Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/4BD4A70AB0DA11F1B85FD3D3CE1D38B0.roa
File:                     4BD4A70AB0DA11F1B85FD3D3CE1D38B0.roa (raw, json)
Hash identifier:          CtRPF9VVgu5ZTQyX1QWamYrpXXX6QLyMLm+jWOoJghA=
Subject key identifier:   01:17:7F:78:54:C7:0A:94:6F:91:1C:17:41:F0:0E:59:18:A4:97:C3
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08AD
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/4BD4A70AB0DA11F1B85FD3D3CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:51:45 +0000
ROA not before:           Tue 15 Sep 2026 07:51:41 +0000
ROA not after:            Wed 31 Dec 2036 07:51:41 +0000
asID:                     29975
IP address blocks:        41.18.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2221 (0x8ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 15 07:51:41 2026 GMT
            Not After : Dec 31 07:51:41 2036 GMT
        Subject: CN=6aa8f911-50e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:f0:51:dd:f2:59:03:b4:fc:6a:43:e7:a3:
                    38:e9:8b:63:d2:2b:b2:71:41:bf:b2:7a:56:7c:71:
                    cc:0f:44:ad:2e:86:74:cb:dc:c1:bd:9d:2e:73:95:
                    79:ff:d8:b0:2e:b1:73:b8:47:97:3d:bd:82:70:79:
                    32:b2:3e:5b:a9:de:d5:48:2b:b4:25:e7:91:e0:1a:
                    37:21:3b:db:bb:42:62:52:7f:46:16:7a:1b:1f:11:
                    ea:39:0e:0b:3f:a0:b0:33:7d:ff:e3:0d:35:97:71:
                    8e:e7:c1:ee:58:6f:a6:2a:f6:a3:19:0a:4f:f1:6d:
                    b9:7a:61:54:3c:f1:5b:49:d2:2a:00:cf:17:b1:39:
                    5b:a8:7d:eb:81:e7:04:b9:b9:d1:35:f0:e3:3b:c0:
                    78:4a:20:8d:32:e8:4d:c3:e7:cd:00:af:ba:ad:89:
                    ea:47:41:41:b9:12:67:6c:43:b5:0b:26:23:40:83:
                    5e:77:7b:13:ae:31:13:67:69:d3:11:8f:5c:92:bb:
                    1c:5d:dd:fa:ea:0a:91:b5:11:e1:23:a3:e2:a9:e9:
                    96:ff:f1:f7:84:85:15:12:0c:db:b5:ca:2a:84:96:
                    85:3f:37:6b:51:27:ba:5f:5d:33:c1:86:a5:01:17:
                    04:ee:35:db:60:a9:7d:45:d0:ba:87:41:1a:83:b4:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:17:7F:78:54:C7:0A:94:6F:91:1C:17:41:F0:0E:59:18:A4:97:C3
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/4BD4A70AB0DA11F1B85FD3D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.18.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         af:fb:d3:c9:0f:7a:07:3b:a0:e2:99:ef:c1:b4:ba:ba:1f:2c:
         af:8d:c2:50:95:2e:e8:6a:86:9a:ca:fc:5d:dd:b7:25:b8:27:
         39:56:8a:71:e0:0c:09:ee:33:2d:b7:15:f7:99:d5:dc:77:07:
         56:af:7a:95:aa:0d:43:f6:55:b4:02:d2:ab:5f:cd:7a:f7:f3:
         da:f2:0c:af:c6:8c:80:26:e5:15:42:1b:33:06:6e:71:33:ea:
         f7:af:db:93:41:54:17:dc:f4:11:eb:00:d6:51:e4:16:0b:a9:
         3c:03:fa:33:32:bd:6a:77:c4:d2:f6:6b:f4:31:11:dd:b5:54:
         52:61:a7:0d:9a:49:be:11:8f:92:36:6d:a5:4e:69:b6:ce:00:
         7d:51:8a:3f:7e:93:a1:a3:1e:5c:3e:3f:b4:56:09:38:be:aa:
         df:04:df:d2:0c:57:58:bd:4a:4f:8a:00:dd:c5:bb:ff:5e:96:
         94:e9:c0:95:54:0b:cb:4b:02:12:05:de:a2:10:2d:c1:9f:54:
         ae:3f:9b:78:83:42:ca:52:a6:c9:26:5b:14:ae:f6:55:e4:8c:
         14:49:c1:fd:8e:38:04:91:14:1f:ca:5d:b7:d5:9b:0c:53:06:
         00:a5:4b:a1:cd:aa:02:c8:fe:03:15:1a:d0:e0:38:9f:aa:75:
         b7:dd:25:3f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTUwNzUxNDFaFw0zNjEyMzEwNzUxNDFaMBgxFjAU
BgNVBAMTDTZhYThmOTExLTUwZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvyPBR3fJZA7T8akPnozjpi2PSK7JxQb+yelZ8ccwPRK0uhnTL3MG9nS5z
lXn/2LAusXO4R5c9vYJweTKyPlup3tVIK7Ql55HgGjchO9u7QmJSf0YWehsfEeo5
Dgs/oLAzff/jDTWXcY7nwe5Yb6Yq9qMZCk/xbbl6YVQ88VtJ0ioAzxexOVuofeuB
5wS5udE18OM7wHhKII0y6E3D580Ar7qtiepHQUG5EmdsQ7ULJiNAg153exOuMRNn
adMRj1ySuxxd3frqCpG1EeEjo+Kp6Zb/8feEhRUSDNu1yiqEloU/N2tRJ7pfXTPB
hqUBFwTuNdtgqX1F0LqHQRqDtEBfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUARd/
eFTHCpRvkRwXQfAOWRikl8MwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzRCRDRBNzBBQjBEQTExRjFCODVGRDNEM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYpEgAwDQYJKoZIhvcNAQEL
BQADggEBAK/708kPegc7oOKZ78G0urofLK+NwlCVLuhqhprK/F3dtyW4JzlWinHg
DAnuMy23FfeZ1dx3B1avepWqDUP2VbQC0qtfzXr389ryDK/GjIAm5RVCGzMGbnEz
6vev25NBVBfc9BHrANZR5BYLqTwD+jMyvWp3xNL2a/QxEd21VFJhpw2aSb4Rj5I2
baVOabbOAH1Rij9+k6GjHlw+P7RWCTi+qt8E39IMV1i9Sk+KAN3Fu/9elpTpwJVU
C8tLAhIF3qIQLcGfVK4/m3iDQspSpskmWxSu9lXkjBRJwf2OOASRFB/KXbfVmwxT
BgClS6HNqgLI/gMVGtDgOJ+qdbfdJT8=
-----END CERTIFICATE-----