Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/524549DC1B9811F18A7ED8A5DAE4EC9C.roa
File:                     524549DC1B9811F18A7ED8A5DAE4EC9C.roa (raw, json)
Hash identifier:          mTNu6E6psA7ygjh3+Ru0nJy66aaqxT8n/I3XWOVKlbQ=
Subject key identifier:   C8:33:C5:95:B3:2A:15:9A:03:8E:53:FA:7A:7D:72:E6:B1:22:2D:9F
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       07E3
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/524549DC1B9811F18A7ED8A5DAE4EC9C.roa
Signing time:             Mon 09 Mar 2026 09:14:06 +0000
ROA not before:           Mon 09 Mar 2026 09:14:01 +0000
ROA not after:            Sun 09 Mar 2036 09:14:01 +0000
asID:                     327980
IP address blocks:        41.216.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 23 Mar 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Mar  9 09:14:01 2026 GMT
            Not After : Mar  9 09:14:01 2036 GMT
        Subject: CN=69ae8f5e-9019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:f6:e2:93:1e:34:39:2a:07:13:d4:94:45:
                    e3:cd:17:39:60:9d:ae:79:cd:37:f9:03:9f:f4:38:
                    a5:d8:75:c1:d7:5e:25:61:79:ee:09:ff:ff:d7:1e:
                    53:dc:74:da:1b:f5:6c:8b:f5:6b:3f:9a:0e:34:3d:
                    5a:c6:d5:de:88:fd:44:a2:53:c5:09:0b:38:36:64:
                    c5:82:62:3e:a2:cd:d4:43:be:6d:42:7a:9d:1d:f0:
                    4f:f7:8e:02:4e:b1:2c:de:11:4c:91:eb:37:51:ae:
                    11:87:68:4b:b7:21:d0:7f:b8:69:35:a9:f3:40:87:
                    b0:5c:8b:6e:93:84:23:7e:f6:1e:8c:87:1f:80:d3:
                    03:c3:e4:62:fe:13:20:6c:96:dd:f5:fd:9c:28:7b:
                    a3:30:3c:11:93:33:be:8a:6c:f5:dd:0d:ed:7d:65:
                    0d:34:77:ff:a2:3f:d5:4d:22:51:50:86:a2:ed:98:
                    4d:a1:f2:12:8f:52:49:b5:b5:a2:ce:27:a4:1b:a7:
                    01:4c:cf:4d:1d:96:c5:2a:0d:df:34:5b:48:09:9c:
                    d2:59:e6:06:6c:97:12:97:81:43:b9:24:45:55:e6:
                    1d:b6:91:65:64:3d:56:e5:ef:f0:4e:28:92:2f:66:
                    36:6c:61:90:53:5a:ef:5d:7f:d4:94:1e:77:93:03:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:33:C5:95:B3:2A:15:9A:03:8E:53:FA:7A:7D:72:E6:B1:22:2D:9F
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/524549DC1B9811F18A7ED8A5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:da:97:52:14:db:a9:34:2f:97:dd:ca:ba:90:d1:17:47:
         b4:a7:2d:8c:b9:cb:ed:4e:a6:9f:81:d7:a0:cc:3b:57:c0:93:
         65:52:eb:b0:ab:ec:8d:82:e4:20:fd:50:31:bf:0a:9a:81:dc:
         c2:08:01:ce:b6:32:6f:ea:63:cd:07:a3:8b:61:e1:3f:7b:f2:
         7a:56:ff:8e:bf:7c:08:ae:e4:93:b8:40:b0:e6:56:07:ab:ef:
         ba:1a:4a:e6:12:b2:b9:8a:e0:11:b7:24:d2:79:97:a2:a5:31:
         3f:77:33:8a:c6:7e:07:5b:45:c1:23:f3:eb:44:e7:0f:b2:2f:
         68:60:80:21:c0:5a:0a:ec:30:a0:b8:06:f5:a7:e7:73:db:37:
         89:3c:da:9c:95:dd:08:2a:21:2c:09:df:5b:e1:20:7c:ca:49:
         b3:b5:bc:92:41:c6:86:44:42:7e:7b:79:5a:bd:d2:48:95:f3:
         2e:06:c6:d5:f5:1b:80:db:da:fd:9d:36:06:8d:29:8b:f2:fd:
         f9:cd:9c:86:9d:90:f7:33:8e:d9:ca:0b:5a:17:3e:cf:c3:1e:
         da:a6:8e:2e:4c:ce:8d:1f:f9:fb:03:94:8e:1a:05:de:d5:d0:
         16:d4:2f:7b:48:3a:7a:7b:86:be:8a:54:c7:cf:4f:fe:1a:f8:
         a4:25:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:42 2026 by rpki-client