Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/0AB80F6ADC0811F1AEB6DBF2CE1D38B0.roa
File:                     0AB80F6ADC0811F1AEB6DBF2CE1D38B0.roa (raw, json)
Hash identifier:          4dodTiz/blNws9e+1EJ6cBqGqXRcn2nfBGL/lI1CfJ8=
Subject key identifier:   90:E5:E2:6D:DA:C1:5A:23:59:38:2E:9C:B0:C4:BA:54:2F:F8:64:04
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       39
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/0AB80F6ADC0811F1AEB6DBF2CE1D38B0.roa
Signing time:             Mon 09 Nov 2026 06:37:33 +0000
ROA not before:           Mon 09 Nov 2026 06:37:28 +0000
ROA not after:            Wed 31 Dec 2036 06:37:28 +0000
asID:                     37037
IP address blocks:        41.63.155.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Nov  9 06:37:28 2026 GMT
            Not After : Dec 31 06:37:28 2036 GMT
        Subject: CN=6af16a2c-33ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:5d:a0:ef:34:b1:c6:7f:4a:d8:81:63:6a:
                    18:46:ba:a1:f9:f8:26:f7:7d:ba:b4:85:44:cd:6c:
                    51:53:b0:b7:5b:df:0b:56:f7:d8:e4:8d:db:eb:53:
                    8b:ac:41:b2:a9:9f:22:33:3d:d2:91:8a:a0:f6:31:
                    16:b2:ad:09:d5:90:95:88:5c:70:b9:27:b0:d6:78:
                    2e:a3:d8:f0:35:9d:4c:4b:96:6c:bd:bd:fe:4a:d6:
                    6f:a4:9d:e0:46:8f:be:0b:6b:ee:72:64:8a:54:90:
                    c3:06:f7:81:76:89:7a:b9:90:97:70:64:95:8a:8f:
                    3b:9e:cf:74:7b:d1:77:7a:32:49:ce:e2:db:e5:5e:
                    01:a2:a3:93:30:3a:ef:3a:bb:f1:2d:61:ac:ce:c6:
                    14:87:e7:ab:21:f7:80:4e:7a:e3:fd:ef:ad:ff:73:
                    7d:07:3d:3f:32:f4:37:8e:56:b0:8e:25:ea:1d:6b:
                    cc:8a:59:1c:b8:4d:36:cc:96:d9:35:be:a4:dd:5f:
                    28:e3:12:dd:bd:6f:f1:5e:cc:86:a9:6f:67:3b:2b:
                    c7:ae:f6:b7:67:d7:fc:c6:ea:ff:fa:02:e8:0f:db:
                    b6:92:87:ea:5a:3e:9e:0b:c4:24:43:29:a0:ba:22:
                    0e:e0:ad:e5:44:b5:6c:9a:d2:66:d1:db:75:b1:dc:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E5:E2:6D:DA:C1:5A:23:59:38:2E:9C:B0:C4:BA:54:2F:F8:64:04
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/0AB80F6ADC0811F1AEB6DBF2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.63.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:29:e1:0a:2d:fd:a8:2a:4d:e4:70:c7:e9:aa:2d:0d:bd:10:
         8c:51:ac:a8:ac:dc:cd:32:08:0e:47:ef:86:d5:ff:1e:0c:c5:
         00:59:0b:96:01:b3:51:3d:97:58:08:9d:ec:af:dc:d7:d7:e0:
         b6:c9:63:99:40:16:da:c1:f5:41:b6:ff:93:7a:ea:a7:35:e1:
         00:30:9b:2c:e2:f5:30:32:60:29:38:da:df:69:c3:b8:c9:d9:
         da:80:18:23:36:42:40:18:8c:d8:d0:04:db:93:e8:d0:e5:ba:
         90:b9:1f:d7:ec:30:8c:84:80:6b:de:87:48:88:79:45:cc:e5:
         53:a9:c3:d2:f6:a9:40:1e:ce:7f:91:5a:fd:37:f3:59:43:d0:
         f8:64:85:81:f4:5f:67:b3:37:9b:d5:3c:90:75:1f:94:1f:97:
         5e:11:3a:ee:b6:03:38:bd:f0:cb:c5:08:17:f4:c3:56:77:68:
         14:f9:51:c4:1c:20:90:b1:fe:b4:3b:28:71:3f:69:e7:2a:31:
         c1:5a:62:2c:d0:f4:9d:15:9d:17:f9:7f:f6:4a:98:fb:3b:9f:
         cc:21:7c:d0:de:d3:35:50:e6:9b:89:c3:43:3d:a5:ec:af:d8:
         13:4b:ae:77:eb:0a:04:0c:c4:73:65:07:18:05:25:a1:82:ea:
         41:1f:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----