Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/3635E450925C11F18117B1D2CE1D38B0.roa
File:                     3635E450925C11F18117B1D2CE1D38B0.roa (raw, json)
Hash identifier:          iCYWMIA40nXAJhmYXEJkiGlAPkICuPys32uwa8xVrkk=
Subject key identifier:   89:AD:8B:8F:47:F9:0F:AC:15:A8:44:A2:BB:68:8C:13:31:C5:2E:95
Certificate issuer:       /CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
Certificate serial:       066A
Authority key identifier: 94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/3635E450925C11F18117B1D2CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 12:33:37 +0000
ROA not before:           Fri 07 Aug 2026 12:33:33 +0000
ROA not after:            Tue 13 Apr 2027 12:33:33 +0000
asID:                     22750
IP address blocks:        41.66.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F2FAAF, serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
        Validity
            Not Before: Aug  7 12:33:33 2026 GMT
            Not After : Apr 13 12:33:33 2027 GMT
        Subject: CN=6a75d0a1-c316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:f8:a7:97:e6:fe:3f:a3:83:53:e3:85:1b:
                    ef:2b:b9:31:8c:af:c4:5d:13:eb:a9:7b:5f:d3:58:
                    ce:8b:46:ee:a9:79:3e:aa:6a:cd:a7:bc:76:d7:1b:
                    05:85:01:86:1f:cf:e3:7b:c2:b9:30:c0:59:ac:5a:
                    7f:ff:ff:13:66:e2:fe:50:49:c4:35:1d:d6:58:55:
                    5f:fa:2f:b7:34:b5:87:ba:e9:fe:5c:af:29:d0:49:
                    b3:52:ed:0f:41:f8:77:3c:8e:63:52:cc:76:b7:cf:
                    46:ab:44:94:1f:c8:b0:6d:a4:8b:d8:4e:2e:c5:7a:
                    26:07:09:e2:9f:9e:7f:22:07:49:c1:32:2a:e1:bb:
                    4b:ea:e7:14:62:5b:06:33:1b:39:4f:a8:51:08:ef:
                    e1:ca:c2:af:4f:6b:34:d4:30:d8:36:8f:8a:b8:e5:
                    ce:5d:d4:c8:3a:5d:3c:f5:0c:c9:cd:69:7b:e6:92:
                    ca:d9:50:62:81:91:10:50:0f:02:f4:6e:c6:38:8d:
                    35:0e:76:bd:c3:79:b5:0e:a5:d8:0c:7e:76:b7:cd:
                    b0:36:81:4d:72:12:9f:d9:ac:00:ee:2c:75:23:66:
                    e9:cb:f0:87:bc:bc:7d:25:7c:af:12:25:90:a6:05:
                    55:c1:da:f3:07:d6:99:c8:28:fe:c5:c8:fb:de:4b:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AD:8B:8F:47:F9:0F:AC:15:A8:44:A2:BB:68:8C:13:31:C5:2E:95
            X509v3 Authority Key Identifier:
                keyid:94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/3635E450925C11F18117B1D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.66.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:dd:da:02:98:3d:64:fe:aa:01:4a:bb:7e:fc:d5:63:fb:53:
         d9:cf:2f:eb:78:76:77:8e:8a:b7:27:c5:c8:51:0e:6f:25:b8:
         8f:c8:51:ba:30:30:56:84:ed:7a:2f:15:65:27:a4:c5:6d:b9:
         b1:53:2e:e7:c0:1f:47:13:b9:ab:e2:52:a9:2d:25:1b:20:be:
         b2:98:f9:c3:aa:e2:49:19:35:45:9d:72:98:52:da:f9:ae:32:
         29:09:a2:e6:76:e8:b1:d5:e3:4e:4d:bf:7d:4d:aa:1f:22:5d:
         b4:aa:ac:fd:de:30:62:87:20:15:ac:c7:d2:83:32:60:af:d0:
         a3:56:05:12:4a:88:7a:ef:6c:3d:49:29:eb:92:5c:96:55:88:
         3c:55:12:84:2c:08:68:92:ad:41:7e:e4:ee:5e:6a:16:4c:cd:
         6b:02:6a:ba:9b:d8:7c:7e:39:d7:9f:80:3b:48:8a:02:f1:4e:
         1d:7d:41:e2:72:5d:cc:e2:b1:bb:b9:cb:3c:74:f9:b4:f3:d5:
         49:23:17:4b:fc:b6:43:b6:c3:f8:9c:b0:d9:33:b7:8e:29:5a:
         a6:a6:18:6a:49:86:bd:b6:29:be:97:b7:36:41:0a:21:b9:d6:
         e9:04:35:ae:bd:9e:79:70:18:0a:77:ae:a0:57:e2:54:57:57:
         cb:80:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----