Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/01FD4550874B11F198D31AEECE1D38B0.roa
File: 01FD4550874B11F198D31AEECE1D38B0.roa (raw, json)
Hash identifier: 17rDY0phsDJy5A9zh4VRLsNsMaFFDieefCl7M0fbqGQ=
Subject key identifier: 95:00:BB:57:AB:11:6A:68:55:D2:18:F2:9D:C7:D2:0F:DB:29:4F:81
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BE8
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/01FD4550874B11F198D31AEECE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:32:45 +0000
ROA not before: Fri 24 Jul 2026 10:32:41 +0000
ROA not after: Thu 24 Jul 2036 10:32:41 +0000
asID: 36916
IP address blocks: 41.180.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3048 (0xbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:32:41 2026 GMT
Not After : Jul 24 10:32:41 2036 GMT
Subject: CN=6a633f4d-bdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:b3:3d:43:dd:ef:fd:fa:a9:10:7f:2b:04:
d8:10:93:11:72:ac:71:11:c6:85:47:e7:5c:6d:be:
00:ff:0f:3e:0f:68:58:20:97:70:17:11:46:ac:20:
10:e1:39:d6:bb:ff:f5:da:66:6e:65:c3:49:5f:f1:
da:76:4a:2c:90:f5:b1:0f:d8:3e:f5:c2:ac:22:31:
33:e2:9d:25:ff:13:52:92:ef:d4:d5:ac:57:d0:31:
67:33:61:ac:7a:07:12:93:92:67:74:ab:31:c2:8c:
bc:ac:7e:c5:51:3d:2d:35:fd:bf:53:4a:c2:23:ef:
cd:d2:0b:35:4b:94:4c:39:29:fa:72:81:01:62:e6:
c7:fe:21:2e:80:6d:61:9d:a6:29:1f:ec:e3:67:86:
94:7a:b1:45:67:c3:81:a0:c8:f5:d3:a0:13:2e:72:
27:69:8d:1f:4f:d8:ef:e1:dd:00:00:2c:68:d5:2c:
00:62:aa:bd:85:01:93:74:53:05:d7:d5:4d:e0:76:
98:f7:6f:d5:56:ef:07:c3:40:54:73:eb:78:2a:81:
7a:29:f8:b8:92:d4:3b:74:c4:19:6c:e6:3a:7a:76:
10:c3:6c:95:32:8a:c5:f3:bb:44:ee:43:ce:0e:67:
5d:78:3b:d2:73:cc:a5:60:e4:dc:0f:08:17:bc:5d:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:BB:57:AB:11:6A:68:55:D2:18:F2:9D:C7:D2:0F:DB:29:4F:81
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/01FD4550874B11F198D31AEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.0.0/22
Signature Algorithm: sha256WithRSAEncryption
47:4b:09:d5:81:4f:28:00:db:64:1c:bd:01:b2:d4:e6:c5:8d:
9b:39:62:40:fb:e5:51:90:17:65:87:89:d1:3d:7a:70:8b:2b:
bf:1f:5d:88:47:a2:e9:30:ea:a6:1d:99:ad:3e:9d:53:03:14:
a2:b7:b6:c9:ac:9e:d5:33:7b:b3:58:a8:b4:d6:bd:f4:94:b2:
95:6c:21:85:00:af:2b:f0:c7:8b:21:28:41:1c:67:f4:e9:f2:
ac:14:bb:49:e7:8d:c6:45:fb:2e:9a:7a:60:dc:4e:1b:d3:2e:
aa:7b:60:44:23:ed:3f:90:0a:91:7a:18:6a:e5:f7:be:05:e8:
40:dc:28:bc:8d:e0:c1:2a:3b:02:02:33:79:77:af:c0:12:39:
54:b4:dc:50:3d:be:af:99:02:b9:ef:b7:b5:b7:7b:35:be:ca:
88:e6:26:b2:91:59:dc:3b:b7:4d:0c:19:4a:ef:80:eb:93:1f:
3a:2f:e5:06:6a:1e:5e:6a:43:8f:c6:e0:d5:3f:bf:f9:91:07:
8e:fd:1a:d9:16:b8:dc:35:d8:79:6b:71:73:94:8b:98:59:47:
6a:99:cd:f7:5a:64:54:62:ea:ed:38:0a:1d:78:93:27:bf:19:
2b:1d:46:c0:af:ef:9b:17:67:8e:88:c1:28:aa:91:76:ac:d1:
3d:8f:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:03 2026 by rpki-client