Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1867AFE4875811F19AF1D9BECE1D38B0.roa
File: 1867AFE4875811F19AF1D9BECE1D38B0.roa (raw, json)
Hash identifier: Zb28wX72OUQPU/F7bRS7+hWcTmmAVfloKhxnv4WA38w=
Subject key identifier: E2:77:D6:EF:A6:4F:AB:BC:AF:3F:67:62:4E:A1:BE:31:5B:19:B8:F8
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C32
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1867AFE4875811F19AF1D9BECE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:06:26 +0000
ROA not before: Fri 24 Jul 2026 12:06:22 +0000
ROA not after: Thu 24 Jul 2036 12:06:22 +0000
asID: 36916
IP address blocks: 41.180.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3122 (0xc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:06:22 2026 GMT
Not After : Jul 24 12:06:22 2036 GMT
Subject: CN=6a635542-7c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:ca:0d:5a:35:7d:58:d0:0d:ae:22:c0:86:
91:fe:49:d0:a0:3c:88:43:e8:ed:45:13:b5:84:78:
7a:06:3c:ab:51:cf:8b:6d:b7:af:0f:55:c9:bf:83:
d8:7e:fd:af:37:46:40:38:e7:ec:20:30:1c:17:00:
2c:99:d4:2f:fd:7e:2b:7f:9f:08:82:2d:d2:81:39:
3f:19:99:9b:17:f0:11:c9:ca:53:80:ac:4a:0e:ac:
75:32:75:1b:f2:e1:82:a9:c7:ea:88:9b:87:fb:df:
98:5f:b0:84:82:4a:1d:e8:3e:54:c2:af:82:48:2a:
9b:ee:43:6f:e4:07:2b:e9:3d:02:e8:b1:67:d2:1f:
84:5c:be:4c:bf:1e:d3:db:b6:78:2e:38:57:e5:20:
3e:3c:74:0a:88:4b:fa:14:c4:d6:15:26:32:b3:1b:
bf:08:b6:f5:17:b6:0b:d6:fa:96:eb:ca:73:a7:bf:
6a:4d:25:c5:b2:24:a3:bc:95:1f:ff:c6:a5:a8:87:
37:50:ab:d7:0e:53:d6:54:56:75:47:de:6c:c1:37:
ed:be:a1:66:ec:47:2b:91:41:93:bd:8d:21:44:aa:
09:9a:a5:28:49:b1:8b:01:d0:79:15:40:c4:2a:13:
66:1c:2c:03:b8:b1:94:27:25:f5:c6:26:aa:5c:9d:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:D6:EF:A6:4F:AB:BC:AF:3F:67:62:4E:A1:BE:31:5B:19:B8:F8
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1867AFE4875811F19AF1D9BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:58:e6:69:2b:49:ad:65:30:4f:d7:91:80:b6:79:da:56:bd:
8b:4e:15:d5:dc:01:b1:d0:05:5a:ce:7b:06:8a:0e:22:17:60:
f7:b1:62:0b:0c:24:0c:4e:ef:d1:c5:02:f3:47:df:04:e5:ef:
cb:49:bd:ba:23:04:db:06:78:10:5a:34:81:2d:01:93:bf:fb:
28:6b:b0:b8:3d:6e:0c:19:e0:36:52:4b:be:ec:ba:60:91:0a:
8b:40:c6:87:a9:73:f4:35:76:4e:41:09:3b:a4:8d:60:f3:ae:
bd:be:7d:37:b2:09:f6:86:1a:b7:df:3d:21:d7:30:2f:9a:4b:
72:3e:76:55:25:3a:eb:b1:d0:5d:1b:56:d0:18:60:17:4a:45:
c6:59:c8:8b:fc:a6:44:8d:8b:4d:88:97:4d:e8:7d:23:e1:fd:
0b:5b:c7:e3:27:b6:b7:cd:f9:99:3b:63:47:50:fd:9f:0d:e4:
2f:d7:fd:b6:8e:c6:32:8c:87:d2:49:70:c2:16:af:b9:eb:49:
1a:dc:a1:15:b3:00:06:42:16:16:f7:2e:68:ef:64:05:3d:92:
b8:0b:6f:49:eb:b1:3f:4d:8b:f3:6b:c9:b8:0b:cf:49:af:44:
d7:e5:c4:d1:be:7b:82:92:2a:fb:69:be:66:d6:af:d3:6d:35:
a0:cf:a5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:09 2026 by rpki-client