Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/DFFDADA8B26C11F1B28EF0D8CE1D38B0.roa
File:                     DFFDADA8B26C11F1B28EF0D8CE1D38B0.roa (raw, json)
Hash identifier:          9TGrOozOnvUejCbtM/NepNcMaQR9xfhp2YKWaRusujU=
Subject key identifier:   1F:96:D1:80:A7:4D:FB:22:1A:05:BA:DB:20:A6:B5:55:B6:E2:37:3F
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08E1
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/DFFDADA8B26C11F1B28EF0D8CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:53:31 +0000
ROA not before:           Thu 17 Sep 2026 07:53:27 +0000
ROA not after:            Wed 31 Dec 2036 07:53:27 +0000
asID:                     29975
IP address blocks:        41.30.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273 (0x8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 17 07:53:27 2026 GMT
            Not After : Dec 31 07:53:27 2036 GMT
        Subject: CN=6aab9c7b-e9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:c8:2e:63:64:cf:c7:f9:b6:33:5a:19:7d:
                    fd:2a:ec:e4:3a:c0:83:74:de:d8:db:27:a8:ba:3e:
                    b0:e7:42:c7:cf:21:20:66:48:28:98:8d:5d:c9:45:
                    cb:a2:fa:c4:dd:e4:8b:ab:07:a3:2c:d0:aa:89:ee:
                    f8:0d:fd:03:56:46:6a:fe:a9:e9:49:42:74:b0:2e:
                    14:db:dc:3c:86:cd:db:c0:d5:fa:2e:be:db:9b:78:
                    e7:3d:5f:b6:c8:e9:16:87:03:05:c3:d2:1c:79:d2:
                    d2:d3:cb:52:a6:47:c4:5d:aa:b5:a2:78:30:41:a8:
                    3c:52:49:26:8d:28:cc:2b:89:72:49:0f:88:13:ac:
                    d4:3b:95:39:7c:93:86:e4:6a:a3:73:4c:62:7c:2d:
                    1e:d0:ed:6c:71:b7:65:2e:71:17:9e:c4:74:26:97:
                    21:b6:9c:a6:d2:30:fd:f8:94:6d:76:3c:ff:a4:5d:
                    69:e8:1c:5f:06:aa:c2:ef:04:1e:f1:64:02:50:a7:
                    30:e2:eb:f6:59:74:d2:b6:0d:17:eb:54:65:14:32:
                    e7:f1:99:87:d9:cf:ad:e2:ff:9e:95:88:f5:ca:22:
                    15:ed:61:9f:74:02:b3:4e:71:1c:88:01:a8:f6:4f:
                    54:53:30:7e:8e:0c:cc:d9:15:a5:ce:63:aa:02:e3:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:96:D1:80:A7:4D:FB:22:1A:05:BA:DB:20:A6:B5:55:B6:E2:37:3F
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/DFFDADA8B26C11F1B28EF0D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.30.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:c5:2e:22:e7:bd:34:9a:61:6a:d2:93:ef:2c:2b:96:99:76:
         47:5a:2f:ae:7c:04:1e:e7:32:82:cf:e2:ea:7b:01:2e:66:80:
         d1:3e:07:7a:f6:f2:ce:9e:a8:5d:b0:b1:41:f4:38:1e:ca:d2:
         ee:0e:a1:15:6b:37:1c:7d:d1:1b:6e:8d:45:93:c6:29:77:e5:
         20:2f:b2:7d:44:f3:99:4a:95:fc:2e:b2:08:df:d4:cd:5b:bb:
         23:12:22:ae:4a:e4:e1:65:a2:6d:72:63:8b:12:58:9b:66:4f:
         86:90:54:a5:a5:8f:f2:52:ce:11:ff:34:05:da:d8:58:81:62:
         00:40:28:e8:09:8a:99:be:9f:f7:e1:ec:b2:aa:2c:92:6b:83:
         ed:10:bf:00:df:d2:f4:04:ec:0f:ed:5e:78:d0:97:38:8d:9b:
         8d:31:46:99:08:7c:90:25:33:81:e0:e0:6c:a7:14:61:9f:4e:
         b4:78:c6:67:c3:cb:dc:28:39:b1:c7:6e:e3:21:64:54:40:bc:
         d4:4d:a0:d7:13:09:e2:24:51:e0:a9:be:77:56:ba:22:f3:2e:
         6e:d6:de:00:d3:44:37:06:9a:05:ad:f2:95:ff:9e:f9:12:2c:
         3b:97:9d:9f:ff:e8:18:dc:1a:1e:41:99:48:f5:24:ef:fe:59:
         68:12:65:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----