Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/41154872962911F1979923DACE1D38B0.roa
File:                     41154872962911F1979923DACE1D38B0.roa (raw, json)
Hash identifier:          5lt3Yq+7+mrDu7Rgxl913ugiuhww8fYeSDHdmofrW5s=
Subject key identifier:   7E:44:AC:94:7A:55:87:02:9C:3C:FF:63:07:33:5C:D9:66:36:9A:6B
Certificate issuer:       /CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Certificate serial:       0727
Authority key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/41154872962911F1979923DACE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:38:56 +0000
ROA not before:           Wed 12 Aug 2026 08:38:52 +0000
ROA not after:            Tue 31 Dec 2030 08:38:52 +0000
asID:                     37887
IP address blocks:        196.49.13.0/24 maxlen: 24
                          196.223.41.0/24 maxlen: 24
                          2001:43f8:a10::/48 maxlen: 48
                          2001:43f8:a11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686F75AF, serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
        Validity
            Not Before: Aug 12 08:38:52 2026 GMT
            Not After : Dec 31 08:38:52 2030 GMT
        Subject: CN=6a7c3120-e2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:83:2a:0f:58:0e:25:8d:22:79:ef:97:af:
                    6b:77:8b:01:3b:0d:b3:ca:89:37:88:80:3e:c3:c7:
                    b9:d4:bd:71:2c:d6:dc:bd:63:e0:c0:db:4e:70:d6:
                    9e:c7:55:3d:0c:a9:d3:a7:b9:5b:48:bb:2a:0e:50:
                    99:0a:40:cf:f3:f5:09:f9:ec:24:f8:0c:d2:2e:a4:
                    b4:f3:ae:f5:43:d2:dc:4f:26:2c:f4:4c:ff:cc:e1:
                    0d:16:18:6c:ab:19:95:71:0d:21:bf:fd:a4:9f:ef:
                    48:5d:be:ad:ca:27:c9:f6:54:78:0c:5b:d8:e3:4a:
                    f9:3b:0e:bd:c6:2d:e2:e8:76:ef:d4:db:60:1e:5a:
                    b9:b0:71:dc:40:c5:8b:05:94:1f:84:13:9c:18:28:
                    c8:1d:b6:c0:fa:36:cc:a4:27:2f:bf:5b:e3:a3:87:
                    49:dc:16:a9:f3:6f:58:80:9f:95:21:66:54:ff:38:
                    a0:c8:29:93:01:82:96:fb:d6:bf:2a:a6:5a:2e:62:
                    f9:ad:9d:64:fc:df:57:e5:0e:5f:58:30:6e:d3:18:
                    1c:76:98:5d:6d:cd:ca:70:a5:2a:a8:e6:a1:f1:0d:
                    3c:76:43:24:4b:3c:7a:90:69:44:92:c6:91:9e:0c:
                    ae:45:68:e5:18:fc:9c:f6:e8:5f:8b:60:80:48:03:
                    ac:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:44:AC:94:7A:55:87:02:9C:3C:FF:63:07:33:5C:D9:66:36:9A:6B
            X509v3 Authority Key Identifier:
                keyid:D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/41154872962911F1979923DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.13.0/24
                  196.223.41.0/24
                IPv6:
                  2001:43f8:a10::/47

    Signature Algorithm: sha256WithRSAEncryption
         b5:95:e7:f0:fb:70:24:77:59:91:10:0b:af:68:95:67:13:3c:
         50:72:13:bc:53:d7:88:f0:06:fe:47:56:31:31:67:e6:61:ab:
         4e:d4:97:ee:6e:88:05:ae:de:07:75:75:a1:0b:c0:0e:fb:77:
         0b:10:2e:71:13:99:63:ff:2b:c1:12:97:8b:8f:d8:fd:38:0c:
         3b:24:6b:46:55:c2:c6:c4:64:4b:04:93:78:aa:5e:d2:21:7b:
         72:48:3b:49:ee:14:2a:3c:e0:e6:cf:97:60:b2:15:3e:6c:aa:
         26:e7:09:4c:d6:61:70:83:00:89:a7:78:da:8f:ae:51:a5:a1:
         ce:ce:37:2f:a4:d7:de:ac:6a:f9:ac:8b:d1:98:e1:9e:c0:a2:
         69:ae:4b:3c:64:63:6f:88:6e:d9:8c:17:90:29:98:fa:b5:f1:
         7e:93:20:55:79:90:3c:1b:9a:db:72:68:7b:f0:7b:cd:03:67:
         17:f4:76:0f:1f:2f:71:af:14:ba:da:e2:ee:bc:6b:4b:c3:ee:
         ee:31:20:71:64:4e:55:ca:06:f3:f4:1c:2b:f0:54:3b:60:a5:
         51:26:11:33:33:51:37:d0:5a:40:46:8a:af:a6:40:32:1b:90:
         c7:6f:d4:4b:df:85:30:09:dc:2e:44:c4:26:52:10:f7:00:96:
         78:c1:bf:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----