Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C6E746CC875011F1B698E411CF1D38B0.roa
File:                     C6E746CC875011F1B698E411CF1D38B0.roa (raw, json)
Hash identifier:          1tAu4J63N6ojNAe9CMsCJOMl0NwP/5bR7eUL+mbx8b4=
Subject key identifier:   BA:AD:C9:CA:21:34:3A:6B:E1:83:C0:88:5C:FF:BA:AA:1F:FD:CC:CE
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0C0A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C6E746CC875011F1B698E411CF1D38B0.roa
Signing time:             Fri 24 Jul 2026 11:14:03 +0000
ROA not before:           Fri 24 Jul 2026 11:13:59 +0000
ROA not after:            Thu 24 Jul 2036 11:13:59 +0000
asID:                     36916
IP address blocks:        41.180.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3082 (0xc0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 24 11:13:59 2026 GMT
            Not After : Jul 24 11:13:59 2036 GMT
        Subject: CN=6a6348fb-01cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6d:a4:14:80:02:16:64:22:6b:97:5e:09:bc:
                    2e:52:83:5b:23:4a:4a:9b:ae:79:7b:c6:11:27:5f:
                    bf:f8:cb:0c:04:b6:55:cd:ac:d0:10:0f:6d:5a:70:
                    49:86:f5:25:67:b2:a6:46:11:e1:73:0c:7a:05:a0:
                    4a:74:3d:2f:fb:4a:5f:3b:b8:10:8c:1b:00:a4:ad:
                    50:6b:2e:bd:1d:de:5f:7d:c4:67:8e:ac:c6:a9:1f:
                    07:f6:21:17:68:fc:19:06:f6:46:26:42:f4:60:cc:
                    56:04:fa:5d:1e:66:dc:72:ac:98:3d:8d:c1:23:f9:
                    df:46:35:57:b2:7c:5d:a4:43:28:6f:a7:c9:73:8e:
                    57:a3:88:83:af:27:cc:b4:8a:93:26:14:8e:34:13:
                    97:f0:40:91:52:85:c2:50:69:93:13:b9:74:68:22:
                    f8:8d:d7:5c:65:80:1f:12:b1:38:bf:80:f7:57:b3:
                    d9:7d:02:3d:29:2f:62:e2:b4:fc:e4:4c:aa:eb:e8:
                    5a:43:d0:14:32:cd:d0:19:aa:61:10:68:64:95:83:
                    e4:82:69:65:ef:e8:92:06:85:46:76:5c:0e:4b:de:
                    e5:08:9a:24:d7:89:7d:23:73:8b:5d:bf:cb:36:7f:
                    92:e6:51:3d:b9:49:5e:7a:44:4b:cf:42:26:d8:fc:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AD:C9:CA:21:34:3A:6B:E1:83:C0:88:5C:FF:BA:AA:1F:FD:CC:CE
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C6E746CC875011F1B698E411CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:f0:b1:d5:41:15:da:b0:dd:15:12:c7:fa:5a:b1:20:cd:
         a2:ba:5f:6d:3e:5b:71:51:f1:3e:b8:e8:b8:70:ae:64:de:fe:
         fe:11:90:af:ad:8a:52:65:c3:5f:88:9a:64:fc:87:d0:f7:2a:
         64:90:fc:7b:84:42:b1:d2:a9:9e:52:14:cb:dc:76:e4:b1:5e:
         f9:dd:7c:10:af:e0:d4:1c:47:22:38:0b:04:9e:be:66:a5:f8:
         1c:d6:da:33:d0:5c:84:db:6c:f2:01:3f:f3:40:5c:bd:bb:b9:
         ac:d4:86:fc:99:af:d1:69:ab:ed:e3:de:28:51:62:be:1f:25:
         25:74:a4:2b:01:f1:5f:e8:78:a2:1e:1c:e1:87:b6:f0:2f:a9:
         cb:97:82:ec:0a:12:25:07:10:0c:17:a1:55:2d:d4:31:c4:80:
         74:96:35:97:86:c1:b7:f2:0e:79:24:36:28:db:e1:09:47:54:
         d1:a9:85:62:e9:32:c0:c1:b5:1a:68:29:ec:de:6b:62:d1:03:
         81:47:38:06:fc:43:26:a4:0d:e3:bc:d0:55:c6:2b:37:e9:62:
         79:c6:9c:9b:55:06:71:3c:84:3f:b4:32:79:6a:fe:8a:c9:f8:
         b4:37:c9:db:21:13:11:78:9d:ea:20:3b:29:b1:54:04:43:44:
         75:90:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:57 2026 by rpki-client