Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/74A6DAE01B9811F19309A2A7DAE4EC9C.roa
File:                     74A6DAE01B9811F19309A2A7DAE4EC9C.roa (raw, json)
Hash identifier:          b8rwnTmBVc0IlB6IRsprx5se6KL66PEw8Ftr/oDL5g4=
Subject key identifier:   81:4C:77:D1:26:A3:D2:E5:1D:1C:51:2A:C1:8F:20:B6:2E:EA:F4:F9
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       07E5
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/74A6DAE01B9811F19309A2A7DAE4EC9C.roa
Signing time:             Mon 09 Mar 2026 09:15:04 +0000
ROA not before:           Mon 09 Mar 2026 09:14:59 +0000
ROA not after:            Sun 09 Mar 2036 09:14:59 +0000
asID:                     327980
IP address blocks:        41.216.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 23 Mar 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2021 (0x7e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Mar  9 09:14:59 2026 GMT
            Not After : Mar  9 09:14:59 2036 GMT
        Subject: CN=69ae8f97-4fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:17:dc:1a:1b:64:12:75:57:66:c0:d2:64:
                    56:72:c0:d9:c0:55:77:73:77:aa:10:b4:5a:7c:52:
                    56:b6:f2:6b:ba:7e:7d:a7:23:e3:cc:da:23:e5:33:
                    06:5d:01:89:1d:53:bc:a0:e8:c4:5e:dd:75:dd:bf:
                    3f:84:26:0c:a1:8a:4f:68:24:0a:b9:08:d7:6d:78:
                    9a:d8:1e:f8:7d:06:2e:d3:f2:14:b3:5e:b6:2f:98:
                    52:88:ac:c5:2e:bb:3b:0d:e6:aa:37:8a:e4:b3:9e:
                    a9:8a:d0:d5:d4:3e:64:2b:fa:44:1b:53:88:b0:26:
                    2a:3b:a5:98:60:24:de:57:13:f8:5d:c8:13:35:70:
                    66:37:dc:3d:9b:34:bf:c7:52:76:85:43:e2:b8:e3:
                    36:cc:9e:7a:3e:74:e0:b0:5c:f7:27:28:1f:c4:7d:
                    ac:54:b7:d0:37:d8:50:12:0a:8e:da:06:ab:c7:17:
                    39:43:f7:3b:8b:75:fd:c1:44:4d:3f:66:a3:fe:7a:
                    78:c0:e1:30:1d:78:f3:b0:3d:30:ad:3b:a1:87:40:
                    75:1c:c5:ad:a3:4d:a3:f6:8f:9c:e7:ab:42:d2:ca:
                    7f:09:a9:55:48:9a:11:bd:b1:bb:0c:de:18:c7:4e:
                    37:1a:e0:15:6f:22:8d:5b:63:dd:82:b8:dc:6e:dd:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4C:77:D1:26:A3:D2:E5:1D:1C:51:2A:C1:8F:20:B6:2E:EA:F4:F9
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/74A6DAE01B9811F19309A2A7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:fb:d8:cf:c9:1a:e3:10:f6:9f:8a:6f:8b:bc:8c:07:2c:
         f4:9b:30:4b:06:07:61:e6:70:62:c5:ea:70:df:cb:b9:3f:f6:
         f5:20:15:1b:c7:c0:99:33:5a:50:c1:69:a2:fc:36:2d:ee:c6:
         37:46:95:e1:91:2f:93:17:e0:57:d7:55:85:9b:f7:fa:68:46:
         01:61:29:ef:c6:19:ea:45:26:1d:02:33:46:13:d5:3d:f5:a1:
         99:c4:1e:b3:56:bd:2d:91:4e:f6:d8:b1:fd:48:f8:0d:d2:78:
         47:85:97:76:64:61:0d:aa:0f:05:f4:01:75:82:81:ef:ee:77:
         ac:5d:39:83:65:3e:d5:98:d1:0c:aa:dc:62:d7:b4:49:c9:b8:
         fd:8f:60:c4:ce:47:6b:0f:09:8e:7f:0c:ff:75:96:91:89:b9:
         7d:11:76:4c:06:3c:60:b4:32:27:a3:db:37:8a:1a:f0:1c:69:
         e9:a1:5b:a4:61:6f:d6:c6:0b:12:84:a1:d4:29:fc:98:0a:a5:
         ba:d7:e8:93:be:76:62:36:6c:80:6e:fc:76:ff:cd:e2:94:b7:
         17:0d:35:f1:12:35:86:3f:55:d3:a6:b5:12:ca:02:98:65:bc:
         39:4c:e9:7c:d3:34:9b:99:2a:a2:25:f5:c3:70:e4:21:f1:66:
         a8:c0:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:42 2026 by rpki-client