Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/1AC237244E0E11F186AE88FDCE1D38B0.roa
File:                     1AC237244E0E11F186AE88FDCE1D38B0.roa (raw, json)
Hash identifier:          +k1moNg6tqlcZVB3Q58NJLFY7iSyGJuMl06FquVAvqE=
Subject key identifier:   58:2D:53:E8:C7:B8:A0:52:FD:B0:D4:C8:72:57:2E:89:7B:68:79:A2
Certificate issuer:       /CN=F3669EE9AF/serialNumber=F46171D43E28D8CBB70AD73D2947CD20096210DF
Certificate serial:       02
Authority key identifier: F4:61:71:D4:3E:28:D8:CB:B7:0A:D7:3D:29:47:CD:20:09:62:10:DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/1AC237244E0E11F186AE88FDCE1D38B0.roa
Signing time:             Tue 12 May 2026 14:23:11 +0000
ROA not before:           Tue 12 May 2026 14:23:06 +0000
ROA not after:            Fri 05 May 2028 14:23:06 +0000
asID:                     33786
IP address blocks:        41.75.48.0/24 maxlen: 24
                          41.75.49.0/24 maxlen: 24
                          41.75.50.0/24 maxlen: 24
                          41.75.51.0/24 maxlen: 24
                          41.75.52.0/24 maxlen: 24
                          41.75.53.0/24 maxlen: 24
                          41.75.54.0/24 maxlen: 24
                          41.75.55.0/24 maxlen: 24
                          41.75.56.0/24 maxlen: 24
                          41.75.57.0/24 maxlen: 24
                          41.75.58.0/24 maxlen: 24
                          41.75.59.0/24 maxlen: 24
                          41.75.60.0/24 maxlen: 24
                          41.75.61.0/24 maxlen: 24
                          41.75.62.0/24 maxlen: 24
                          41.75.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 12:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669EE9AF, serialNumber=F46171D43E28D8CBB70AD73D2947CD20096210DF
        Validity
            Not Before: May 12 14:23:06 2026 GMT
            Not After : May  5 14:23:06 2028 GMT
        Subject: CN=6a0337cf-e273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:44:b6:8d:0f:cf:39:3b:4d:2d:d6:03:ca:
                    a3:2f:0e:74:a5:c2:b1:1e:d2:d4:f4:a3:c0:a6:9d:
                    4d:f4:28:bb:88:99:1a:aa:04:a6:c4:2b:e1:2e:54:
                    30:2f:1d:1d:8f:c6:6d:ee:da:b0:9d:9a:c6:99:97:
                    b9:94:2f:31:6d:38:59:47:bd:ee:0a:fd:2f:e9:61:
                    b9:1e:96:b8:fc:82:c3:6b:ec:53:c9:f1:2a:a6:fc:
                    7c:72:cf:6b:db:32:5c:94:6d:56:a3:8d:aa:58:19:
                    9e:f2:8f:61:95:d9:af:30:2a:10:bb:3e:a1:36:fc:
                    ed:95:fa:8b:62:8c:48:60:e0:b1:db:28:e4:1d:d7:
                    13:af:11:a8:b0:e5:62:4c:37:f9:ee:0f:6e:19:f4:
                    9a:4d:39:0a:7e:f1:3b:bf:c4:c4:07:2c:da:1a:58:
                    31:4c:6b:a9:94:c4:b9:02:bb:f5:bb:c4:c6:84:aa:
                    2f:0b:42:67:7c:c7:37:88:b8:ad:9e:23:ac:50:e4:
                    0d:c5:4f:1f:11:56:c7:3e:b7:17:d3:f3:25:d8:d7:
                    68:18:42:43:4a:84:ce:bd:b2:fa:78:f9:22:70:52:
                    13:97:da:bd:1f:1d:82:1e:be:43:3b:2d:31:f8:a2:
                    c3:83:77:30:49:ab:cb:ee:1b:80:f7:ca:4d:01:b6:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2D:53:E8:C7:B8:A0:52:FD:B0:D4:C8:72:57:2E:89:7B:68:79:A2
            X509v3 Authority Key Identifier:
                keyid:F4:61:71:D4:3E:28:D8:CB:B7:0A:D7:3D:29:47:CD:20:09:62:10:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/1AC237244E0E11F186AE88FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.75.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:7a:a2:83:1e:df:e5:75:72:8b:27:53:88:e7:ba:4e:cb:17:
         a8:2d:1e:8e:c2:e8:f4:00:f5:3a:e7:f2:fb:bb:f1:2f:3a:29:
         5c:a1:60:52:04:a9:e6:d5:93:c3:3a:42:f1:35:52:87:68:03:
         05:7a:ae:7f:ae:12:ad:18:df:05:14:c2:26:28:88:7a:cd:cb:
         ac:ac:3f:4d:3e:7d:d0:73:c7:da:af:2f:c0:f8:44:f1:78:18:
         15:13:d5:79:ef:b3:f0:48:a1:25:75:b4:31:ac:bf:da:0d:eb:
         28:0b:91:10:2a:85:e8:e6:4c:fe:55:06:b4:8a:74:48:82:d2:
         62:6c:cc:a0:cd:0a:64:2d:20:8a:3a:fc:6d:46:66:23:e1:b7:
         27:d7:6a:8d:d6:72:8d:ca:5d:b1:ac:97:9a:e3:85:d8:98:23:
         f3:55:cb:3f:29:5b:5f:5a:5d:d4:33:cd:9f:8a:f5:c0:d6:a7:
         48:c7:d9:e6:c7:a6:a4:ef:fb:64:2e:d0:72:7d:97:59:26:26:
         b5:9d:4f:34:9f:35:b3:5a:01:12:45:91:0f:01:d2:ee:69:8d:
         47:85:89:50:f4:4e:1c:f5:3b:76:f1:42:ca:49:eb:5d:05:32:
         00:9f:ef:56:40:30:af:90:12:eb:6f:34:1d:a7:05:51:b3:67:
         73:5f:6e:67
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
OUVFOUFGMTEwLwYDVQQFEyhGNDYxNzFENDNFMjhEOENCQjcwQUQ3M0QyOTQ3Q0Qy
MDA5NjIxMERGMB4XDTI2MDUxMjE0MjMwNloXDTI4MDUwNTE0MjMwNlowGDEWMBQG
A1UEAxMNNmEwMzM3Y2YtZTI3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMuHRLaND885O00t1gPKoy8OdKXCsR7S1PSjwKadTfQou4iZGqoEpsQr4S5U
MC8dHY/Gbe7asJ2axpmXuZQvMW04WUe97gr9L+lhuR6WuPyCw2vsU8nxKqb8fHLP
a9syXJRtVqONqlgZnvKPYZXZrzAqELs+oTb87ZX6i2KMSGDgsdso5B3XE68RqLDl
Ykw3+e4Pbhn0mk05Cn7xO7/ExAcs2hpYMUxrqZTEuQK79bvExoSqLwtCZ3zHN4i4
rZ4jrFDkDcVPHxFWxz63F9PzJdjXaBhCQ0qEzr2y+nj5InBSE5favR8dgh6+Qzst
Mfiiw4N3MEmry+4bgPfKTQG2HGsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRYLVPo
x7igUv2w1MhyVy6Je2h5ojAfBgNVHSMEGDAWgBT0YXHUPijYy7cK1z0pR80gCWIQ
3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjlFRTkvQTFDQUM4RTg0REZCMTFGMUFGQ0VFMTBEQ0YxRDM4QjAvOUdGeDFE
NG8yTXUzQ3RjOUtVZk5JQWxpRU44LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvOUdGeDFENG8yTXUzQ3RjOUtVZk5JQWxpRU44LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjlFRTkvQTFDQUM4RTg0REZCMTFGMUFGQ0VFMTBEQ0Yx
RDM4QjAvMUFDMjM3MjQ0RTBFMTFGMTg2QUU4OEZEQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBClLMDANBgkqhkiG9w0BAQsF
AAOCAQEAsXqigx7f5XVyiydTiOe6TssXqC0ejsLo9AD1Oufy+7vxLzopXKFgUgSp
5tWTwzpC8TVSh2gDBXquf64SrRjfBRTCJiiIes3LrKw/TT590HPH2q8vwPhE8XgY
FRPVee+z8EihJXW0May/2g3rKAuRECqF6OZM/lUGtIp0SILSYmzMoM0KZC0gijr8
bUZmI+G3J9dqjdZyjcpdsayXmuOF2Jgj81XLPylbX1pd1DPNn4r1wNanSMfZ5sem
pO/7ZC7Qcn2XWSYmtZ1PNJ81s1oBEkWRDwHS7mmNR4WJUPROHPU7dvFCyknrXQUy
AJ/vVkAwr5AS6280HacFUbNnc19uZw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:19 2026 by rpki-client