Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F47586A0C79011F1B771AC17CF1D38B0.roa
File:                     F47586A0C79011F1B771AC17CF1D38B0.roa (raw, json)
Hash identifier:          vGAat5kNGvwYgsWIhe5H4JBAJvFq49gIYCu426/ciWE=
Subject key identifier:   72:97:59:12:C6:58:2A:C9:4E:96:4B:1A:9F:36:8D:A2:36:5D:83:02
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0D0F
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F47586A0C79011F1B771AC17CF1D38B0.roa
Signing time:             Wed 14 Oct 2026 05:34:42 +0000
ROA not before:           Wed 14 Oct 2026 05:34:37 +0000
ROA not after:            Tue 14 Oct 2036 05:34:37 +0000
asID:                     13335
IP address blocks:        41.180.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Oct 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3343 (0xd0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Oct 14 05:34:37 2026 GMT
            Not After : Oct 14 05:34:37 2036 GMT
        Subject: CN=6acf1472-1068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:df:2f:a7:94:e3:ab:0b:2a:ef:75:59:1f:
                    38:8d:a8:62:ed:88:69:da:7d:3f:0d:b1:df:23:37:
                    4a:c4:59:63:95:d9:f3:4a:ea:ce:e2:b6:d3:3b:69:
                    c8:67:fb:93:9b:41:53:3e:95:a0:f9:5f:e4:76:96:
                    19:c8:13:21:77:46:01:87:f3:49:cf:0c:95:8f:47:
                    7f:c1:65:37:f3:11:30:bc:08:05:25:82:3e:22:fb:
                    f3:0c:bb:34:5a:ca:48:92:f4:ce:c7:c0:96:98:79:
                    ee:10:aa:93:ee:3a:ba:d8:bd:91:3d:de:a1:a4:42:
                    a1:53:18:f5:fb:df:7a:05:73:9f:68:c1:29:da:0b:
                    0f:f3:0d:7e:1b:14:69:68:4a:43:02:0f:a0:f4:ff:
                    42:95:c8:00:7d:8a:bf:0d:ed:c6:6b:29:7a:de:19:
                    fa:61:26:29:05:c8:ec:bf:6e:7a:22:77:09:63:6f:
                    89:16:c4:e3:d1:80:65:2d:16:5b:ae:08:a9:7b:6d:
                    33:43:b3:19:1e:17:dd:c4:e9:e0:88:66:19:81:82:
                    5f:31:81:44:77:10:f1:1f:91:5f:4f:fe:31:47:1d:
                    8e:1d:e8:c5:9f:e7:25:d1:b0:81:01:46:12:db:ba:
                    b0:75:d1:46:5e:92:54:8a:40:4b:ef:3c:ae:2c:c2:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:97:59:12:C6:58:2A:C9:4E:96:4B:1A:9F:36:8D:A2:36:5D:83:02
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F47586A0C79011F1B771AC17CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:33:7e:73:b2:fe:89:2e:de:30:24:ad:02:01:77:f5:40:
         53:5e:b8:10:d4:27:4c:e7:8a:ec:f9:9f:63:00:6d:5f:08:94:
         8e:22:ee:c6:bc:41:5d:0c:c0:c3:0d:e3:b6:07:03:0b:3c:d6:
         6a:f7:4a:c9:6c:11:97:07:7d:84:90:ec:a5:10:ce:08:08:e2:
         db:e6:8c:e1:8b:39:21:ae:c2:79:0a:24:95:d6:0f:0c:00:03:
         57:81:26:c2:45:87:5e:da:bc:d9:c9:c7:46:13:96:76:b8:e7:
         0a:7f:47:fb:cd:f4:ff:1a:ed:cc:b1:e7:e1:dd:a5:80:da:29:
         6a:d8:f2:0f:de:f9:f1:28:8e:44:57:31:2b:37:ae:4c:18:cf:
         03:94:6d:01:eb:57:03:12:40:a1:f6:da:1e:63:86:0b:88:58:
         d1:9e:38:ef:5e:7c:ab:99:0b:0c:94:cd:94:fe:83:1a:11:6c:
         80:fd:46:ff:ca:96:94:61:59:64:93:e9:5b:3d:02:38:52:8f:
         61:2e:49:36:d3:fb:ef:ba:bd:f1:ac:4a:91:77:11:66:0d:ab:
         3b:72:9a:f9:38:b7:c8:6e:16:a2:bc:00:c9:6e:7b:7a:73:5a:
         34:eb:af:3d:db:ee:7f:e9:1f:e5:6a:ba:64:1d:bf:47:f7:fa:
         69:78:7f:c8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjEwMTQwNTM0MzdaFw0zNjEwMTQwNTM0MzdaMBgxFjAU
BgNVBAMTDTZhY2YxNDcyLTEwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMft8vp5Tjqwsq73VZHziNqGLtiGnafT8Nsd8jN0rEWWOV2fNK6s7ittM7
achn+5ObQVM+laD5X+R2lhnIEyF3RgGH80nPDJWPR3/BZTfzETC8CAUlgj4i+/MM
uzRaykiS9M7HwJaYee4QqpPuOrrYvZE93qGkQqFTGPX733oFc59owSnaCw/zDX4b
FGloSkMCD6D0/0KVyAB9ir8N7cZrKXreGfphJikFyOy/bnoidwljb4kWxOPRgGUt
FluuCKl7bTNDsxkeF93E6eCIZhmBgl8xgUR3EPEfkV9P/jFHHY4d6MWf5yXRsIEB
RhLburB10UZeklSKQEvvPK4swnwFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcpdZ
EsZYKslOlksanzaNojZdgwIwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4L0Y0NzU4NkEwQzc5MDExRjFCNzcxQUMxN0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIptOAwDQYJKoZIhvcNAQEL
BQADggEBADHKM35zsv6JLt4wJK0CAXf1QFNeuBDUJ0zniuz5n2MAbV8IlI4i7sa8
QV0MwMMN47YHAws81mr3SslsEZcHfYSQ7KUQzggI4tvmjOGLOSGuwnkKJJXWDwwA
A1eBJsJFh17avNnJx0YTlna45wp/R/vN9P8a7cyx5+HdpYDaKWrY8g/e+fEojkRX
MSs3rkwYzwOUbQHrVwMSQKH22h5jhguIWNGeOO9efKuZCwyUzZT+gxoRbID9Rv/K
lpRhWWST6Vs9AjhSj2EuSTbT+++6vfGsSpF3EWYNqztymvk4t8huFqK8AMlue3pz
WjTrrz3b7n/pH+VqumQdv0f3+ml4f8g=
-----END CERTIFICATE-----