Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/26CEED34874B11F18655A3EECE1D38B0.roa
File:                     26CEED34874B11F18655A3EECE1D38B0.roa (raw, json)
Hash identifier:          789EknLqT7OgwYd/NVcsGl4FyI/zuq2KZst/AxQk9e0=
Subject key identifier:   AA:BF:A2:08:FB:8B:4B:18:86:AA:41:A2:95:A0:9E:45:5B:25:E5:CF
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0BEA
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/26CEED34874B11F18655A3EECE1D38B0.roa
Signing time:             Fri 24 Jul 2026 10:33:47 +0000
ROA not before:           Fri 24 Jul 2026 10:33:43 +0000
ROA not after:            Thu 24 Jul 2036 10:33:43 +0000
asID:                     36916
IP address blocks:        41.180.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3050 (0xbea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 24 10:33:43 2026 GMT
            Not After : Jul 24 10:33:43 2036 GMT
        Subject: CN=6a633f8b-f4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:cd:26:b7:5d:c6:07:e1:aa:4a:be:a2:f2:
                    bc:ef:a4:7b:d3:3d:5c:e8:63:e2:c4:32:4f:cc:78:
                    77:0d:e4:ba:6f:b6:8e:13:cf:80:10:9e:a1:67:29:
                    89:68:72:95:a6:a4:02:e5:96:c0:be:d1:d8:ab:23:
                    b2:35:3b:b2:06:ef:4b:75:39:7a:ca:a0:4c:3e:ac:
                    00:a5:0d:29:92:69:f0:1b:24:7f:fb:a7:41:9b:4a:
                    26:2b:90:c6:cd:3f:83:03:3b:00:04:78:4f:9e:2d:
                    73:9c:c4:2e:7f:79:5d:b4:f1:4f:8d:bd:01:c1:2c:
                    e0:94:e6:7b:44:bd:b8:ec:30:e5:d2:36:a5:d2:78:
                    e3:fc:7c:5b:15:c8:3d:57:42:44:2e:d9:0d:37:66:
                    03:2c:c3:7b:ce:2e:ed:3b:16:df:d8:18:8f:69:f3:
                    72:58:cf:32:85:88:ce:04:d7:1e:44:63:5c:fa:c8:
                    a9:b5:dd:f3:82:32:14:98:98:92:5b:9f:67:70:71:
                    54:4a:56:56:9b:3b:a6:9f:88:69:92:a8:d6:9e:8a:
                    e0:10:c7:f9:8d:c4:59:aa:fc:66:0c:6d:3a:d6:8c:
                    f9:05:41:63:75:7f:cb:d7:5c:c8:60:b8:dc:ee:82:
                    14:be:9f:7d:13:52:2c:1e:03:ab:d8:95:00:a5:56:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BF:A2:08:FB:8B:4B:18:86:AA:41:A2:95:A0:9E:45:5B:25:E5:CF
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/26CEED34874B11F18655A3EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:94:fc:83:55:eb:24:83:a8:c6:60:84:45:06:e5:25:98:c8:
         f9:90:5d:64:9f:22:6e:80:0b:62:16:a2:5a:56:a9:65:a1:7e:
         ce:8f:8c:67:ae:73:64:63:e9:a3:2a:68:b0:e4:9a:0e:8b:75:
         bd:26:20:3d:d1:d5:95:d5:0a:f3:97:9c:32:df:96:a3:0f:b7:
         91:8a:2d:a3:ee:29:0f:3f:00:04:8a:12:0a:5e:fc:d3:6d:bd:
         38:db:74:2a:b4:3b:c0:a5:b0:06:0c:75:41:d7:9a:c5:61:14:
         a4:01:6e:f3:41:86:ff:4c:0f:7c:a8:43:60:10:7f:a2:a8:37:
         7d:6e:f2:79:a9:63:d0:e8:ab:0d:8e:a1:e1:ec:cf:2b:6d:05:
         d7:25:37:df:4e:37:4f:22:f0:62:83:3e:b0:36:ef:68:97:bd:
         a9:7c:df:5e:44:0e:77:9f:40:bf:f1:c7:9a:46:3d:9b:ed:77:
         47:3f:55:46:2b:da:28:48:73:7f:dd:eb:64:e4:83:47:30:0c:
         e3:f4:d7:9b:51:01:33:61:d2:e5:d8:94:f0:7a:70:57:40:17:
         c3:ab:e7:51:b5:2c:92:6d:2d:e0:7a:6f:b9:0e:76:1f:5a:c3:
         b0:f9:90:e0:d9:1e:2d:4e:03:6f:72:38:66:ad:c6:e0:f2:04:
         b1:c9:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:52 2026 by rpki-client