Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A30BF35AB0FF11F19937AAB2CE1D38B0.roa
File:                     A30BF35AB0FF11F19937AAB2CE1D38B0.roa (raw, json)
Hash identifier:          mNqzCf809G2td5ZQWsBcYe0kGE3MTwf7TTnEd1b4pRE=
Subject key identifier:   E7:18:1F:21:C5:E1:C3:A1:54:26:A3:EA:CD:CA:8B:1D:0C:53:7D:C5
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0CD2
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A30BF35AB0FF11F19937AAB2CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 12:19:03 +0000
ROA not before:           Tue 15 Sep 2026 12:18:59 +0000
ROA not after:            Mon 15 Sep 2036 12:18:59 +0000
asID:                     402273
IP address blocks:        41.180.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3282 (0xcd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Sep 15 12:18:59 2026 GMT
            Not After : Sep 15 12:18:59 2036 GMT
        Subject: CN=6aa937b7-2ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:14:27:8b:60:02:79:23:84:1c:cc:2d:ca:
                    9e:92:e6:d9:6d:19:99:a2:70:4e:88:78:d6:d0:4c:
                    bc:a0:5b:15:59:67:77:8e:3d:86:9a:24:3d:c9:cb:
                    73:e8:82:12:48:6a:70:7e:b9:0a:8e:61:da:53:59:
                    5c:5a:fc:85:13:ea:b9:f1:d1:f2:9b:c0:88:b6:a3:
                    d5:48:e7:90:28:52:11:b1:2c:8b:64:e9:7b:2e:d0:
                    ef:3f:4c:a4:a6:a5:58:73:e3:f3:8b:f6:64:cb:0a:
                    17:96:7c:ce:6f:09:31:7e:26:8a:a9:52:95:f9:17:
                    c8:3a:b9:17:3d:d6:3a:2d:e9:3d:b4:53:d7:5f:2c:
                    8b:5e:a2:aa:c9:86:5b:44:22:53:1b:22:aa:73:5c:
                    58:cc:d6:4b:d0:ae:c1:d4:ca:d3:62:1e:1b:d7:04:
                    9d:a8:e2:67:c8:31:a3:69:94:2f:a4:cd:cb:99:e6:
                    a6:9e:e0:c5:02:63:79:e7:e1:94:3e:c1:16:d6:76:
                    3e:3f:93:f3:e7:b7:d4:5c:97:b6:b1:8f:c7:d7:6f:
                    8f:25:a3:75:5f:b3:5e:d5:31:3e:a4:d3:bd:08:e8:
                    55:04:64:df:5d:84:ef:fd:3c:94:c5:5a:78:89:9a:
                    ca:9c:55:42:e4:9c:9e:b9:3b:f3:89:f4:5d:b3:16:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:18:1F:21:C5:E1:C3:A1:54:26:A3:EA:CD:CA:8B:1D:0C:53:7D:C5
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A30BF35AB0FF11F19937AAB2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:34:07:f0:8c:9e:ab:96:af:70:ac:81:51:8b:a9:84:29:
         cf:34:7c:08:82:30:86:b7:bc:dc:91:f4:5b:04:e7:9d:a3:06:
         4e:7d:96:35:1b:29:17:1b:bf:90:fb:a2:f0:f1:f4:11:fd:8c:
         91:ee:34:16:1c:f9:52:89:45:33:b3:76:37:d3:c6:44:7f:9e:
         b8:22:3d:ee:00:11:fc:90:d5:e3:36:2d:75:8c:e3:84:a3:55:
         e0:66:19:4f:9a:01:13:7d:33:d5:70:f2:de:92:1d:42:0b:92:
         7d:b3:3b:e8:c0:6d:14:ef:6b:36:ad:3a:14:ea:4b:b3:da:09:
         70:4a:e9:42:4e:c0:ba:2e:38:61:85:f2:b5:42:c7:63:a7:44:
         e8:7f:6c:84:5f:2f:f6:bb:29:26:c1:b8:a6:e5:c8:a8:0c:12:
         e5:a0:16:cd:39:bb:49:cb:dc:12:20:80:0d:01:20:4a:57:cc:
         8c:c3:81:6b:3e:78:93:8a:ea:0a:32:89:cf:9c:bd:14:47:6c:
         ec:a8:0b:12:ee:bb:fb:92:d8:b2:08:75:01:b2:bd:52:3e:c7:
         47:31:13:fe:b8:6c:91:3b:67:be:ba:d1:c4:c4:3b:cf:f6:c4:
         bc:34:8f:3b:5c:cb:b6:c6:04:ac:63:27:43:52:28:f7:e6:38:
         26:8c:3d:3e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA5MTUxMjE4NTlaFw0zNjA5MTUxMjE4NTlaMBgxFjAU
BgNVBAMTDTZhYTkzN2I3LTJlZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFURQni2ACeSOEHMwtyp6S5tltGZmicE6IeNbQTLygWxVZZ3eOPYaaJD3J
y3PoghJIanB+uQqOYdpTWVxa/IUT6rnx0fKbwIi2o9VI55AoUhGxLItk6Xsu0O8/
TKSmpVhz4/OL9mTLCheWfM5vCTF+JoqpUpX5F8g6uRc91jot6T20U9dfLIteoqrJ
hltEIlMbIqpzXFjM1kvQrsHUytNiHhvXBJ2o4mfIMaNplC+kzcuZ5qae4MUCY3nn
4ZQ+wRbWdj4/k/Pnt9Rcl7axj8fXb48lo3Vfs17VMT6k070I6FUEZN9dhO/9PJTF
WniJmsqcVULknJ65O/OJ9F2zFpDDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5xgf
IcXhw6FUJqPqzcqLHQxTfcUwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4L0EzMEJGMzVBQjBGRjExRjE5OTM3QUFCMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAptK4wDQYJKoZIhvcNAQEL
BQADggEBAA/qNAfwjJ6rlq9wrIFRi6mEKc80fAiCMIa3vNyR9FsE552jBk59ljUb
KRcbv5D7ovDx9BH9jJHuNBYc+VKJRTOzdjfTxkR/nrgiPe4AEfyQ1eM2LXWM44Sj
VeBmGU+aARN9M9Vw8t6SHUILkn2zO+jAbRTvazatOhTqS7PaCXBK6UJOwLouOGGF
8rVCx2OnROh/bIRfL/a7KSbBuKblyKgMEuWgFs05u0nL3BIggA0BIEpXzIzDgWs+
eJOK6goyic+cvRRHbOyoCxLuu/uS2LIIdQGyvVI+x0cxE/64bJE7Z7660cTEO8/2
xLw0jztcy7bGBKxjJ0NSKPfmOCaMPT4=
-----END CERTIFICATE-----