Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/5AA55E3AD9D111F19E1C6DF8CE1D38B0.roa
File:                     5AA55E3AD9D111F19E1C6DF8CE1D38B0.roa (raw, json)
Hash identifier:          ly71sWReWlWZU57g5BwSC4ZC77FpGpKTABcpbxRChgk=
Subject key identifier:   9E:EB:76:6F:6D:9D:F4:D3:94:A6:99:B8:6E:35:E3:28:99:A4:14:17
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       30
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/5AA55E3AD9D111F19E1C6DF8CE1D38B0.roa
Signing time:             Fri 06 Nov 2026 11:01:02 +0000
ROA not before:           Fri 06 Nov 2026 11:00:57 +0000
ROA not after:            Wed 31 Dec 2036 11:00:57 +0000
asID:                     37037
IP address blocks:        41.63.128.0/20 maxlen: 20 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Nov  6 11:00:57 2026 GMT
            Not After : Dec 31 11:00:57 2036 GMT
        Subject: CN=6aedb36e-2a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:dc:61:74:b4:2b:5c:c9:75:ce:4b:f5:f3:
                    64:0c:ca:c3:0d:b4:bf:f2:59:f1:58:7f:14:5d:9f:
                    c8:5b:8c:d3:35:a3:73:b5:49:51:da:b1:ec:83:7b:
                    64:2b:55:a3:98:53:06:aa:60:f0:f0:c5:93:2c:a8:
                    c2:f8:93:bc:61:ea:3b:1e:45:96:38:46:65:31:8d:
                    f7:e7:1d:84:d6:c0:35:2b:ce:9b:7a:d0:2b:cf:fb:
                    a5:ce:b4:bd:e5:5f:ce:8b:ea:53:8b:19:37:df:d8:
                    c0:e4:c0:a1:4c:ee:9e:96:a7:36:73:99:3b:06:68:
                    d7:35:6c:4c:1b:1c:a8:3f:56:f9:bf:86:64:2f:28:
                    ee:3a:bc:47:99:d5:26:c3:40:d6:ee:eb:e0:8a:14:
                    d7:e7:a2:32:b4:df:a2:7c:8c:19:3a:94:4c:72:7e:
                    12:e9:42:78:21:66:3a:88:c4:af:00:64:99:3f:a3:
                    72:61:82:08:76:63:be:c2:06:0d:b4:a1:05:a6:58:
                    c1:19:14:5d:0a:a2:04:41:24:6c:86:6a:06:04:4e:
                    03:36:de:75:19:4d:75:dd:4a:b7:1d:99:bc:81:d5:
                    f0:24:44:52:3e:da:01:3c:60:dc:4c:f6:f2:74:6d:
                    1e:94:1c:68:bb:be:0a:9c:90:b2:e8:7d:ef:e2:57:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EB:76:6F:6D:9D:F4:D3:94:A6:99:B8:6E:35:E3:28:99:A4:14:17
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/5AA55E3AD9D111F19E1C6DF8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.63.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:62:91:f6:0e:56:1f:0e:c4:d1:89:1c:cb:63:f5:fc:7e:
         a8:c2:4e:21:8a:9b:3d:23:52:82:e9:2e:49:5b:b0:c0:50:39:
         ce:df:1d:b8:11:17:4f:91:d0:bc:85:64:52:85:a0:e2:61:68:
         c7:ed:bb:86:a9:08:29:2b:66:b8:ed:08:dd:10:72:5e:e0:5d:
         90:f3:39:cb:39:af:da:29:9c:ec:ac:eb:10:39:62:f8:63:eb:
         b9:bb:30:a5:4a:d8:2d:95:3b:ee:58:5d:2f:ba:53:08:51:8f:
         0a:9e:57:e4:fb:0d:d8:de:0f:d7:3d:d7:cc:f5:2f:fe:0c:53:
         06:93:95:b7:b6:d8:d1:d8:f1:32:23:ad:80:ad:28:8c:76:d4:
         8f:1b:c1:66:85:46:cb:88:d1:03:ec:74:a7:32:53:74:a3:30:
         4e:0d:bf:6f:23:06:ba:ad:63:87:91:47:83:c0:e3:53:da:99:
         72:2a:41:16:fc:70:f4:8c:0f:8f:7b:6c:a2:d9:9a:9f:19:d9:
         0f:61:03:39:ea:05:d2:d9:a4:7d:c7:2f:c8:37:6a:bd:2d:88:
         69:a9:2f:af:2d:17:17:80:2d:08:7f:f0:0e:ea:51:0e:4c:05:
         96:5f:37:c4:e4:a8:7e:59:69:fb:30:0e:e5:6c:30:e1:a8:04:
         96:42:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----