Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DDFDE950DDDC11F19F016FE0CE1D38B0.roa
File:                     DDFDE950DDDC11F19F016FE0CE1D38B0.roa (raw, json)
Hash identifier:          f6I4BJS6Nv3uCCV7MbpivVclDeE8ty0TTDO/591iiks=
Subject key identifier:   9F:2E:A9:5C:7B:09:4F:91:13:EF:EE:AB:C8:C3:60:22:04:5F:34:4C
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0D39
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DDFDE950DDDC11F19F016FE0CE1D38B0.roa
Signing time:             Wed 11 Nov 2026 14:33:32 +0000
ROA not before:           Wed 11 Nov 2026 14:33:27 +0000
ROA not after:            Tue 11 Nov 2036 14:33:27 +0000
asID:                     396356
IP address blocks:        41.180.136.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3385 (0xd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Nov 11 14:33:27 2026 GMT
            Not After : Nov 11 14:33:27 2036 GMT
        Subject: CN=6af47cbb-a53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:4a:c0:c5:9f:83:0b:a2:94:1c:2c:bc:ec:
                    2d:61:0e:96:ee:1f:e1:18:8a:a9:5e:db:3c:80:4f:
                    63:07:45:37:17:ee:eb:a9:e3:93:e8:71:48:44:40:
                    4b:d3:8a:f8:0b:4f:f1:76:bf:52:8e:e9:17:78:c7:
                    f0:e2:a1:2a:c1:74:87:ab:80:7c:ab:56:47:03:1c:
                    f3:5d:af:58:86:15:9d:72:7e:da:93:a3:ef:07:fc:
                    cd:41:93:ca:06:31:a0:11:31:9a:c9:b8:fc:2d:28:
                    ed:8b:03:1c:d5:78:44:7b:e0:8b:41:dc:1a:e4:5e:
                    a3:8f:d5:f8:40:57:d0:3d:48:59:ec:93:d8:75:4f:
                    3e:fa:4c:d9:6c:ce:8f:b3:aa:ec:2a:21:63:6a:38:
                    43:39:21:ce:94:fe:d3:d6:93:69:40:5f:6c:ae:a9:
                    0e:14:e9:dc:e5:88:0f:f5:dd:69:53:73:28:4f:94:
                    07:82:eb:aa:12:16:c7:8c:5e:b4:ac:c2:7b:9e:a2:
                    78:f6:dd:0b:40:70:d4:53:2e:fe:45:f8:9b:47:08:
                    fc:eb:10:47:bc:10:4a:5b:a8:cf:8c:6d:5b:e1:94:
                    c5:36:05:64:22:f9:95:4b:b5:d0:69:cc:11:40:6f:
                    df:8b:54:88:1f:28:49:a2:f5:2a:26:d5:2e:22:50:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2E:A9:5C:7B:09:4F:91:13:EF:EE:AB:C8:C3:60:22:04:5F:34:4C
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DDFDE950DDDC11F19F016FE0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ae:cb:a7:d3:f7:09:07:9e:29:85:e1:5b:1d:8b:fa:50:bf:
         a2:a6:a3:e2:89:ae:c8:a7:ad:72:a6:e8:19:0e:73:fd:01:0f:
         58:23:1a:4d:d1:df:b4:db:97:4a:57:50:89:06:c9:b4:6a:97:
         d4:07:af:6b:bd:67:a0:a2:d2:2d:da:a6:4a:80:89:d1:7f:ed:
         23:79:ed:57:73:11:1a:06:6f:26:e1:f0:be:fb:ce:26:ed:71:
         79:85:10:06:18:db:e0:33:07:42:4c:d9:a8:56:4b:e6:48:95:
         d1:32:29:2d:6c:ba:86:74:01:2d:ee:ce:cc:db:dd:3b:a9:4c:
         9c:8b:fe:50:ce:21:1d:cf:9d:6e:44:b6:9a:f8:8b:e9:33:43:
         10:e4:1b:f8:cc:34:9f:61:f0:8c:4a:88:9b:34:4a:29:cc:c0:
         3c:6a:ab:2e:0c:54:bb:cd:de:a6:bc:dd:03:6c:ec:4d:3a:73:
         29:d9:3c:c8:29:2a:23:52:96:57:5e:6d:1b:f8:5c:c2:97:13:
         cc:8e:6e:26:d8:e7:56:62:50:4b:62:02:c2:43:a9:9e:0d:25:
         ae:b3:38:1a:cf:88:ce:a1:1b:33:80:a4:d8:af:bf:b1:3b:d2:
         52:0d:8f:4a:55:da:25:6b:af:35:64:4d:ff:f2:94:90:e6:a6:
         6a:50:e2:62
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjExMTExNDMzMjdaFw0zNjExMTExNDMzMjdaMBgxFjAU
BgNVBAMTDTZhZjQ3Y2JiLWE1M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDM2UrAxZ+DC6KUHCy87C1hDpbuH+EYiqle2zyAT2MHRTcX7uup45PocUhE
QEvTivgLT/F2v1KO6Rd4x/DioSrBdIergHyrVkcDHPNdr1iGFZ1yftqTo+8H/M1B
k8oGMaARMZrJuPwtKO2LAxzVeER74ItB3BrkXqOP1fhAV9A9SFnsk9h1Tz76TNls
zo+zquwqIWNqOEM5Ic6U/tPWk2lAX2yuqQ4U6dzliA/13WlTcyhPlAeC66oSFseM
XrSswnueonj23QtAcNRTLv5F+JtHCPzrEEe8EEpbqM+MbVvhlMU2BWQi+ZVLtdBp
zBFAb9+LVIgfKEmi9Som1S4iUNyHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUny6p
XHsJT5ET7+6ryMNgIgRfNEwwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4L0RERkRFOTUwREREQzExRjE5RjAxNkZFMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAptIgwDQYJKoZIhvcNAQEL
BQADggEBAKCuy6fT9wkHnimF4Vsdi/pQv6Kmo+KJrsinrXKm6BkOc/0BD1gjGk3R
37Tbl0pXUIkGybRql9QHr2u9Z6Ci0i3apkqAidF/7SN57VdzERoGbybh8L77zibt
cXmFEAYY2+AzB0JM2ahWS+ZIldEyKS1suoZ0AS3uzszb3TupTJyL/lDOIR3PnW5E
tpr4i+kzQxDkG/jMNJ9h8IxKiJs0SinMwDxqqy4MVLvN3qa83QNs7E06cynZPMgp
KiNSlldebRv4XMKXE8yObibY51ZiUEtiAsJDqZ4NJa6zOBrPiM6hGzOApNivv7E7
0lINj0pV2iVrrzVkTf/ylJDmpmpQ4mI=
-----END CERTIFICATE-----