Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/51F38672875111F1B8632914CF1D38B0.roa
File:                     51F38672875111F1B8632914CF1D38B0.roa (raw, json)
Hash identifier:          Csg81crOZENIX8VWbw1hRFWayxlZj9IdfeMVTnHdYp4=
Subject key identifier:   65:2F:A7:9E:92:E7:36:4D:F2:C0:6D:84:43:7C:0F:A1:1D:07:DF:24
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0C10
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/51F38672875111F1B8632914CF1D38B0.roa
Signing time:             Fri 24 Jul 2026 11:17:56 +0000
ROA not before:           Fri 24 Jul 2026 11:17:53 +0000
ROA not after:            Thu 24 Jul 2036 11:17:53 +0000
asID:                     36916
IP address blocks:        41.180.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3088 (0xc10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 24 11:17:53 2026 GMT
            Not After : Jul 24 11:17:53 2036 GMT
        Subject: CN=6a6349e4-efbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:03:21:56:bd:5a:d8:66:f6:1a:b5:09:b4:
                    38:f2:69:17:17:9a:93:00:04:21:a5:ff:03:30:a8:
                    a6:a5:60:09:7b:54:3a:a3:6d:02:9a:28:e8:b2:71:
                    2f:9f:cc:51:3d:f8:1d:82:2b:63:27:b6:27:14:8a:
                    d9:b8:72:b4:f3:9f:27:b4:5d:2d:02:5b:07:18:64:
                    cb:cd:fb:f0:c6:42:1a:f0:67:10:f1:51:d2:02:8a:
                    32:43:c1:5f:e7:59:f8:bd:fc:da:dc:95:9b:f3:97:
                    6c:5b:e1:36:24:b5:02:37:3a:bc:2e:ad:ca:97:f2:
                    7f:45:dd:a2:6a:01:e0:96:fc:0a:ba:e8:5f:c8:4f:
                    95:19:c8:b6:b9:33:ea:20:a5:ef:a7:ed:8b:42:fb:
                    d3:9f:ce:1e:f7:5f:cf:5f:15:9e:fa:8d:8d:3c:dc:
                    61:3d:9e:ac:3d:c8:0b:55:c0:e1:85:7c:aa:7b:a4:
                    81:a0:06:95:01:67:21:1c:d6:71:18:0c:e9:4f:ef:
                    05:f2:6e:52:54:e5:0d:dc:b3:b5:2a:e7:d7:5a:f9:
                    09:bd:a7:b3:76:e8:5c:37:fb:6e:41:8f:2b:b3:1a:
                    2c:5b:5b:e7:9a:67:2f:53:21:63:f5:c8:20:9c:81:
                    85:27:de:5f:1d:75:c9:76:9f:c8:1f:d5:1c:87:d2:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2F:A7:9E:92:E7:36:4D:F2:C0:6D:84:43:7C:0F:A1:1D:07:DF:24
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/51F38672875111F1B8632914CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:2b:e0:f0:82:96:f6:2c:e1:01:7f:50:e8:9a:eb:d6:b5:
         0a:ad:5a:59:9e:d9:5d:72:96:a0:60:7e:fa:be:de:f3:2e:30:
         0a:ec:11:6d:9f:86:83:8f:28:94:5d:dd:4f:f7:7a:be:a8:75:
         e5:e6:01:62:ae:6a:c6:b0:ce:76:78:7a:ab:87:04:2a:ee:dd:
         f3:ed:dd:e4:07:e5:b4:d3:a3:ce:67:3e:b5:77:0b:47:8b:a0:
         f1:b5:42:9f:c5:6d:53:5f:db:6e:c0:d2:6c:15:d6:d3:c3:26:
         a8:45:bf:4c:70:f3:e8:a8:46:34:6f:e6:c8:04:ab:f8:f0:f6:
         44:db:39:87:e6:cb:1f:10:3f:6a:e1:07:02:f0:8f:8a:54:37:
         88:9d:b4:30:4c:ec:8b:5e:7c:8f:0e:3e:7f:9d:39:4c:dd:1b:
         82:e6:74:df:85:c6:9f:69:27:0f:33:b8:cf:ed:32:b4:d5:fb:
         24:00:92:e9:a5:ed:1a:39:e3:fe:39:ec:7e:68:3b:c6:03:f2:
         57:b4:34:7e:07:03:37:bd:63:2b:44:66:07:35:17:00:52:88:
         f5:4c:0c:91:2d:be:da:c0:82:66:0e:cd:d9:6f:e8:8d:33:8a:
         c0:27:da:03:d9:c9:98:5e:80:37:12:bf:9f:17:85:6a:7a:d3:
         86:71:a9:7b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjQxMTE3NTNaFw0zNjA3MjQxMTE3NTNaMBgxFjAU
BgNVBAMTDTZhNjM0OWU0LWVmYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHbgMhVr1a2Gb2GrUJtDjyaRcXmpMABCGl/wMwqKalYAl7VDqjbQKaKOiy
cS+fzFE9+B2CK2MnticUitm4crTznye0XS0CWwcYZMvN+/DGQhrwZxDxUdICijJD
wV/nWfi9/NrclZvzl2xb4TYktQI3OrwurcqX8n9F3aJqAeCW/Aq66F/IT5UZyLa5
M+ogpe+n7YtC+9Ofzh73X89fFZ76jY083GE9nqw9yAtVwOGFfKp7pIGgBpUBZyEc
1nEYDOlP7wXyblJU5Q3cs7Uq59da+Qm9p7N26Fw3+25BjyuzGixbW+eaZy9TIWP1
yCCcgYUn3l8ddcl2n8gf1RyH0hKnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZS+n
npLnNk3ywG2EQ3wPoR0H3yQwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzUxRjM4NjcyODc1MTExRjFCODYzMjkxNENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEptHIwDQYJKoZIhvcNAQEL
BQADggEBADfRK+Dwgpb2LOEBf1DomuvWtQqtWlme2V1ylqBgfvq+3vMuMArsEW2f
hoOPKJRd3U/3er6odeXmAWKuasawznZ4equHBCru3fPt3eQH5bTTo85nPrV3C0eL
oPG1Qp/FbVNf227A0mwV1tPDJqhFv0xw8+ioRjRv5sgEq/jw9kTbOYfmyx8QP2rh
BwLwj4pUN4idtDBM7ItefI8OPn+dOUzdG4LmdN+Fxp9pJw8zuM/tMrTV+yQAkuml
7Ro54/457H5oO8YD8le0NH4HAze9YytEZgc1FwBSiPVMDJEtvtrAgmYOzdlv6I0z
isAn2gPZyZhegDcSv58XhWp604ZxqXs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:29 2026 by rpki-client