Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/E0A1C3FE1B9811F1A5AACFA9DAE4EC9C.roa
File:                     E0A1C3FE1B9811F1A5AACFA9DAE4EC9C.roa (raw, json)
Hash identifier:          OXl62mdJpY7UlMzTUCbwzeugc45owXh+B1Lo48CbUdg=
Subject key identifier:   7F:EF:24:4C:64:13:A7:C4:18:A0:FC:3F:F4:41:CF:D8:67:03:2D:D8
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       07E9
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/E0A1C3FE1B9811F1A5AACFA9DAE4EC9C.roa
Signing time:             Mon 09 Mar 2026 09:18:05 +0000
ROA not before:           Mon 09 Mar 2026 09:17:59 +0000
ROA not after:            Sun 09 Mar 2036 09:17:59 +0000
asID:                     327980
IP address blocks:        41.216.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 23 Mar 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025 (0x7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Mar  9 09:17:59 2026 GMT
            Not After : Mar  9 09:17:59 2036 GMT
        Subject: CN=69ae904d-83ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:7a:35:c7:9a:22:78:49:4e:eb:de:33:9a:
                    4d:19:d3:a7:c5:10:a6:32:a7:ff:f8:3e:1c:fa:e7:
                    6e:43:94:87:02:01:e8:9f:de:28:44:29:7d:a4:59:
                    03:13:4f:bd:e1:d2:4f:d1:f0:bf:28:c6:4f:c7:2b:
                    6c:7b:d4:74:fc:88:3a:a9:5a:26:48:1a:dd:21:48:
                    24:94:3c:e9:53:62:95:57:21:c2:fe:09:2e:ad:f0:
                    58:47:14:b6:e2:a6:d0:c0:b7:34:d1:66:f4:3e:23:
                    22:cb:f7:5e:cb:ef:87:aa:a5:06:d6:67:7b:c9:32:
                    8c:0e:ff:0f:ca:58:3b:63:37:db:94:38:42:02:31:
                    38:c2:b0:e1:ce:ae:e9:16:ae:6a:1e:7d:73:e7:f4:
                    43:3f:46:98:c4:ae:48:08:67:eb:2a:31:0d:7e:0a:
                    3f:0f:6b:26:23:48:33:64:e1:92:96:ed:ad:7f:b1:
                    7b:8e:56:5b:49:a2:09:b8:f5:24:ed:66:3d:9a:0f:
                    a6:ca:d2:a1:87:22:99:f5:63:61:db:55:ac:59:38:
                    78:e9:f1:2b:c3:bf:87:06:68:1d:66:3a:fb:5e:2e:
                    5c:63:44:5a:b5:27:e9:13:41:43:c6:e3:d4:2e:6f:
                    df:46:08:9d:4d:95:a9:57:d5:7f:8b:f9:ef:b2:0e:
                    0b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EF:24:4C:64:13:A7:C4:18:A0:FC:3F:F4:41:CF:D8:67:03:2D:D8
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/E0A1C3FE1B9811F1A5AACFA9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:05:b1:40:95:05:3c:32:a6:88:b6:cd:4d:93:7c:51:90:8e:
         51:11:37:27:1d:fe:91:ec:82:78:8a:d3:b3:c9:90:53:59:02:
         ff:bf:55:56:f1:06:0e:0e:6a:c3:ee:c9:15:91:7d:14:78:b8:
         4e:4c:37:cf:48:0d:0a:68:1b:e1:4a:8d:1f:5d:f4:e9:fc:f4:
         7f:09:09:cb:85:e0:fe:c7:0e:01:0b:57:d7:4e:4f:0e:01:b3:
         25:d2:f6:8a:7c:de:dd:c9:7f:8d:bf:e7:3a:92:24:36:fc:9e:
         f7:c8:e8:18:69:cf:75:6a:dc:f9:70:68:f8:12:69:b4:25:59:
         2a:15:b5:77:98:34:4a:2a:84:bd:83:07:24:5b:71:1f:2d:e5:
         fb:1a:2b:a2:ab:8c:ce:a5:bb:ca:c1:62:05:fc:06:8f:46:4e:
         f9:81:41:29:c8:2f:cd:a9:20:83:f9:66:80:47:43:c8:ae:7f:
         0d:68:6d:1f:3a:57:d0:02:cc:86:d3:76:ca:38:cd:ed:de:35:
         12:6c:72:33:31:49:d2:50:2b:a5:6c:4e:44:33:1c:d5:bb:94:
         f0:d3:4c:ad:64:1b:a8:7b:1c:db:2e:6f:e9:83:91:39:28:6e:
         37:ad:32:7b:ea:10:bd:1a:71:68:96:00:78:3d:9f:f0:d3:60:
         74:4b:76:97
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNjAzMDkwOTE3NTlaFw0zNjAzMDkwOTE3NTlaMBgxFjAU
BgNVBAMTDTY5YWU5MDRkLTgzYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMZXo1x5oieElO694zmk0Z06fFEKYyp//4Phz6525DlIcCAeif3ihEKX2k
WQMTT73h0k/R8L8oxk/HK2x71HT8iDqpWiZIGt0hSCSUPOlTYpVXIcL+CS6t8FhH
FLbiptDAtzTRZvQ+IyLL917L74eqpQbWZ3vJMowO/w/KWDtjN9uUOEICMTjCsOHO
rukWrmoefXPn9EM/RpjErkgIZ+sqMQ1+Cj8PayYjSDNk4ZKW7a1/sXuOVltJogm4
9STtZj2aD6bK0qGHIpn1Y2HbVaxZOHjp8SvDv4cGaB1mOvteLlxjRFq1J+kTQUPG
49Qub99GCJ1NlalX1X+L+e+yDgtjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUf+8k
TGQTp8QYoPw/9EHP2GcDLdgwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4L0UwQTFDM0ZFMUI5ODExRjFBNUFBQ0ZBOURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LYwDQYJKoZIhvcNAQEL
BQADggEBAFAFsUCVBTwypoi2zU2TfFGQjlERNycd/pHsgniK07PJkFNZAv+/VVbx
Bg4OasPuyRWRfRR4uE5MN89IDQpoG+FKjR9d9On89H8JCcuF4P7HDgELV9dOTw4B
syXS9op83t3Jf42/5zqSJDb8nvfI6Bhpz3Vq3PlwaPgSabQlWSoVtXeYNEoqhL2D
ByRbcR8t5fsaK6KrjM6lu8rBYgX8Bo9GTvmBQSnIL82pIIP5ZoBHQ8iufw1obR86
V9ACzIbTdso4ze3eNRJscjMxSdJQK6VsTkQzHNW7lPDTTK1kG6h7HNsub+mDkTko
bjetMnvqEL0acWiWAHg9n/DTYHRLdpc=
-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:42 2026 by rpki-client