Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/3DF49F7A965711F18DC5A2EECE1D38B0.roa
File:                     3DF49F7A965711F18DC5A2EECE1D38B0.roa (raw, json)
Hash identifier:          GFdwEQLG07+8YTdc9CZnVdtHh60WdmHPaORquH0PD/Y=
Subject key identifier:   F7:57:46:AF:1D:49:D7:07:03:5B:DF:7D:28:4A:C5:27:F7:C2:4E:E3
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05E2
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/3DF49F7A965711F18DC5A2EECE1D38B0.roa
Signing time:             Wed 12 Aug 2026 14:08:07 +0000
ROA not before:           Wed 12 Aug 2026 14:08:04 +0000
ROA not after:            Thu 31 Mar 2033 14:08:04 +0000
asID:                     37182
IP address blocks:        41.93.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 14:08:04 2026 GMT
            Not After : Mar 31 14:08:04 2033 GMT
        Subject: CN=6a7c7e47-9080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:07:f7:07:fd:81:44:0e:1b:b8:ba:ad:82:c1:
                    80:7b:25:4a:a7:46:e9:e4:92:84:49:86:21:7e:f2:
                    6d:dc:b7:43:c8:19:46:0b:c4:b3:8b:30:2a:09:f9:
                    d9:86:f6:be:92:06:7d:3c:de:b6:a3:b7:7d:dc:e1:
                    e3:e9:d5:5e:62:dc:58:b0:96:00:e5:16:fb:51:67:
                    f8:a1:9b:7f:e0:fe:e4:c4:40:e7:d1:8c:d8:c6:6c:
                    c8:54:3c:90:9b:59:fb:65:0f:36:d1:d5:9f:88:e8:
                    b4:1b:5e:0d:c2:93:9c:87:30:b8:89:26:14:7a:ec:
                    76:28:54:8a:5a:1d:eb:21:3e:1e:0f:ce:ee:b9:b4:
                    bf:1d:a1:e6:f2:92:f2:0b:9f:7d:31:92:40:a4:c7:
                    35:94:58:36:10:b3:91:ce:e0:b5:6d:e1:b3:98:ee:
                    76:8b:2f:d5:f8:10:3c:3e:12:56:f3:a3:4d:ba:3d:
                    d8:f4:f5:3c:39:a8:97:2f:54:50:d5:1f:23:ec:44:
                    f4:43:8c:16:1f:65:a9:43:ed:1d:93:bd:5e:4c:a8:
                    06:29:c6:ff:27:1b:74:06:50:a5:d9:ee:57:20:12:
                    11:80:fa:0e:9b:ee:47:c7:2d:8c:f6:25:81:fc:69:
                    50:c2:83:08:92:81:83:0f:ab:65:b3:f3:48:98:12:
                    15:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:57:46:AF:1D:49:D7:07:03:5B:DF:7D:28:4A:C5:27:F7:C2:4E:E3
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/3DF49F7A965711F18DC5A2EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:3d:e0:ff:6e:ef:69:d9:48:fa:08:77:ed:aa:7e:49:35:
         0a:cf:07:1c:42:19:97:a8:60:ea:ec:fd:d3:72:3f:21:12:e8:
         68:b2:95:6c:c8:62:79:23:e1:90:8c:20:95:ec:87:db:8b:f9:
         14:30:56:04:12:93:ad:ae:e1:49:7f:2d:ee:ba:4e:f2:4f:21:
         e7:78:b5:49:97:c5:51:81:34:f4:21:f2:7a:da:4a:0b:1f:63:
         a6:85:f2:1d:fd:1f:cd:7a:69:b2:fa:be:20:ab:8d:9d:4a:be:
         b4:a7:9e:fe:d7:94:09:f7:00:27:58:be:90:8b:c5:01:c8:c1:
         32:85:32:2f:5f:85:63:d9:93:4c:d9:a9:7e:8e:c0:7b:e4:8d:
         5f:3e:c4:25:47:49:6a:f5:77:78:9e:c1:c3:d2:2d:2b:1b:d3:
         f8:8e:65:a2:d0:d4:fc:04:08:09:19:30:6d:fd:0e:d4:bc:90:
         9a:6e:9a:16:c3:dd:92:7d:b4:22:bb:38:49:24:79:38:f6:2c:
         f2:ea:f1:a3:e8:b3:1e:a8:a5:3b:02:f0:7c:04:bd:4e:f6:fb:
         1d:03:fd:b6:b0:e7:16:7b:1d:e8:49:f8:cd:17:10:b2:4b:ce:
         04:96:8a:16:88:42:72:5e:f4:d2:61:91:2b:fd:47:72:cb:40:
         9d:22:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----