Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/04DE1D30BE4611F1982750DFCE1D38B0.roa
File:                     04DE1D30BE4611F1982750DFCE1D38B0.roa (raw, json)
Hash identifier:          GGNHVZmXYw4zxU0HTRYtcXX+2z0UngJwRMfKVR0H5Og=
Subject key identifier:   07:83:6C:46:FF:7D:AE:95:93:48:27:AB:B6:67:07:F8:27:2D:71:C4
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0CF3
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/04DE1D30BE4611F1982750DFCE1D38B0.roa
Signing time:             Fri 02 Oct 2026 09:45:37 +0000
ROA not before:           Fri 02 Oct 2026 09:45:33 +0000
ROA not after:            Thu 02 Oct 2036 09:45:33 +0000
asID:                     36916
IP address blocks:        41.180.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3315 (0xcf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Oct  2 09:45:33 2026 GMT
            Not After : Oct  2 09:45:33 2036 GMT
        Subject: CN=6abf7d41-a6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:73:f2:17:6a:e6:35:b3:99:cd:65:04:e5:
                    87:df:12:d8:36:d2:26:f7:80:7f:a7:99:54:e0:7d:
                    75:e5:80:c1:dc:39:c5:0a:66:2a:e0:05:5a:a4:c1:
                    75:e7:b1:ad:cb:aa:3a:c4:c8:b8:21:c9:a1:74:fe:
                    46:cd:43:94:84:de:e5:41:c6:3b:a5:1f:38:b4:d0:
                    4b:cd:89:0e:1f:e0:b9:88:9d:70:75:fc:2e:64:26:
                    01:c2:91:2d:c1:8f:73:2e:89:f5:b5:e4:d3:79:16:
                    e8:64:7d:8c:26:bd:aa:2b:85:09:85:91:a5:01:71:
                    0b:65:2c:d6:65:d7:c7:71:42:ae:4d:c9:25:8d:79:
                    5b:1b:bc:f1:03:4c:7b:43:db:05:b6:bc:11:bc:18:
                    19:bd:b0:d3:5b:f8:fe:43:6b:32:f0:73:d8:d5:d8:
                    45:a8:92:42:29:6a:30:93:48:ed:b2:50:f0:0e:bf:
                    cf:29:36:90:55:e2:37:1b:0e:78:e2:99:8e:1b:fa:
                    5f:32:48:8f:23:0c:6d:98:fc:17:9d:cf:98:53:60:
                    93:78:4a:9b:b0:39:47:7f:ca:28:96:c1:bd:60:d7:
                    f7:7c:43:b7:88:1f:37:2c:b4:05:f9:02:b8:e7:5a:
                    c5:4a:3a:ff:cf:59:64:2f:43:a0:1f:c3:69:95:cb:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:83:6C:46:FF:7D:AE:95:93:48:27:AB:B6:67:07:F8:27:2D:71:C4
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/04DE1D30BE4611F1982750DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:b9:12:a0:04:d4:94:84:55:0e:53:59:22:13:d6:9e:52:
         0b:7c:79:4b:4c:54:f6:d5:49:7c:a6:2b:f8:00:83:f5:3e:ce:
         6f:3f:5a:0e:6e:9e:63:ee:a2:ef:e6:c1:33:57:2f:12:c4:32:
         40:cd:01:28:ab:bd:33:c6:b6:f9:c4:f3:f4:3e:64:c2:a7:88:
         a2:f5:7f:a3:09:ad:ee:0a:e7:1a:04:8d:1b:ab:8f:31:83:b6:
         bb:cc:00:b0:55:6c:4a:fb:bd:67:7f:31:66:fc:cd:0f:1d:27:
         a6:89:71:09:26:55:3f:b0:de:25:8b:2d:59:41:3b:6c:8f:d8:
         6a:fe:db:26:87:7f:5a:fd:17:fd:63:fb:4f:e0:c4:db:57:36:
         84:f0:5f:b1:72:13:d4:95:a6:dd:d1:d1:2c:d8:b5:02:51:71:
         0d:3e:18:81:c7:f3:7e:38:05:05:12:e2:2f:30:8d:93:6f:57:
         4e:cd:e0:a2:f3:d4:4e:99:0c:38:07:90:dc:74:24:53:bf:86:
         4a:f2:20:0f:e1:b9:ec:5b:3c:07:a1:71:66:84:7f:61:80:18:
         f0:aa:63:18:7e:11:e7:fc:5b:8c:82:0d:5d:5e:88:df:87:7d:
         ba:e4:59:63:b0:15:2e:f0:f2:1e:ed:5e:b7:78:61:ed:20:e0:
         e8:ce:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----