Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/2D8F57BA962511F1A1E11EC3CE1D38B0.roa
File:                     2D8F57BA962511F1A1E11EC3CE1D38B0.roa (raw, json)
Hash identifier:          iyI7OZNk5JxLuz97Rah8MP9qePaXqqI/w+K+KVaK3ZI=
Subject key identifier:   19:EA:5F:76:E2:EB:52:09:C0:9E:C2:DB:85:F3:7F:4C:8B:4D:5D:38
Certificate issuer:       /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial:       063D
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/2D8F57BA962511F1A1E11EC3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:09:45 +0000
ROA not before:           Wed 12 Aug 2026 08:09:41 +0000
ROA not after:            Wed 09 Jun 2032 08:09:41 +0000
asID:                     37280
IP address blocks:        41.76.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C94EAF, serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
        Validity
            Not Before: Aug 12 08:09:41 2026 GMT
            Not After : Jun  9 08:09:41 2032 GMT
        Subject: CN=6a7c2a49-3b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:3c:01:83:7c:1e:8e:4a:c0:5d:bf:38:bd:
                    fa:44:50:7b:f8:cf:eb:f5:4f:04:9f:3a:88:c9:97:
                    4b:a5:ba:29:f9:84:97:df:e9:af:b8:70:22:bd:c3:
                    fe:80:67:ef:e7:d9:6a:00:d7:c4:e8:d2:35:70:d1:
                    d5:c0:07:d4:f3:9b:dc:1c:b8:5e:f5:5d:1d:dd:3c:
                    3b:3e:56:2c:d8:5b:3e:a3:0f:d5:bd:8b:0b:a1:f4:
                    70:28:98:cf:cc:cc:65:d9:24:85:80:36:ac:6a:87:
                    82:7c:f7:2b:ff:18:04:aa:7e:99:e2:a3:fd:a8:15:
                    23:df:ab:6c:db:d3:97:76:2e:8d:86:13:b9:bb:21:
                    54:34:e3:7e:68:51:bf:e7:98:db:b7:c4:19:95:05:
                    10:17:07:55:17:e4:1d:56:0b:d4:db:dd:21:04:0f:
                    77:4c:53:32:3b:17:75:46:99:27:26:45:de:e5:b5:
                    e8:ff:e0:45:a8:8b:f4:de:ca:1a:f0:a3:cd:74:e3:
                    27:cf:04:3c:e7:0c:ca:0d:4d:15:88:10:5b:aa:1c:
                    0b:6b:4d:30:1e:8e:94:79:ba:ed:0a:f0:b0:9e:75:
                    24:67:5d:de:82:06:db:c0:6b:40:9e:8e:6f:4d:be:
                    0e:99:36:30:7a:d7:d3:27:83:f6:ce:09:da:d9:f1:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EA:5F:76:E2:EB:52:09:C0:9E:C2:DB:85:F3:7F:4C:8B:4D:5D:38
            X509v3 Authority Key Identifier:
                keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/2D8F57BA962511F1A1E11EC3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:eb:af:d6:3f:13:73:e2:39:33:2e:1b:b6:c8:9f:ef:57:47:
         eb:99:37:b0:a1:28:ea:ec:a1:f0:4d:ad:0a:0b:87:b2:f8:f9:
         6b:a0:0e:25:73:c7:cc:05:34:87:99:c5:02:4d:bb:68:66:2f:
         6b:81:ba:be:4c:bc:9b:1c:78:20:26:f6:25:1e:aa:f3:32:e0:
         6e:35:33:56:89:da:b3:51:f1:23:b4:78:a2:38:08:2d:b4:9c:
         fe:5b:9b:69:36:f8:79:74:af:7c:3b:00:24:a7:12:99:28:a0:
         ab:25:f6:16:d2:93:33:f4:f8:d6:cd:c9:27:06:e1:05:20:24:
         af:b3:43:9a:ad:38:2f:b2:b0:f5:b6:0a:a2:30:27:37:d3:c0:
         58:eb:15:14:a8:92:9d:2b:eb:4f:e8:7b:6a:7b:6e:17:a6:a3:
         73:8e:a2:86:8b:72:b7:08:e9:6e:0a:2e:d6:b7:33:08:ad:1e:
         94:92:bf:3c:5d:b7:a2:ac:98:c6:25:92:af:f7:74:ce:6b:70:
         a3:7c:df:5f:e1:be:be:64:54:3a:b4:5b:8c:85:c3:19:8a:34:
         af:ab:85:48:ed:c2:b6:33:3f:b9:d1:e3:a5:d3:13:01:f4:be:
         24:91:59:13:f8:82:de:b0:f1:7c:12:15:89:48:52:13:40:fa:
         a9:e1:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----