Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DA7883C2859811F194DE7017CF1D38B0.roa
File:                     DA7883C2859811F194DE7017CF1D38B0.roa (raw, json)
Hash identifier:          kmk35Ep83W8f97GdWgnSn02Eer2w6QNgXTH9PEM1rZ0=
Subject key identifier:   AE:EF:45:A0:92:F8:34:15:10:25:10:A5:B8:5A:89:D1:1D:2E:B8:5C
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0BC4
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DA7883C2859811F194DE7017CF1D38B0.roa
Signing time:             Wed 22 Jul 2026 06:44:57 +0000
ROA not before:           Wed 22 Jul 2026 06:44:53 +0000
ROA not after:            Tue 22 Jul 2036 06:44:53 +0000
asID:                     137409
IP address blocks:        41.180.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 01:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3012 (0xbc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 22 06:44:53 2026 GMT
            Not After : Jul 22 06:44:53 2036 GMT
        Subject: CN=6a6066e9-8803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:59:b2:77:5b:27:17:49:a4:3f:4f:52:0e:
                    42:5a:10:bb:4e:37:83:8b:d1:1e:a6:23:dc:b1:4b:
                    06:cc:48:d6:68:5d:09:b3:91:d5:02:3d:49:19:14:
                    e2:40:eb:a6:36:f9:43:f3:e4:31:32:da:5e:30:da:
                    c7:97:e6:5f:81:6e:53:59:b6:b1:44:71:00:c8:62:
                    7a:ea:38:6f:2c:80:c5:bb:1c:12:27:e6:ea:e5:e6:
                    56:73:54:67:76:33:66:0d:eb:1c:cd:f8:54:9d:bf:
                    cb:61:88:cb:5c:7a:e1:cb:53:ed:32:55:18:4f:6c:
                    e5:fa:f9:de:55:51:65:31:10:2e:8f:50:52:96:c0:
                    74:29:dc:b1:c8:f9:44:de:f3:37:f9:49:bb:bc:79:
                    6d:4f:be:8e:e4:f2:15:c6:d7:5d:dd:8f:de:90:8d:
                    54:28:7b:4e:90:06:0b:e2:6c:79:72:46:38:27:ab:
                    46:e4:84:3c:b7:74:b6:c9:59:67:a1:e7:9c:56:d4:
                    30:11:c8:ec:e7:ae:e4:f0:6d:f3:0f:0c:4c:7c:ee:
                    dc:d2:eb:84:ae:fb:b3:17:f2:e5:ef:03:20:00:c1:
                    82:4a:5b:60:22:4b:ae:4f:e5:cf:c2:3b:c2:7b:ed:
                    4b:59:39:a0:8b:8a:6c:5d:bd:85:a8:4b:ef:22:00:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EF:45:A0:92:F8:34:15:10:25:10:A5:B8:5A:89:D1:1D:2E:B8:5C
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DA7883C2859811F194DE7017CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:98:29:cb:95:1e:18:37:e0:39:ee:5b:21:94:0d:72:35:
         73:01:1f:9e:27:b2:c1:90:7e:34:ce:e1:13:de:93:74:4e:a2:
         71:20:7a:3f:ae:aa:60:43:9a:49:15:19:d0:f4:e5:4b:8a:52:
         c0:43:b1:78:b3:5a:77:4c:7f:26:6b:a2:d8:cb:96:21:44:fa:
         99:6a:4a:e9:e3:c6:4a:59:e2:08:09:73:f7:ad:9e:ae:57:f1:
         e3:ec:1a:14:ac:f1:2d:fb:ab:8e:e6:b9:84:a5:df:55:96:05:
         b2:1b:0c:79:6b:8b:0f:56:59:bc:53:81:3f:1d:76:69:f3:83:
         d9:7a:b2:3b:c4:a8:32:d1:7d:f7:1f:c9:3b:71:a3:53:f7:b3:
         13:ad:15:85:3b:86:e1:1b:ba:e0:d7:40:61:12:87:1f:cc:91:
         cb:d9:0e:6c:d8:a7:f4:cd:f2:dc:27:26:35:77:9a:0b:74:0d:
         e2:48:21:18:d7:6b:7c:76:dd:88:cc:8e:87:e7:1a:dc:18:7c:
         de:d7:94:d6:64:a6:80:7d:94:3e:fc:54:38:28:ec:26:15:64:
         9b:66:65:06:c6:2f:51:d7:15:f1:6d:d9:1e:85:cc:8b:9c:dd:
         b4:af:4d:c7:96:45:97:58:72:ea:ae:5b:ce:71:41:27:26:4b:
         44:5d:75:81
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjIwNjQ0NTNaFw0zNjA3MjIwNjQ0NTNaMBgxFjAU
BgNVBAMTDTZhNjA2NmU5LTg4MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8fFmyd1snF0mkP09SDkJaELtON4OL0R6mI9yxSwbMSNZoXQmzkdUCPUkZ
FOJA66Y2+UPz5DEy2l4w2seX5l+BblNZtrFEcQDIYnrqOG8sgMW7HBIn5url5lZz
VGd2M2YN6xzN+FSdv8thiMtceuHLU+0yVRhPbOX6+d5VUWUxEC6PUFKWwHQp3LHI
+UTe8zf5Sbu8eW1Pvo7k8hXG113dj96QjVQoe06QBgvibHlyRjgnq0bkhDy3dLbJ
WWeh55xW1DARyOznruTwbfMPDEx87tzS64Su+7MX8uXvAyAAwYJKW2AiS65P5c/C
O8J77UtZOaCLimxdvYWoS+8iAJdzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUru9F
oJL4NBUQJRCluFqJ0R0uuFwwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4L0RBNzg4M0MyODU5ODExRjE5NERFNzAxN0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAptKAwDQYJKoZIhvcNAQEL
BQADggEBAIc8mCnLlR4YN+A57lshlA1yNXMBH54nssGQfjTO4RPek3ROonEgej+u
qmBDmkkVGdD05UuKUsBDsXizWndMfyZrotjLliFE+plqSunjxkpZ4ggJc/etnq5X
8ePsGhSs8S37q47muYSl31WWBbIbDHlriw9WWbxTgT8ddmnzg9l6sjvEqDLRffcf
yTtxo1P3sxOtFYU7huEbuuDXQGEShx/MkcvZDmzYp/TN8twnJjV3mgt0DeJIIRjX
a3x23YjMjofnGtwYfN7XlNZkpoB9lD78VDgo7CYVZJtmZQbGL1HXFfFt2R6FzIuc
3bSvTceWRZdYcuquW85xQScmS0RddYE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:15 2026 by rpki-client