Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/40E7B15CDC0911F1BEDC83FBCE1D38B0.roa
File:                     40E7B15CDC0911F1BEDC83FBCE1D38B0.roa (raw, json)
Hash identifier:          E1YEE6EulwkNX/mR2LB5nB/ozrtBbxd8gHNfVZA+IBk=
Subject key identifier:   38:CE:D7:21:3E:FD:E7:ED:0D:63:06:1D:48:CC:3C:B5:08:F4:22:02
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       3B
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/40E7B15CDC0911F1BEDC83FBCE1D38B0.roa
Signing time:             Mon 09 Nov 2026 06:46:13 +0000
ROA not before:           Mon 09 Nov 2026 06:46:08 +0000
ROA not after:            Wed 31 Dec 2036 06:46:08 +0000
asID:                     37037
IP address blocks:        41.74.16.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.17.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.18.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.19.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.20.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.21.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.22.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.23.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.24.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.25.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.26.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.27.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.28.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.29.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.30.0/24 maxlen: 24 (superfluous maxlen)
                          41.74.31.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Nov  9 06:46:08 2026 GMT
            Not After : Dec 31 06:46:08 2036 GMT
        Subject: CN=6af16c35-826d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:bf:3a:42:bd:75:5a:37:17:5a:01:b1:31:
                    77:42:c2:34:e3:96:8f:8e:cd:9d:3b:a5:64:a9:69:
                    d6:d5:58:f1:e0:82:82:ca:b5:fe:5c:5d:52:48:d0:
                    99:f5:19:38:18:ef:fd:07:42:80:61:9d:c4:76:af:
                    eb:aa:5d:50:34:af:d0:30:97:3d:65:7f:ea:7e:30:
                    c9:03:47:df:bf:7e:40:72:d2:22:8e:51:70:30:94:
                    1c:75:09:bd:a0:a7:cf:d2:20:f2:d0:31:45:1e:e8:
                    b8:32:fc:79:07:29:23:c3:da:ce:4f:ec:e7:6c:f9:
                    ed:35:ea:57:48:16:47:55:2a:cc:95:d8:b4:1d:9c:
                    4c:37:bb:58:d9:a8:55:24:02:b9:5a:f5:45:81:a0:
                    d9:ba:d9:df:24:47:cf:8c:b0:cb:ba:a9:df:43:ce:
                    93:1f:fc:40:18:26:3d:88:eb:7d:74:ec:97:35:38:
                    20:03:0b:ee:32:aa:e0:6d:da:aa:bb:e7:90:64:a6:
                    79:33:83:1b:2b:4a:64:29:22:78:ff:b5:5c:cd:65:
                    5a:47:de:e9:40:98:19:e5:00:b2:3f:40:f0:ac:49:
                    5d:f5:f3:4c:bb:6a:3e:b8:6b:67:85:a8:f6:ff:84:
                    8e:dc:96:ca:f8:bb:df:7e:bd:57:fe:cb:b3:cd:8f:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:D7:21:3E:FD:E7:ED:0D:63:06:1D:48:CC:3C:B5:08:F4:22:02
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/40E7B15CDC0911F1BEDC83FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.74.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:d9:ee:bc:11:e9:2b:ab:98:0e:1c:12:2a:40:aa:40:53:29:
         95:a3:1f:04:f7:ea:09:df:57:7c:84:ae:cc:86:14:95:16:9f:
         7e:84:a5:8d:6a:a5:fc:92:fa:b0:aa:10:ea:7a:a6:63:e0:78:
         86:45:b2:39:25:57:10:43:8c:a2:0c:e7:e8:1d:3e:a7:12:20:
         26:06:f1:fb:06:18:9a:c2:18:bc:df:a5:3d:de:36:9a:e6:ae:
         5c:6b:5b:dd:b1:08:26:ce:df:13:07:29:1c:f4:d4:0a:3d:cb:
         a6:37:88:ed:45:26:45:41:be:6c:9f:da:a8:6d:18:14:24:a2:
         7e:40:a4:bf:86:12:37:a3:d6:70:e7:61:ce:ca:18:04:1b:23:
         1e:85:fc:96:6e:46:fe:33:3c:a3:44:d7:2b:51:4a:cd:ff:32:
         ce:cb:ac:29:00:22:80:d1:6d:fc:b6:a9:b1:d2:94:ea:d4:89:
         10:4a:8d:6d:6f:f9:55:98:3d:17:57:63:b3:ca:c2:29:36:e9:
         41:ad:99:90:62:ae:f3:09:0e:e8:ad:65:0f:0a:87:0a:49:1a:
         29:8d:17:ea:b9:70:92:74:2b:f2:3d:c2:06:97:fb:09:9a:a4:
         0f:d7:05:60:de:62:c1:98:bc:6e:58:9e:1c:7e:a9:e6:00:f9:
         24:5a:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----