Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/E5DBB88AB1AB11F1B91A3FCACE1D38B0.roa
File:                     E5DBB88AB1AB11F1B91A3FCACE1D38B0.roa (raw, json)
Hash identifier:          mr1FFp+vEcR/7jf3LFB2j73NO8MXk6jLZbH4O5ysRfg=
Subject key identifier:   F4:B2:3A:EB:D0:DD:5D:BD:D7:F4:7B:6D:22:A8:E9:03:42:77:FE:2B
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08CE
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/E5DBB88AB1AB11F1B91A3FCACE1D38B0.roa
Signing time:             Wed 16 Sep 2026 08:52:08 +0000
ROA not before:           Wed 16 Sep 2026 08:52:04 +0000
ROA not after:            Wed 31 Dec 2036 08:52:04 +0000
asID:                     29975
IP address blocks:        41.28.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2254 (0x8ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 08:52:04 2026 GMT
            Not After : Dec 31 08:52:04 2036 GMT
        Subject: CN=6aaa58b8-e81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:fd:43:77:5d:0e:66:90:ea:63:7f:d0:91:
                    76:a7:62:37:de:ff:13:28:55:22:56:b9:0b:b4:09:
                    95:bc:59:d6:3e:e3:09:f2:fe:08:40:4a:d2:70:ce:
                    4f:ee:11:58:8a:fd:14:55:d7:76:f9:dc:11:70:e1:
                    39:85:a7:92:4a:ff:fd:a1:26:2d:aa:dc:2a:cf:b9:
                    9f:21:a4:c8:1b:92:d1:1c:cb:4d:db:95:0e:91:86:
                    f4:98:88:49:66:fb:79:75:36:68:cd:72:3e:4e:90:
                    34:8d:6c:d9:86:0f:b6:25:f3:30:0d:43:ea:b8:a8:
                    66:34:b7:a3:d4:3b:29:d6:1e:8a:68:ce:88:93:2b:
                    a2:7b:5d:4b:ab:ca:34:e9:83:11:c3:2a:f6:78:b2:
                    39:9e:75:7a:2c:55:8e:4a:42:2f:d0:25:47:fa:38:
                    34:a5:b8:76:19:79:63:9d:ff:24:2e:d5:02:7e:57:
                    67:99:cd:bf:12:29:a6:bc:5d:e6:3b:ef:c1:27:ee:
                    ca:0f:8c:21:b2:f0:3c:c4:bc:18:8a:52:df:78:b1:
                    dc:d8:b2:d9:29:ab:88:f7:34:6c:75:ff:a0:e1:43:
                    6b:e9:7b:de:3e:5c:e6:15:9d:e3:17:4e:bf:48:95:
                    57:ff:1e:d5:8b:a9:af:a0:e1:90:78:7b:d8:6b:65:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B2:3A:EB:D0:DD:5D:BD:D7:F4:7B:6D:22:A8:E9:03:42:77:FE:2B
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/E5DBB88AB1AB11F1B91A3FCACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.28.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:2f:cd:15:97:bd:a0:bf:16:cd:07:1c:3e:88:e4:32:a7:
         37:a0:a9:33:79:7f:d9:48:e1:53:c6:8c:c0:48:24:75:88:6a:
         bf:05:42:62:29:66:81:80:2d:f9:6b:46:4b:ec:0b:64:38:62:
         37:ab:51:d3:a7:53:86:db:6c:bc:c1:83:1d:8f:c6:cc:5a:30:
         9d:1d:bc:f8:85:a2:97:87:05:9f:88:6c:87:fd:4c:28:c6:48:
         77:58:85:cb:f5:00:ed:b6:63:45:68:1d:53:94:85:3b:a2:93:
         68:9d:2f:49:60:4d:64:27:c1:ec:e3:21:8a:ee:8d:94:c3:52:
         c7:db:1d:30:7a:dc:e9:25:33:fe:3a:f1:c9:e1:6f:b9:f4:e6:
         e2:68:54:b0:89:60:d8:c4:fe:ed:0e:54:38:b5:f7:ed:df:25:
         b5:dd:ba:09:ae:ee:32:22:76:73:de:b2:c7:b1:0c:de:93:69:
         cd:80:82:de:78:2c:c4:86:a2:70:1a:6e:7e:74:f0:f1:5f:18:
         20:e8:10:86:84:7f:15:ec:39:01:55:8c:a3:f2:cd:ad:bd:41:
         e6:6d:ed:4a:a3:5f:0a:22:62:fd:69:a5:f2:64:1d:7f:10:c2:
         96:25:32:e0:3a:d9:91:46:e0:5b:e3:3a:d8:3a:49:db:fc:02:
         7e:3a:1a:b2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTYwODUyMDRaFw0zNjEyMzEwODUyMDRaMBgxFjAU
BgNVBAMTDTZhYWE1OGI4LWU4MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCimf1Dd10OZpDqY3/QkXanYjfe/xMoVSJWuQu0CZW8WdY+4wny/ghAStJw
zk/uEViK/RRV13b53BFw4TmFp5JK//2hJi2q3CrPuZ8hpMgbktEcy03blQ6RhvSY
iElm+3l1NmjNcj5OkDSNbNmGD7Yl8zANQ+q4qGY0t6PUOynWHopozoiTK6J7XUur
yjTpgxHDKvZ4sjmedXosVY5KQi/QJUf6ODSluHYZeWOd/yQu1QJ+V2eZzb8SKaa8
XeY778En7soPjCGy8DzEvBiKUt94sdzYstkpq4j3NGx1/6DhQ2vpe94+XOYVneMX
Tr9IlVf/HtWLqa+g4ZB4e9hrZU83AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU9LI6
69DdXb3X9HttIqjpA0J3/iswHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4L0U1REJCODhBQjFBQjExRjFCOTFBM0ZDQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYpHAAwDQYJKoZIhvcNAQEL
BQADggEBABGrL80Vl72gvxbNBxw+iOQypzegqTN5f9lI4VPGjMBIJHWIar8FQmIp
ZoGALflrRkvsC2Q4YjerUdOnU4bbbLzBgx2PxsxaMJ0dvPiFopeHBZ+IbIf9TCjG
SHdYhcv1AO22Y0VoHVOUhTuik2idL0lgTWQnwezjIYrujZTDUsfbHTB63OklM/46
8cnhb7n05uJoVLCJYNjE/u0OVDi19+3fJbXdugmu7jIidnPessexDN6Tac2Agt54
LMSGonAabn508PFfGCDoEIaEfxXsOQFVjKPyza29QeZt7UqjXwoiYv1ppfJkHX8Q
wpYlMuA62ZFG4FvjOtg6Sdv8An46GrI=
-----END CERTIFICATE-----