Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/D63780C66E3011F1966BCAB1CE1D38B0.roa
File: D63780C66E3011F1966BCAB1CE1D38B0.roa (raw, json)
Hash identifier: H2PuTqMDK+XmhiiIA5H4ju2xB0NtOk1fvK11ma5Ehjg=
Subject key identifier: 52:7A:CF:BC:CE:BD:14:25:0E:56:C8:4B:3F:49:88:32:C4:E2:16:85
Certificate issuer: /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial: 0659
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/D63780C66E3011F1966BCAB1CE1D38B0.roa
Signing time: Mon 22 Jun 2026 11:52:26 +0000
ROA not before: Mon 22 Jun 2026 11:52:20 +0000
ROA not after: Sun 22 Jun 2031 11:52:20 +0000
asID: 37008
IP address blocks: 41.223.232.0/22 maxlen: 24
102.68.100.0/22 maxlen: 24
2c0f:ec58::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1625 (0x659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654E24AF, serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Validity
Not Before: Jun 22 11:52:20 2026 GMT
Not After : Jun 22 11:52:20 2031 GMT
Subject: CN=6a3921fa-63bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:b1:a8:0d:b8:13:ce:5d:26:fd:09:58:d4:
d2:65:4b:ff:42:04:49:c5:9c:4a:c3:06:62:0e:4a:
88:d4:43:60:cb:d0:c7:9b:cd:e9:1b:65:f9:55:e8:
49:9c:d6:37:54:d1:09:0b:fa:65:e5:15:fb:53:ce:
bf:b3:d9:20:97:44:56:69:cf:c2:17:94:a2:cc:e4:
d3:eb:81:c4:53:5c:6a:ca:c8:41:ba:99:45:26:c4:
a7:72:c2:9f:04:66:b2:4b:f2:15:f7:ed:0c:e6:6e:
98:dc:a8:9c:c9:f2:21:44:8d:61:c5:33:6d:f6:5d:
98:2f:b5:49:b9:29:d0:66:4f:8c:c1:6f:4c:0e:49:
5d:6b:58:c2:67:11:78:f0:1f:a0:83:9b:24:03:29:
61:4a:c4:49:13:80:dd:f5:f6:54:33:eb:8f:11:15:
b5:7e:67:41:2c:ea:8b:5b:f5:05:d1:42:dd:f1:0f:
87:82:5b:5f:15:69:ac:a7:67:54:33:dd:eb:de:1d:
10:6a:a9:2f:64:26:ea:4a:6d:53:4f:d9:d6:07:53:
6b:82:c8:41:2a:a0:1e:fa:e6:c6:4a:99:7f:13:22:
91:11:4a:65:41:e6:50:d8:53:29:3e:96:e6:0c:9f:
8d:29:09:df:bd:55:1a:38:38:3a:36:b7:0b:60:6b:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:CF:BC:CE:BD:14:25:0E:56:C8:4B:3F:49:88:32:C4:E2:16:85
X509v3 Authority Key Identifier:
keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/D63780C66E3011F1966BCAB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.232.0/22
102.68.100.0/22
IPv6:
2c0f:ec58::/32
Signature Algorithm: sha256WithRSAEncryption
5d:1f:dc:5d:4f:56:a3:5b:12:48:87:42:9e:76:db:51:fc:26:
ab:cc:8d:ef:39:d9:77:59:6a:4f:c2:55:6d:91:16:94:e2:6a:
c9:89:2f:16:44:29:08:a1:60:6a:f7:49:50:2e:38:b2:5d:ef:
24:81:75:c1:3a:ad:ed:95:f7:2a:42:f8:7a:e9:84:4e:e6:79:
28:df:db:79:4b:9f:5c:1e:1f:dd:d0:4a:5e:a3:ef:22:1b:8d:
df:c0:14:46:3a:77:bf:9b:42:18:51:4f:3f:76:c6:a0:10:d4:
b7:57:30:0a:aa:af:f7:3e:3d:34:60:dd:2d:1b:8e:32:11:fd:
99:a0:51:1e:b6:08:79:99:cf:11:51:7c:4f:40:67:78:d1:e0:
1e:27:38:9c:5b:05:75:bf:5b:57:d8:65:80:27:1b:9e:7d:4f:
98:81:05:55:76:0e:07:bd:98:8c:96:5e:65:7a:fd:ec:dd:57:
8e:c9:ea:e1:4b:e5:5a:67:f5:51:7d:52:ed:eb:5a:76:b4:fd:
f3:96:f7:fb:00:d2:d5:c3:f8:04:2e:22:ad:46:7d:2b:94:4a:
b2:2c:5e:cb:db:c8:0d:c7:77:12:c3:ca:03:28:fb:30:d0:fd:
36:21:3a:84:3d:fa:5d:14:66:49:80:83:2d:d1:6c:61:e5:5d:
52:10:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:47:07 2026 by rpki-client