Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/74F9962A859911F1B8A27B1BCF1D38B0.roa
File:                     74F9962A859911F1B8A27B1BCF1D38B0.roa (raw, json)
Hash identifier:          R6hnEkhmjioQnji89brKdewbFDGKHHnsU6v+LQlRaSg=
Subject key identifier:   45:C0:3A:02:9E:DA:6F:C7:CC:4D:A3:3D:00:A1:76:15:74:EA:13:95
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0BCC
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/74F9962A859911F1B8A27B1BCF1D38B0.roa
Signing time:             Wed 22 Jul 2026 06:49:17 +0000
ROA not before:           Wed 22 Jul 2026 06:49:13 +0000
ROA not after:            Tue 22 Jul 2036 06:49:13 +0000
asID:                     137409
IP address blocks:        41.180.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 01:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3020 (0xbcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 22 06:49:13 2026 GMT
            Not After : Jul 22 06:49:13 2036 GMT
        Subject: CN=6a6067ed-9e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:a3:82:66:1f:d7:02:1f:42:51:2b:cb:55:
                    9c:22:df:e5:9f:a7:e7:3c:7f:b5:e0:a0:4a:d6:62:
                    6e:d9:62:9e:52:e0:b2:01:de:cd:ba:21:dc:5b:13:
                    41:4d:c0:fd:ed:f5:a4:6e:38:be:30:d7:39:81:9d:
                    43:93:17:04:48:2e:69:e0:b0:69:3a:af:ef:65:06:
                    f3:52:e3:1b:8f:fd:2b:a8:f7:26:08:9c:e9:7c:a5:
                    79:12:5e:95:c3:8e:34:8c:b9:c1:dc:71:5b:10:39:
                    0e:5a:40:c8:1c:1d:fb:57:e9:bc:97:dd:48:07:71:
                    e5:7e:7b:ff:b8:0e:8b:b5:ae:95:33:e5:c3:22:8b:
                    3a:8b:5a:66:aa:6d:00:d8:17:46:ab:15:de:62:13:
                    db:b6:67:00:ef:a4:96:3a:aa:14:db:25:5e:10:b3:
                    8d:f4:ae:2c:44:98:11:51:d5:43:5c:a4:b9:1b:7d:
                    25:77:c4:c1:83:da:64:74:17:50:8f:f4:ea:ec:06:
                    a1:34:44:c1:e9:85:b4:5a:8d:08:1b:66:8e:85:ec:
                    c2:2e:f5:11:bb:d8:87:dd:d7:fb:53:71:1c:d5:76:
                    9b:05:32:2b:32:5d:9b:a4:55:7c:a3:a5:d3:fe:40:
                    98:62:59:82:63:a9:cd:d2:0e:0a:de:0d:2e:37:2b:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C0:3A:02:9E:DA:6F:C7:CC:4D:A3:3D:00:A1:76:15:74:EA:13:95
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/74F9962A859911F1B8A27B1BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:0b:b5:0b:77:c0:2e:2f:dc:22:7f:5d:ac:43:5b:f9:5d:5d:
         22:22:d2:b8:96:93:8b:bd:0d:da:7d:70:80:7a:c2:7e:27:a1:
         89:63:95:7c:ed:03:f5:4a:1d:fb:58:81:e0:4d:4b:0f:ce:7b:
         7d:65:04:62:93:1e:62:7d:00:53:d6:43:f5:ef:a6:d7:2d:d4:
         b7:7b:e6:26:d3:fc:8e:ab:dd:c3:40:81:f3:7b:f8:d8:05:f6:
         f2:49:64:c4:aa:00:dc:59:53:89:6c:89:56:58:e4:95:ee:c6:
         f3:0b:a2:26:b1:f8:99:61:00:92:2a:b8:22:15:f3:16:37:37:
         9c:90:93:49:b2:4e:0c:f8:00:b9:97:55:37:64:df:11:65:4b:
         32:98:f8:8c:26:09:0b:a3:5f:9d:54:b9:a3:76:c2:c2:df:fa:
         23:8c:12:32:f0:51:47:32:29:3b:2d:67:d2:45:83:7b:1b:5e:
         d4:a1:7c:e8:ac:31:58:0a:88:84:c7:22:c0:c5:a8:9c:46:25:
         6d:66:ee:84:40:61:d5:12:24:98:99:05:f5:9a:ce:d0:fb:23:
         29:63:67:e9:8c:c0:ab:56:48:c2:4e:a8:6d:a4:75:68:da:ea:
         38:50:f0:45:50:47:97:0b:31:f3:13:86:9f:7a:0b:67:f6:44:
         2c:7a:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:38 2026 by rpki-client