Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/5F0BEF181BB611F189A8ADD1DAE4EC9C.roa
File:                     5F0BEF181BB611F189A8ADD1DAE4EC9C.roa (raw, json)
Hash identifier:          NQquyVC4cnvdXsxHj7uaNV5CrT0LMfKcIAeKp0BFMLI=
Subject key identifier:   63:F5:1F:39:7B:C5:9B:E2:37:DD:A2:6F:72:4A:D0:D0:CC:05:3E:48
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       07F1
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/5F0BEF181BB611F189A8ADD1DAE4EC9C.roa
Signing time:             Mon 09 Mar 2026 12:49:12 +0000
ROA not before:           Mon 09 Mar 2026 12:49:07 +0000
ROA not after:            Sun 09 Mar 2036 12:49:07 +0000
asID:                     40676
IP address blocks:        41.216.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Mar 2026 00:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Mar  9 12:49:07 2026 GMT
            Not After : Mar  9 12:49:07 2036 GMT
        Subject: CN=69aec1c8-ee97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:9c:0b:25:a8:4f:85:69:0d:ef:80:20:b6:
                    8d:2e:24:55:41:c6:9b:29:8a:6d:42:0a:68:4b:e6:
                    b0:27:94:0c:66:fe:0b:12:7f:55:b9:f3:df:5b:8a:
                    7f:dd:19:eb:07:8f:40:a3:06:96:8e:02:92:29:45:
                    f6:d8:42:cc:ea:e3:b6:f4:9a:04:5d:da:27:ca:6e:
                    1e:61:38:3a:1f:5b:ae:07:56:c0:3d:3a:fc:6c:61:
                    a5:6a:a5:26:68:58:8c:f6:fa:44:48:73:93:4c:04:
                    71:21:eb:fe:a3:c4:3b:62:21:47:b9:6f:20:c6:bc:
                    e8:0b:6e:0c:46:f7:3e:2b:a3:d5:e2:0f:82:3d:36:
                    82:94:aa:54:71:9d:2a:f7:8c:1d:0c:39:c5:b5:c5:
                    32:ea:15:95:3b:34:01:f2:8e:d9:88:77:78:8d:3b:
                    1a:9f:97:77:4d:df:90:e8:2b:b2:56:36:3e:2f:7c:
                    73:a1:24:70:b6:9e:58:31:42:0f:e4:50:07:20:55:
                    ac:c2:95:6c:0d:03:37:8f:82:d2:f4:46:a6:4c:8e:
                    03:1a:d5:49:cd:ed:71:b6:62:b3:a0:9a:99:6a:27:
                    a9:27:25:41:41:9f:25:c8:bb:7c:61:8b:aa:35:e7:
                    2c:53:ce:c9:88:14:86:6e:89:b4:9a:28:f2:d8:77:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F5:1F:39:7B:C5:9B:E2:37:DD:A2:6F:72:4A:D0:D0:CC:05:3E:48
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/5F0BEF181BB611F189A8ADD1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:0e:68:cc:38:37:26:98:c2:36:67:16:e1:45:df:56:50:
         50:d9:a0:f4:0f:4c:6c:e3:a6:94:fe:d2:d7:fc:ce:e4:e3:8a:
         22:8c:75:81:4a:aa:54:a3:85:ba:33:c9:11:0b:2c:35:0e:dd:
         62:ce:49:36:5a:76:22:13:ac:4d:21:2b:f2:53:15:4c:ab:a5:
         d9:51:8e:f7:33:5c:aa:d9:51:dd:0e:5d:f7:96:5c:9c:2f:49:
         7d:c2:79:a7:34:b6:90:a8:ea:a5:0c:3b:88:35:44:3b:d4:53:
         4b:1e:fd:c4:55:18:8a:13:30:b8:84:0e:0b:54:c5:07:2b:1a:
         6f:d6:db:08:b3:63:a3:24:9d:68:3c:4e:2b:10:1f:93:59:39:
         09:81:50:b9:55:a3:13:e5:f3:69:2f:03:a0:07:3d:80:29:ae:
         fb:11:77:a5:f5:7a:e0:f0:f0:bc:1d:4c:8c:ef:b2:84:bc:09:
         34:5f:c9:38:ac:4c:37:02:cd:d5:2d:23:1a:c9:dc:f1:39:a0:
         5b:ff:1b:a7:ce:0a:b0:b1:41:3d:c6:6f:ed:f0:fd:8b:08:2b:
         ea:6d:60:75:28:ca:10:fa:18:01:c9:82:0b:4b:15:09:85:59:
         c1:05:4e:98:49:42:ce:07:6a:d0:9d:3a:34:a4:28:d7:81:44:
         ae:d5:43:e4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNjAzMDkxMjQ5MDdaFw0zNjAzMDkxMjQ5MDdaMBgxFjAU
BgNVBAMTDTY5YWVjMWM4LWVlOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPdpwLJahPhWkN74Agto0uJFVBxpspim1CCmhL5rAnlAxm/gsSf1W5899b
in/dGesHj0CjBpaOApIpRfbYQszq47b0mgRd2ifKbh5hODofW64HVsA9OvxsYaVq
pSZoWIz2+kRIc5NMBHEh6/6jxDtiIUe5byDGvOgLbgxG9z4ro9XiD4I9NoKUqlRx
nSr3jB0MOcW1xTLqFZU7NAHyjtmId3iNOxqfl3dN35DoK7JWNj4vfHOhJHC2nlgx
Qg/kUAcgVazClWwNAzePgtL0RqZMjgMa1UnN7XG2YrOgmplqJ6knJUFBnyXIu3xh
i6o15yxTzsmIFIZuibSaKPLYd0KnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUY/Uf
OXvFm+I33aJvckrQ0MwFPkgwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4LzVGMEJFRjE4MUJCNjExRjE4OUE4QUREMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LgwDQYJKoZIhvcNAQEL
BQADggEBAD4bDmjMODcmmMI2ZxbhRd9WUFDZoPQPTGzjppT+0tf8zuTjiiKMdYFK
qlSjhbozyRELLDUO3WLOSTZadiITrE0hK/JTFUyrpdlRjvczXKrZUd0OXfeWXJwv
SX3Ceac0tpCo6qUMO4g1RDvUU0se/cRVGIoTMLiEDgtUxQcrGm/W2wizY6MknWg8
TisQH5NZOQmBULlVoxPl82kvA6AHPYAprvsRd6X1euDw8LwdTIzvsoS8CTRfyTis
TDcCzdUtIxrJ3PE5oFv/G6fOCrCxQT3Gb+3w/YsIK+ptYHUoyhD6GAHJggtLFQmF
WcEFTphJQs4HatCdOjSkKNeBRK7VQ+Q=
-----END CERTIFICATE-----
Generated at Tue Mar 10 06:32:33 2026 by rpki-client