:fd:19:60:2a:60:7a:07:01:c7:7a:49:25:
         bd:7c:0e:3f:f5:de:3f:35:5a:f0:67:7a:00:2d:29:23:fb:60:
         26:70:f4:fd:12:15:9c:ae:71:5d:88:7f:3b:d2:c3:45:80:5b:
         45:d5:fd:55:91:f4:81:33:37:25:1d:72:be:8e:00:db:cd:1b:
         38:ff:11:2d:c0:33:85:89:17:cd:55:bd:3d:fa:70:d5:c4:b8:
         77:f0:d4:d0:59:dc:69:3d:60:31:e2:9c:7f:76:b3:42:41:9f:
         fd:6d:c9:a0:a2:c6:2e:d9:5b:96:25:7b:ab:4d:41:84:7f:da:
         18:4e:b8:be:a7:60:1b:e3:eb:43:ec:7f:11:b9:5e:15:c8:49:
         a9:ef:26:4b:c1:7f:83:71:68:f6:d2:18:46:20:2d:0d:e0:d9:
         80:32:8f:38:12:cf:cc:4b:54:c7:d0:22:08:82:13:84:87:8a:
         12:ae:b6:8c:b0:a9:89:54:fc:6b:e8:57:e8:5a:4f:52:3c:4c:
         30:1a:da:42:2e:e1:5e:7c:fa:f9:01:da:b2:ec:7e:63:9f:a3:
         d3:21:df:d5:8b:32:f6:2d:25:60:d2:48:96:7c:1a:1c:ad:c5:
         73:fa:0f:ed:7c:fb:7a:a2:3f:04:82:19:8d:13:08:0f:16:d4:
         68:c1:07:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----