Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/D15F5E2A1B9711F195DBF2A3DAE4EC9C.roa
File:                     D15F5E2A1B9711F195DBF2A3DAE4EC9C.roa (raw, json)
Hash identifier:          mqDlUVSJrjORGiPKg+e1V8rvIY8eyCxvbxrFLIblui8=
Subject key identifier:   0E:24:12:06:87:05:4A:FB:D0:86:15:24:68:8A:36:6C:02:CB:8B:C5
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       07DD
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/D15F5E2A1B9711F195DBF2A3DAE4EC9C.roa
Signing time:             Mon 09 Mar 2026 09:10:30 +0000
ROA not before:           Mon 09 Mar 2026 09:10:25 +0000
ROA not after:            Sun 09 Mar 2036 09:10:25 +0000
asID:                     327980
IP address blocks:        41.216.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 23 Mar 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Mar  9 09:10:25 2026 GMT
            Not After : Mar  9 09:10:25 2036 GMT
        Subject: CN=69ae8e86-9b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:9a:b6:49:0e:0f:d9:a2:22:d6:ce:f5:5a:
                    53:db:98:4a:47:b6:28:5c:46:1a:d1:4d:d6:e9:9f:
                    87:e3:5e:e8:dc:ca:b5:9f:c8:b3:8a:2a:fd:70:b6:
                    07:26:af:9f:21:e5:8b:cf:98:98:51:83:a0:ba:18:
                    04:04:03:c9:2b:50:f3:63:17:a6:9d:72:7d:36:00:
                    0d:29:c4:d7:3d:50:54:46:ce:36:b1:bb:38:f4:84:
                    56:36:5a:f8:91:ea:5e:56:80:8c:d8:4b:9e:ec:21:
                    ba:b8:0a:75:c9:d4:f1:65:59:60:6c:74:3f:c3:e3:
                    ce:33:39:ea:d1:08:66:35:dd:2a:9f:27:ec:4b:d2:
                    3c:8c:ec:e2:1a:0f:b2:5c:ce:fe:00:7a:7d:7f:f0:
                    84:5f:7b:93:f6:05:61:4e:f4:e0:30:b3:83:2a:45:
                    45:26:80:4c:e7:6d:4d:d8:04:3f:d9:89:3b:c5:a1:
                    b9:d8:65:9d:e0:35:64:fc:c4:b1:68:89:56:9e:a1:
                    0b:77:49:9d:aa:89:e4:25:ae:0f:11:71:ff:ad:c7:
                    4d:77:9b:09:02:c3:c1:b3:20:8c:aa:df:5c:72:90:
                    c6:f8:ed:f6:8c:e9:f9:59:82:20:e6:d1:58:0b:5b:
                    23:b5:66:1a:7c:c7:78:af:de:e4:39:dd:c1:b7:fd:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:24:12:06:87:05:4A:FB:D0:86:15:24:68:8A:36:6C:02:CB:8B:C5
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/D15F5E2A1B9711F195DBF2A3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:b6:35:76:f6:ad:38:b8:6f:3b:3f:e8:2b:c3:f8:97:57:
         99:7f:57:47:a6:0c:79:3d:fc:3a:b3:1c:04:4e:2e:5f:e5:c8:
         71:fc:30:86:d9:2c:4d:9e:82:9d:39:c1:f9:ef:4e:f4:b3:b7:
         ac:cb:95:eb:ea:dd:e4:a7:78:52:28:55:b8:4e:ae:0e:52:58:
         a3:bb:88:18:44:68:5a:39:8a:41:17:89:5d:40:66:83:c0:12:
         0c:7e:be:bb:c2:77:6e:b1:61:9b:0e:53:de:e0:ba:5f:36:9b:
         cb:ba:4d:72:2f:da:2d:49:20:19:e6:e9:5b:ec:cd:e0:3e:00:
         e8:47:69:79:29:d8:a4:13:07:da:f1:94:15:86:71:fe:a1:92:
         17:d9:eb:39:6c:4c:b5:4e:92:e3:cb:54:2d:5a:31:01:7b:40:
         39:92:a5:1d:30:ab:28:83:f4:dc:0c:16:51:bb:02:63:e3:8e:
         a0:2c:83:88:42:9a:05:9b:69:ca:e6:87:68:c1:03:87:57:ca:
         29:e6:ea:f7:cf:64:b6:75:64:8d:8c:e1:f3:f3:fd:e3:f5:f8:
         e1:55:6d:52:61:be:c8:66:11:d2:d0:34:41:a2:af:14:74:3f:
         1d:cd:22:21:ce:4e:87:52:c2:9d:b1:76:3f:53:b6:40:f8:40:
         4d:56:7a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:43 2026 by rpki-client