Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CAFE761EDDDF11F1919FFBF1CE1D38B0.roa
File:                     CAFE761EDDDF11F1919FFBF1CE1D38B0.roa (raw, json)
Hash identifier:          T5WJA7uEx3xH/Ld8wVY9EZhw3mjiQUHFj4sZj7Cbe1w=
Subject key identifier:   F7:F9:4B:89:DC:B5:0D:F4:2B:E4:BA:F6:05:D6:41:4C:99:B9:83:70
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0D49
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CAFE761EDDDF11F1919FFBF1CE1D38B0.roa
Signing time:             Wed 11 Nov 2026 14:54:28 +0000
ROA not before:           Wed 11 Nov 2026 14:54:24 +0000
ROA not after:            Tue 11 Nov 2036 14:54:24 +0000
asID:                     396356
IP address blocks:        41.180.152.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3401 (0xd49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Nov 11 14:54:24 2026 GMT
            Not After : Nov 11 14:54:24 2036 GMT
        Subject: CN=6af481a4-a22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:1e:8a:3c:66:23:77:82:4e:b3:ed:fe:7d:
                    c9:a5:d3:88:92:38:9f:da:03:5f:47:02:1b:c6:77:
                    cf:be:1b:c1:6d:13:9b:8f:36:7e:8a:a7:48:8c:d2:
                    9e:a3:89:6f:79:d1:63:6c:62:f0:7a:6d:52:ca:c2:
                    91:1b:d0:70:da:74:e8:f9:24:73:af:98:80:a3:30:
                    63:0e:9d:d4:8c:55:39:8f:d5:f3:b0:b0:6a:15:36:
                    6e:4f:0e:2f:60:10:4a:7b:b9:13:50:84:68:ef:d2:
                    7a:77:1f:ed:9e:46:37:52:f5:71:0c:47:42:8e:81:
                    a6:d5:52:d2:4c:5b:b2:7c:6e:97:d7:dd:10:9c:39:
                    52:38:d1:bd:91:a4:3a:07:7d:e6:9c:ac:ab:05:a5:
                    8e:0b:54:e2:dc:81:e4:1b:d6:95:a2:45:97:01:e7:
                    3e:52:8e:96:e9:dc:e4:ac:e3:38:0b:00:a5:0f:80:
                    ce:01:e3:a3:81:9a:4e:40:3c:ce:e3:1e:7c:d9:f5:
                    9c:39:31:fb:01:69:a7:79:4a:2d:c6:fd:e6:f5:fe:
                    08:23:56:71:68:48:c7:be:71:82:48:d5:ca:d7:0c:
                    ab:9a:4b:22:99:ee:0e:fe:a9:0b:18:c4:8c:15:41:
                    b7:eb:53:21:fb:5e:f5:24:84:70:3d:af:35:f8:85:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F9:4B:89:DC:B5:0D:F4:2B:E4:BA:F6:05:D6:41:4C:99:B9:83:70
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CAFE761EDDDF11F1919FFBF1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b6:40:b9:23:e3:51:25:40:cf:98:8a:16:3d:06:9d:9b:a3:
         f2:dd:30:e9:0e:1f:0d:d4:bf:84:eb:ee:2d:90:96:6a:ce:73:
         e4:e1:28:9b:79:c2:80:fe:c0:fe:4f:eb:b0:aa:0e:ce:fa:43:
         08:4e:19:bd:b3:f4:54:a5:c2:b1:04:41:63:90:d6:6c:33:c7:
         60:81:47:9f:4f:49:55:2f:32:04:c4:e6:60:88:84:1b:4a:a9:
         50:41:f2:54:51:6c:3c:15:17:fa:3c:15:22:df:20:95:af:33:
         41:38:3c:90:54:9a:1a:a7:5c:9a:7e:6c:4b:93:54:c3:d7:e5:
         0a:3c:51:e5:58:38:e6:65:1e:eb:d7:34:b2:f0:8f:df:a4:3a:
         32:0c:33:b6:06:e0:fb:2a:c0:f4:c0:93:6b:5e:e0:7d:a4:e4:
         fb:49:06:44:3d:8a:6f:3d:71:d4:31:c8:04:5c:fb:f1:5d:1a:
         e1:ae:1a:79:a1:31:e9:34:3d:e0:e6:44:e0:bb:22:a8:e8:ab:
         aa:f8:e9:26:9a:14:de:7e:60:c0:93:89:5c:0f:a6:dd:74:4e:
         29:a8:a5:23:7c:5b:6c:92:bc:10:06:11:63:8d:06:1d:06:ec:
         a7:0e:80:d8:e5:1a:05:49:1a:6d:4c:43:2d:b4:17:2b:54:30:
         af:56:83:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----