Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9E2386ACBE4511F1818202DDCE1D38B0.roa
File:                     9E2386ACBE4511F1818202DDCE1D38B0.roa (raw, json)
Hash identifier:          cre7w95uWd5IsBXhIaPq5Me+zVuQkwGY+dF/YY61RWA=
Subject key identifier:   32:45:09:DE:AE:1E:7C:AC:55:CD:25:B1:75:FC:2E:30:21:2D:17:F2
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0CED
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9E2386ACBE4511F1818202DDCE1D38B0.roa
Signing time:             Fri 02 Oct 2026 09:42:44 +0000
ROA not before:           Fri 02 Oct 2026 09:42:40 +0000
ROA not after:            Thu 02 Oct 2036 09:42:40 +0000
asID:                     36916
IP address blocks:        41.180.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3309 (0xced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Oct  2 09:42:40 2026 GMT
            Not After : Oct  2 09:42:40 2036 GMT
        Subject: CN=6abf7c94-2583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:a6:ee:52:9c:62:f5:e3:0f:21:cf:e9:99:
                    bd:59:ab:94:02:f8:bc:0b:a6:be:e6:cf:82:8f:9e:
                    54:52:c7:a2:ec:9f:c7:39:43:3d:e8:4c:dd:fe:ef:
                    ca:e6:b5:05:57:cc:74:86:85:40:9b:a2:dd:c4:90:
                    5d:02:7a:ba:a1:2d:75:d5:44:c8:3a:ee:42:3e:dd:
                    03:e2:e9:72:be:12:42:8a:cf:2f:b9:18:6c:99:a7:
                    d0:c7:ab:ea:42:4a:8c:db:34:3e:09:70:13:31:a4:
                    b2:b9:bb:15:42:4c:cd:29:bb:1e:98:60:ad:9e:8f:
                    ca:41:e4:4b:21:8c:36:b9:af:3f:97:48:51:5f:e4:
                    f6:c6:f9:0d:47:82:57:97:09:8c:b7:71:88:ae:33:
                    b6:41:f1:49:c9:3f:f4:58:02:53:47:c2:25:00:4a:
                    d0:8d:d7:26:74:4d:a0:3a:8c:a0:8a:4c:7d:6d:b3:
                    de:68:93:30:59:0e:cd:83:25:a1:ad:a2:2f:fd:88:
                    36:ba:b5:bd:67:51:17:82:a5:2b:13:e2:d4:1c:89:
                    39:b6:2d:92:34:64:98:0a:d2:f0:ba:9d:5f:7a:15:
                    c0:02:10:3a:d8:18:b8:e0:b5:d6:31:9f:b9:ac:46:
                    2d:a9:25:0e:50:ef:a2:fb:6c:75:43:85:1d:85:8f:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:09:DE:AE:1E:7C:AC:55:CD:25:B1:75:FC:2E:30:21:2D:17:F2
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9E2386ACBE4511F1818202DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:68:98:02:ea:9b:2b:b7:29:89:56:1c:ba:82:34:f9:32:b0:
         23:e5:3e:49:c8:06:0c:4a:30:cb:c8:35:b5:ea:3b:1e:4b:45:
         17:9a:9d:f9:a7:6b:60:1b:87:af:ae:7f:6d:2b:56:54:7f:b1:
         36:55:36:08:da:fd:65:5e:5b:f0:f8:2e:4e:a7:75:f4:9a:2c:
         a4:3c:17:9e:ec:16:36:3b:b2:a5:a7:04:b1:9a:bc:c2:4a:27:
         48:c8:10:33:56:f7:c7:80:59:6c:5b:b3:62:65:f0:fe:c1:87:
         09:11:85:9a:1c:d0:5f:26:be:93:da:06:fe:09:38:9c:db:7a:
         ae:e5:4b:bb:4e:05:24:fa:73:32:f1:16:11:b8:72:04:e9:52:
         ee:e2:7f:97:75:6a:06:01:90:61:c8:ed:7f:8a:98:da:3b:5e:
         36:37:d3:71:62:20:b2:d5:ea:e8:ea:83:65:e8:0e:aa:0b:22:
         26:66:4f:30:e1:29:67:f8:f0:ea:a0:56:48:e8:75:ba:45:ab:
         ae:5e:8e:79:1f:d0:8b:d4:55:07:81:90:e6:a1:df:86:2e:eb:
         08:b7:c1:b1:c1:47:0f:83:b8:e4:5a:e1:71:b2:9a:92:03:48:
         17:40:dd:42:ff:dc:e4:63:73:25:ab:70:4d:ec:ef:ef:9b:6f:
         76:35:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----