Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/26E75758BE4511F1A73673DACE1D38B0.roa
File:                     26E75758BE4511F1A73673DACE1D38B0.roa (raw, json)
Hash identifier:          HwzAfo5C6zs8eCPARI71sRTH3UwXOHmfo6rfot7Pb8E=
Subject key identifier:   1B:4B:88:84:A1:64:9C:18:8E:43:AE:F4:81:9E:4B:97:15:48:0B:40
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0CE7
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/26E75758BE4511F1A73673DACE1D38B0.roa
Signing time:             Fri 02 Oct 2026 09:39:24 +0000
ROA not before:           Fri 02 Oct 2026 09:39:20 +0000
ROA not after:            Thu 02 Oct 2036 09:39:20 +0000
asID:                     36916
IP address blocks:        41.180.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3303 (0xce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Oct  2 09:39:20 2026 GMT
            Not After : Oct  2 09:39:20 2036 GMT
        Subject: CN=6abf7bcc-6829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:2e:b5:a1:71:fa:34:c9:1a:dc:f7:20:f6:
                    0a:75:42:40:89:ea:41:8f:0c:a5:a0:28:85:fa:11:
                    b2:db:0e:be:b4:14:4e:9b:bd:05:62:17:6d:7b:02:
                    cd:6f:a5:a2:a8:93:f7:f1:de:69:55:36:a8:9c:65:
                    ce:16:25:81:b0:c5:36:71:9c:57:71:89:b2:5a:a7:
                    3c:00:6f:4a:32:65:0a:d5:a0:31:e1:22:2e:21:99:
                    68:5b:05:c5:a9:61:44:4b:75:84:aa:93:30:47:98:
                    d2:19:b5:79:01:bc:2f:ed:1e:98:c0:d7:c7:f2:96:
                    49:27:40:5f:1c:59:cb:c4:98:36:9c:0d:c5:78:a4:
                    0c:f2:55:44:5e:4a:4f:f9:3b:9d:ed:2c:b7:33:1e:
                    74:0e:98:93:5e:19:5c:92:79:ec:be:8d:9a:82:23:
                    c6:b4:3f:fb:b2:35:e2:fb:0f:26:9a:20:38:66:ba:
                    7f:ed:6f:de:0b:ca:f9:4d:88:e5:ef:35:36:44:4e:
                    da:ea:dc:e0:64:92:a9:56:ea:b4:cd:a7:de:b5:61:
                    c5:49:dd:ae:3d:ad:c6:dd:6e:57:d8:ab:9a:79:5c:
                    61:e3:b6:c1:b5:61:46:1e:7a:f5:5a:a4:5d:a3:b9:
                    fa:3d:53:f9:3f:d9:0f:88:60:23:01:2c:64:15:f4:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4B:88:84:A1:64:9C:18:8E:43:AE:F4:81:9E:4B:97:15:48:0B:40
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/26E75758BE4511F1A73673DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:c0:fa:25:38:84:63:e7:bb:17:58:65:84:c9:3d:4c:8e:
         15:96:dc:27:5f:e0:b5:be:09:1d:57:c6:cb:e6:26:b3:df:17:
         46:01:5d:eb:6a:d2:71:e3:9a:16:54:76:7e:77:17:94:bb:1f:
         38:0a:41:17:88:7a:ec:d0:47:3d:02:d6:68:1c:4d:c1:9b:48:
         f2:d1:11:eb:15:be:e4:e3:18:49:71:ed:49:44:48:7b:44:6c:
         c4:d9:35:cd:8f:0f:70:fc:fc:bb:31:5f:e0:d7:a6:a5:d7:3b:
         15:c8:55:f9:b9:2a:ed:7e:c4:c2:75:11:b8:7b:a4:9b:5c:23:
         16:02:38:8a:5a:8e:84:0c:bf:57:51:ca:ad:cd:1e:a1:39:ee:
         7b:7f:68:ac:f2:f6:47:2d:00:93:52:7f:df:a2:92:3d:3a:b8:
         12:d1:63:6a:4b:14:d4:cb:d0:8b:e0:a6:c9:7a:ff:52:85:7e:
         0f:2c:26:fd:94:d9:96:2a:bb:bd:e9:d0:f1:b5:e4:8f:58:c2:
         e3:39:33:85:02:4c:7d:a5:5f:dc:2f:59:5b:c8:c1:65:12:d6:
         d2:24:4e:a1:fd:82:9e:4a:dd:e0:6f:94:41:53:a0:79:b8:a0:
         fa:24:ab:c4:5e:1f:cd:77:d5:aa:31:7e:af:3b:51:69:b1:4d:
         af:0b:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----