Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/E682EBBCCC7411F19EDAB4FDCE1D38B0.roa
File:                     E682EBBCCC7411F19EDAB4FDCE1D38B0.roa (raw, json)
Hash identifier:          PSXqPLjVFSHDcjtZ0BTL6m+np8Z0EOCei72ykHqfn4E=
Subject key identifier:   69:A0:50:9E:F3:CF:39:F3:E1:CD:55:FA:03:A7:3F:0B:8F:4D:93:ED
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       13
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/E682EBBCCC7411F19EDAB4FDCE1D38B0.roa
Signing time:             Tue 20 Oct 2026 10:56:28 +0000
ROA not before:           Tue 20 Oct 2026 10:56:23 +0000
ROA not after:            Wed 31 Dec 2036 10:56:23 +0000
asID:                     37037
IP address blocks:        41.190.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Oct 20 10:56:23 2026 GMT
            Not After : Dec 31 10:56:23 2036 GMT
        Subject: CN=6ad748dc-406b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:59:c3:b1:09:77:15:48:8c:20:57:15:0f:
                    01:5c:b6:a8:67:39:63:34:37:21:7d:1b:05:69:8a:
                    ab:e2:c7:13:fe:a6:c0:06:03:29:e7:6b:a1:60:6d:
                    ba:17:ce:17:26:57:4f:59:42:ba:a7:7c:89:2f:ce:
                    dd:c4:90:73:b8:37:81:5d:92:24:73:1c:c4:d8:c6:
                    68:26:b2:b0:85:9d:34:e9:03:ca:2f:b9:dc:e1:ad:
                    49:73:e7:49:ee:19:57:53:30:e8:00:5e:01:1b:a9:
                    79:7c:fb:fa:36:16:b3:e7:71:a0:83:21:01:30:f0:
                    9d:96:14:6f:66:01:5f:17:6c:7c:f3:27:c6:a4:eb:
                    63:15:15:e6:b4:b8:d9:62:43:4b:40:3c:cb:24:5a:
                    bc:91:b8:10:c5:7d:e7:4e:57:b5:aa:5c:ee:e8:a4:
                    a2:09:fe:95:bb:55:da:97:1d:bf:c2:c3:b3:ea:7f:
                    c7:31:65:03:da:a2:88:1f:70:dc:96:8f:1f:1d:af:
                    ce:46:c8:d4:2e:e4:e0:1b:c4:6b:83:ed:9b:84:57:
                    a7:f8:3a:77:de:da:52:c9:d7:3c:a2:a9:a1:87:08:
                    68:7b:70:49:9a:a1:93:6b:56:f3:ad:07:93:89:f9:
                    55:69:9b:47:8f:46:f4:31:3e:6e:aa:85:a7:d7:2f:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A0:50:9E:F3:CF:39:F3:E1:CD:55:FA:03:A7:3F:0B:8F:4D:93:ED
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/E682EBBCCC7411F19EDAB4FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.190.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:77:0b:e7:4c:a1:7c:cd:eb:ea:0f:fa:bb:6b:3a:00:e7:fa:
         00:7a:97:92:d2:09:51:44:0a:6c:40:02:1f:75:ac:d2:ed:72:
         f9:03:72:0d:7a:c4:79:3c:fd:59:cf:c1:71:17:fe:67:ea:81:
         82:cd:3c:72:aa:60:a6:36:41:0b:dd:28:aa:6f:93:c8:b6:71:
         b8:a8:7b:0c:6e:1b:c7:a2:43:fd:23:81:03:fa:97:e8:7e:d3:
         8f:29:a0:ea:af:81:50:25:45:d6:c4:22:87:74:0c:16:c7:d3:
         d0:7b:9e:c3:cd:7d:c5:31:6f:2d:e9:6d:31:20:b2:e4:90:eb:
         d0:ad:86:e4:1f:04:19:47:9b:b7:1e:72:16:a3:66:65:0a:7c:
         d8:fd:55:df:bf:d0:c7:79:37:46:15:70:ce:99:ae:bf:ac:4d:
         9f:16:dc:b9:3f:63:3e:49:ce:13:58:c0:e4:e1:8c:db:29:96:
         e3:3f:f1:23:57:97:d2:0a:7e:86:89:17:c1:37:35:4e:0b:55:
         c4:69:e0:15:33:01:4e:5e:c7:b9:57:d1:9a:9e:1a:8d:e6:9f:
         7c:d1:2c:78:2f:0c:0f:05:c1:74:ad:08:21:1a:07:46:2c:06:
         b9:48:a8:70:f1:69:a3:af:33:7e:51:ae:b3:d3:d2:eb:ef:a6:
         7c:b0:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----