Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/04A8058E875911F19C1A1AC3CE1D38B0.roa
File: 04A8058E875911F19C1A1AC3CE1D38B0.roa (raw, json)
Hash identifier: SOyPrIpk0QuzN8ojt3hVBgMkgblpL9dzxxb4JWfyuyY=
Subject key identifier: F7:FC:8B:13:C3:1F:DE:60:E5:8D:ED:13:8B:4F:9B:CA:95:32:71:7A
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C42
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/04A8058E875911F19C1A1AC3CE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:13:03 +0000
ROA not before: Fri 24 Jul 2026 12:12:59 +0000
ROA not after: Thu 24 Jul 2036 12:12:59 +0000
asID: 36916
IP address blocks: 41.221.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:12:59 2026 GMT
Not After : Jul 24 12:12:59 2036 GMT
Subject: CN=6a6356cf-0be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:f8:45:2c:c7:76:ae:fa:61:01:17:92:f1:
5e:d3:0f:27:dd:2b:df:8d:2e:c6:c2:4f:04:13:2f:
7f:cb:d0:2d:3b:1a:84:2b:99:e4:46:08:1c:8d:3e:
9a:a3:29:3f:18:74:60:e8:5f:69:9f:e9:43:8f:ff:
38:53:8a:f7:5e:e7:a1:d7:01:25:d4:1e:e6:fb:23:
5e:03:7d:b1:8b:92:43:eb:b1:2c:bb:53:00:31:83:
f4:cc:cc:10:0b:05:31:df:92:d8:6a:79:5e:e7:8b:
9b:3b:9b:39:8a:65:ef:b6:98:55:74:87:b7:33:d6:
b4:dd:82:65:63:eb:09:0e:95:33:cf:c6:2a:78:d6:
8f:a6:b1:da:65:a7:b0:1d:48:cd:c6:d5:99:1f:3c:
e1:03:d1:46:24:55:66:a1:0b:db:d5:86:40:ee:e6:
99:14:73:50:0a:0e:5d:47:ac:58:74:39:5a:12:62:
7b:56:2f:09:04:62:a1:9c:30:22:cb:fb:f4:04:a4:
07:36:30:d9:bc:24:40:75:60:f1:84:cf:4a:d9:cc:
c8:d7:22:b0:fe:fe:25:8d:1c:39:1d:5a:9d:5e:84:
9e:17:8b:c1:82:bf:f7:a0:a5:34:17:42:8a:15:e9:
57:a6:d2:26:ca:27:24:6a:26:e9:d8:3c:ec:17:f1:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FC:8B:13:C3:1F:DE:60:E5:8D:ED:13:8B:4F:9B:CA:95:32:71:7A
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/04A8058E875911F19C1A1AC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.235.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d7:75:06:c4:66:4f:b1:40:84:00:cf:89:7d:2f:0d:a3:be:
27:a7:ce:07:6b:c4:5e:11:3d:72:97:dc:61:98:d3:07:8d:69:
cd:ce:45:a4:5b:31:5e:ec:71:43:9d:f6:80:85:4c:05:e8:42:
37:e2:e7:02:cd:95:f4:35:df:18:95:bf:9e:a9:9f:c2:1b:aa:
5a:5d:0c:21:a5:9d:d0:bf:3c:13:0a:7e:6f:19:54:70:be:7f:
8b:59:db:02:4d:83:31:79:9e:ee:7a:55:9a:98:5b:c9:4d:71:
42:b2:58:ea:4b:80:61:4f:5c:7a:b5:2e:08:8d:58:6b:87:d6:
e1:ba:bf:41:c3:66:c4:fa:dd:a6:e8:43:99:58:ae:11:e0:6e:
d5:0f:bb:94:43:10:8e:b7:ce:a1:36:53:6e:b3:22:12:0c:b9:
95:10:6d:4d:d5:94:a0:39:14:dd:2b:a6:d1:ab:5b:48:97:fe:
88:12:0e:2b:72:7b:00:f6:8e:bd:9b:e0:26:5c:2a:9b:e2:09:
c0:fc:60:ef:46:05:8c:40:09:9e:46:f9:4c:32:af:a6:f2:fe:
12:56:37:dd:18:b2:bf:8d:28:51:73:dc:37:e1:ae:35:e8:3a:
58:c7:6b:e2:bd:62:3c:f4:11:33:f7:14:a5:a3:28:b5:ab:2f:
f5:f7:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:47:16 2026 by rpki-client