Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F94940E8CD2811F1B5B75618CF1D38B0.roa
File:                     F94940E8CD2811F1B5B75618CF1D38B0.roa (raw, json)
Hash identifier:          jtutNh1jndjzjgRTROEgWoSA8BbDnyO6D4WObMsZAdM=
Subject key identifier:   5E:AD:E4:67:29:E4:45:C6:30:44:6C:3A:0C:9E:6C:F8:DD:35:D2:E0
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0D1E
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F94940E8CD2811F1B5B75618CF1D38B0.roa
Signing time:             Wed 21 Oct 2026 08:25:29 +0000
ROA not before:           Wed 21 Oct 2026 08:25:25 +0000
ROA not after:            Tue 21 Oct 2036 08:25:25 +0000
asID:                     206092
IP address blocks:        41.180.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3358 (0xd1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Oct 21 08:25:25 2026 GMT
            Not After : Oct 21 08:25:25 2036 GMT
        Subject: CN=6ad876f9-7a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9f:54:a9:06:0c:cc:97:8d:66:7c:e3:a5:45:
                    cc:a2:c8:f0:56:a1:68:33:69:58:a6:65:cb:d6:e2:
                    a2:19:fb:3d:bf:f0:74:a4:a5:3c:b0:25:1b:1c:00:
                    3c:99:31:cb:6c:ce:b6:09:3d:88:be:1f:90:5d:2c:
                    4f:fc:44:40:35:01:04:a8:13:87:db:f4:a9:6a:dd:
                    f2:e1:04:be:57:e0:46:98:37:77:72:66:a2:d2:3a:
                    4a:fb:a5:23:f5:61:3b:ed:f2:71:e8:e9:8c:b8:1f:
                    0e:ab:a3:ed:ef:17:d6:f2:41:d9:23:9a:9c:90:06:
                    5a:a5:91:45:d2:da:e7:a2:e2:82:33:ea:f5:ea:52:
                    c9:97:d7:8e:09:d3:2c:9a:84:c1:36:b3:18:c7:fa:
                    df:a3:84:3d:98:58:5a:39:6f:d4:bd:4a:58:58:fa:
                    dc:4c:24:db:c8:92:a8:2c:85:2f:ee:70:23:b2:1c:
                    c1:c2:35:d4:f2:2d:46:dd:ab:bf:f7:3b:d4:b4:4f:
                    7c:ad:af:d4:fd:f3:8a:3d:ca:8e:c7:89:71:53:68:
                    fa:29:2c:5d:e7:0f:f0:f5:31:cd:8a:b5:fd:ba:97:
                    b5:65:be:02:d2:6b:f3:4d:4c:2e:57:f3:d6:0a:f1:
                    bf:bc:d3:71:21:86:6f:fb:c4:ef:b8:4c:3a:34:77:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AD:E4:67:29:E4:45:C6:30:44:6C:3A:0C:9E:6C:F8:DD:35:D2:E0
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F94940E8CD2811F1B5B75618CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:25:4c:bd:12:a3:7c:f9:b0:a6:46:38:e4:85:2c:6b:69:f3:
         9f:88:d7:f6:14:b5:e5:74:02:f8:a4:e2:41:51:cf:2d:c9:fa:
         64:f4:ed:5b:f6:78:af:b2:37:55:66:e2:ef:cb:e8:5d:4c:32:
         7e:54:20:c5:57:c0:d5:30:41:d8:e3:c7:c8:4f:1b:42:94:69:
         b2:d2:0b:47:04:58:c0:81:fe:f1:ba:30:ac:78:5c:a0:ef:35:
         ec:07:a1:97:8e:90:0a:66:1e:b3:88:26:26:94:21:bf:b5:d9:
         78:d7:4c:b3:74:99:ec:7f:e3:a6:fa:aa:58:89:fa:29:12:4b:
         90:0e:b0:c9:b7:32:dd:61:50:4c:7d:70:8e:51:cc:01:8d:35:
         19:66:a1:7e:a3:e2:4e:17:73:77:b6:44:a1:3d:a6:b7:88:a8:
         9c:31:68:46:bc:22:06:58:47:20:f6:43:9f:fc:43:db:99:c3:
         69:15:47:76:6c:7d:62:7b:b6:27:45:9c:95:73:66:8b:ee:e6:
         40:81:ab:73:41:3e:b4:8d:cd:ff:45:41:9d:5d:cc:38:ee:71:
         10:8f:f8:0b:3c:b0:2c:5d:ea:4f:0a:44:a9:2c:7c:4e:9d:5e:
         68:fd:ac:9e:34:e2:d1:54:8e:34:b5:40:65:d9:f3:22:a3:43:
         8f:69:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----