Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4FEEE6C0DDDF11F18136FEEDCE1D38B0.roa
File:                     4FEEE6C0DDDF11F18136FEEDCE1D38B0.roa (raw, json)
Hash identifier:          +8eIU96wI5wNewxXePCq7giUKgJeHtXMfU91hGS9B6A=
Subject key identifier:   67:D0:21:BE:44:41:83:4C:52:86:81:78:89:45:74:63:EE:67:86:74
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0D45
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4FEEE6C0DDDF11F18136FEEDCE1D38B0.roa
Signing time:             Wed 11 Nov 2026 14:51:02 +0000
ROA not before:           Wed 11 Nov 2026 14:50:57 +0000
ROA not after:            Tue 11 Nov 2036 14:50:57 +0000
asID:                     206092
IP address blocks:        41.180.150.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3397 (0xd45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Nov 11 14:50:57 2026 GMT
            Not After : Nov 11 14:50:57 2036 GMT
        Subject: CN=6af480d6-ebd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c9:9e:ed:3b:04:fe:c7:44:8b:79:e0:83:a3:
                    a4:72:c3:60:be:36:7d:4e:8f:78:47:85:9f:a5:1d:
                    a4:37:d6:78:72:9d:74:f5:b8:b0:7f:f3:75:31:ac:
                    51:77:05:2b:d0:73:44:67:2d:d5:35:34:e7:a5:ff:
                    93:41:ad:c0:5c:0c:b5:29:16:33:7d:94:cf:be:4a:
                    f9:a4:ea:0f:89:50:59:8e:9d:44:b9:00:80:b9:ad:
                    74:5d:2c:d0:44:a0:21:40:14:33:a3:f5:b9:2c:8c:
                    e3:ae:be:b3:bc:51:da:84:60:14:d3:fb:fd:03:47:
                    79:88:7e:03:9c:13:66:52:6d:e3:ac:8d:7f:31:f4:
                    1f:27:11:05:d0:54:03:80:ee:62:2e:2f:97:39:56:
                    ad:fe:66:3c:c1:c9:7a:94:d8:36:98:fb:c2:8d:8b:
                    35:d2:82:86:6e:14:58:57:67:7d:3b:d2:58:82:96:
                    5b:3f:0f:f0:1c:17:8c:a3:0a:03:ed:0f:62:39:76:
                    4b:a1:bd:91:28:53:85:f1:93:f7:05:73:92:0b:87:
                    1d:29:a5:a3:29:ea:3b:f4:a7:ba:3b:6d:48:d4:50:
                    d9:01:74:d2:da:a7:07:7f:31:c1:a1:25:5f:fa:a8:
                    56:b0:28:ed:7c:d9:24:79:ea:0f:a7:d0:06:7a:4a:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D0:21:BE:44:41:83:4C:52:86:81:78:89:45:74:63:EE:67:86:74
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4FEEE6C0DDDF11F18136FEEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:a7:10:d9:01:f0:77:61:ee:43:5e:f1:88:78:97:4f:d8:
         8b:b1:86:a5:3a:a2:8d:bd:ce:9a:e3:3f:a3:da:5e:4b:da:fb:
         80:7b:34:bd:c5:11:c3:ac:26:dc:75:33:f4:8e:ee:22:20:38:
         b5:bd:b9:c5:17:d8:b5:e1:a5:ab:2e:80:32:a8:23:6a:23:67:
         74:a9:eb:c4:4d:0f:54:15:fb:dd:75:e9:47:df:ff:b1:b9:4d:
         9f:f9:81:35:50:05:7a:1d:f2:eb:1f:5a:fd:af:c9:18:64:b6:
         fe:ba:f2:38:11:7c:28:2d:e5:72:40:bc:39:84:f7:a7:d5:e0:
         77:6e:89:55:5e:8f:41:91:e8:ab:a2:b5:63:8d:ca:de:56:f9:
         61:1a:e6:df:31:61:79:9c:2b:cd:3a:bd:29:57:82:37:e4:ac:
         ae:d4:7b:1f:2c:e3:99:56:5f:b6:d0:b7:32:76:ee:db:4b:c1:
         60:5e:e3:a6:29:ea:90:5a:fd:4f:15:e5:3e:89:1a:c9:98:27:
         d1:c1:b7:1f:87:f3:9b:f6:e9:c1:f4:68:31:01:bf:75:1e:74:
         c1:19:c2:f6:dd:e1:db:f9:c4:92:f0:c5:f1:73:8f:84:a6:04:
         c0:37:ef:92:f7:4d:67:9e:32:b7:5f:65:9a:19:0c:93:8e:5a:
         b7:8c:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----