Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/69B29C48C62711F1A12484E1CE1D38B0.roa
File:                     69B29C48C62711F1A12484E1CE1D38B0.roa (raw, json)
Hash identifier:          5MKg6+4IVWTTSzEx2GWe7m3uz+1m4QFeRmg7LmKc/54=
Subject key identifier:   81:95:97:9F:38:11:F8:1F:E4:59:97:E9:5B:20:C8:9B:B2:FB:91:C9
Certificate issuer:       /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial:       08B5
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/69B29C48C62711F1A12484E1CE1D38B0.roa
Signing time:             Mon 12 Oct 2026 10:26:41 +0000
ROA not before:           Mon 12 Oct 2026 10:26:36 +0000
ROA not after:            Sat 11 Nov 2028 10:26:36 +0000
asID:                     37228
IP address blocks:        41.74.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 01:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363ADF7AF, serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
        Validity
            Not Before: Oct 12 10:26:36 2026 GMT
            Not After : Nov 11 10:26:36 2028 GMT
        Subject: CN=6accb5e1-45b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:8f:1c:6b:cc:66:20:75:32:fb:e8:6c:21:
                    c7:41:29:16:f6:f7:7f:e4:a9:33:31:90:59:9a:df:
                    8c:9b:da:1d:63:2a:60:0b:f6:3b:a4:4f:83:a2:dd:
                    c1:c9:a3:47:7e:c9:0a:63:92:25:54:ed:0a:bc:4c:
                    0d:0f:89:16:23:fa:f8:81:7c:f8:71:a5:94:b9:5a:
                    5c:76:c7:52:e5:f9:e9:71:e6:5a:11:91:0a:47:61:
                    9a:5a:8f:1d:10:a5:fa:eb:89:92:cf:a4:0b:ad:ae:
                    02:65:e9:f2:a3:2c:96:e2:00:ef:d9:3d:35:85:f3:
                    52:1c:00:61:38:bf:7a:2e:39:23:5e:66:09:c2:a8:
                    e3:a6:15:b4:59:84:e7:9a:81:dc:1f:ea:58:12:6a:
                    d0:2f:15:37:d5:ae:33:0d:97:8f:82:d8:ee:85:76:
                    3a:4a:5d:ea:7e:93:80:c2:02:0f:c4:18:77:af:07:
                    59:80:ae:eb:18:26:31:cd:6c:17:aa:c4:f4:a6:1a:
                    de:e8:82:68:42:24:a5:86:f0:23:b0:5c:91:80:3e:
                    b6:6b:55:eb:96:cf:63:5a:32:31:8a:d8:3c:c1:fc:
                    51:ef:2a:74:9f:f9:15:09:7c:65:f3:79:7f:ec:f0:
                    8a:ab:5b:06:98:ac:ed:85:aa:e4:8a:ac:9f:18:05:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:95:97:9F:38:11:F8:1F:E4:59:97:E9:5B:20:C8:9B:B2:FB:91:C9
            X509v3 Authority Key Identifier:
                keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/69B29C48C62711F1A12484E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.74.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:66:db:d6:c0:1d:91:dc:30:2e:30:81:c2:eb:d3:d9:93:70:
         86:91:5f:ec:88:12:d2:ea:54:df:6e:b5:ab:0b:f4:07:34:b2:
         e5:a4:5b:3e:3e:3f:31:de:28:db:a7:9d:40:1a:87:a9:2c:df:
         7c:83:5b:4a:77:69:b3:e2:7e:d2:bb:8b:63:fe:dc:57:20:67:
         99:83:bd:02:8c:46:5c:c2:1b:3d:2d:0e:38:85:9e:97:aa:78:
         f9:02:ea:bc:98:40:1d:7c:38:cd:2b:c7:d5:41:7c:2c:5d:cd:
         f2:fb:0f:b6:6e:a7:2e:10:4a:04:64:f3:5c:f0:b5:ac:66:a5:
         45:3d:34:54:5c:03:bc:17:1a:64:a1:26:b7:23:1b:10:39:82:
         eb:f3:b3:1d:e6:7c:6a:64:88:17:93:e3:34:6c:be:27:cb:aa:
         27:81:04:51:5a:3d:34:97:e0:15:ab:e0:e3:25:bf:7c:ec:f7:
         b3:b2:41:b4:19:c7:ce:15:81:1d:d6:ad:d3:b6:27:73:8b:ae:
         31:fc:5a:ab:2b:43:96:79:c0:c2:90:79:43:ac:dc:95:9e:c5:
         5f:84:52:b9:71:19:be:fa:89:35:ed:12:c0:36:58:b8:ba:24:
         19:fb:dc:d8:66:5d:35:d0:73:9c:fd:16:65:08:9b:ba:90:65:
         22:32:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----