Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/D7BA98CCCD5111F19220611DCF1D38B0.roa
File:                     D7BA98CCCD5111F19220611DCF1D38B0.roa (raw, json)
Hash identifier:          WwX0aD1Mvx1royy9ATSog8neLx2pzWaqnryCmdSZ+I0=
Subject key identifier:   6E:9F:88:71:83:07:A4:51:D6:28:7B:A7:E9:C7:D3:BE:52:68:FB:F8
Certificate issuer:       /CN=F3629FF7AF/serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
Certificate serial:       07
Authority key identifier: 4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/D7BA98CCCD5111F19220611DCF1D38B0.roa
Signing time:             Wed 21 Oct 2026 13:18:02 +0000
ROA not before:           Wed 21 Oct 2026 13:17:58 +0000
ROA not after:            Sun 21 Oct 2029 13:17:58 +0000
asID:                     37055
IP address blocks:        196.223.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 06:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AF, serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
        Validity
            Not Before: Oct 21 13:17:58 2026 GMT
            Not After : Oct 21 13:17:58 2029 GMT
        Subject: CN=6ad8bb8a-2aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:3b:30:18:a5:2d:bb:bc:68:f5:9e:f8:95:
                    8d:24:a6:e0:33:ae:e3:b0:b9:3e:b2:7b:b1:34:44:
                    48:ea:42:72:d5:97:48:71:df:b7:91:d1:7e:90:7f:
                    8e:12:16:19:3f:64:7e:30:13:85:47:97:ea:b0:84:
                    3e:19:9c:75:2e:f6:0d:78:cd:d1:01:a6:ef:1f:34:
                    18:3a:1a:c0:62:30:d1:a1:2e:5b:b5:85:df:f2:0d:
                    b0:4d:8d:d7:19:88:89:eb:0a:40:90:f5:f0:65:4c:
                    9a:11:40:f7:1e:03:e3:26:cd:1f:97:3a:d7:81:6f:
                    f3:16:2d:60:cd:3d:51:03:6b:3e:fc:cb:c6:94:74:
                    33:d0:c9:e8:53:7a:a7:28:f3:38:59:66:cb:d8:22:
                    8e:50:93:da:10:56:41:bf:56:a6:d3:38:f1:33:35:
                    fc:5e:59:a5:51:1c:45:80:00:02:08:db:bd:0e:8e:
                    26:3d:e7:fe:2e:73:b8:54:63:c0:3c:4e:12:ea:c8:
                    c8:04:1b:15:98:2e:55:22:6a:cc:05:f6:f8:cc:f9:
                    8c:7f:9c:98:f9:c6:a9:ab:a7:50:ff:5b:cc:bf:60:
                    13:21:a4:96:15:1a:06:6f:8e:c2:88:bc:0f:ba:4f:
                    51:08:17:42:ae:b2:e4:37:75:cc:d5:df:c9:83:3e:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:88:71:83:07:A4:51:D6:28:7B:A7:E9:C7:D3:BE:52:68:FB:F8
            X509v3 Authority Key Identifier:
                keyid:4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/D7BA98CCCD5111F19220611DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.223.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:d5:e5:96:d7:7b:59:bd:dd:89:18:82:57:f6:d7:a9:8b:
         44:fa:22:7a:e6:0a:0e:2f:c1:78:dd:99:e6:c0:c8:32:b0:c2:
         ed:e4:55:48:c2:7c:d1:8a:94:9d:83:60:47:1a:45:78:d3:3d:
         7b:9d:61:1d:6c:9e:70:ac:04:92:c8:1d:c9:ed:94:13:5b:87:
         03:f4:7d:3c:bb:68:f4:3a:13:2d:f2:98:2d:0e:b2:08:b2:e3:
         40:11:ab:6a:86:1c:62:59:60:fb:e6:f0:70:60:86:ea:79:c9:
         de:9d:7c:a4:61:68:8b:d4:cc:8d:f0:0b:49:a1:ed:be:06:f8:
         be:38:d2:71:29:91:46:17:3b:f2:34:1e:da:bc:1d:e6:61:2b:
         00:26:ae:eb:4e:ac:bf:7c:5f:2c:cf:c3:03:54:88:12:26:2d:
         84:ab:fe:17:05:e5:3d:8b:3d:54:17:2d:49:c0:0d:f4:c8:3a:
         c0:14:bb:0f:dc:89:03:10:78:e5:a3:9b:d7:f0:94:22:15:90:
         60:58:c6:c5:8f:b5:e4:4f:61:06:79:de:4e:73:54:48:d5:ad:
         ba:88:e5:c9:3c:32:5f:0b:30:06:c3:e8:0d:4c:c5:e9:a2:09:
         44:e2:99:e3:66:ec:b6:ec:92:ec:41:66:0a:85:3e:ae:1d:d7:
         e8:31:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----