Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1C2AF432873611F1A5EF6AF0CE1D38B0.roa
File: 1C2AF432873611F1A5EF6AF0CE1D38B0.roa (raw, json)
Hash identifier: 8CqPPJ3OoibdKA1X9TksqoIjZTwH8UsibqosgodYGuk=
Subject key identifier: C1:02:F1:FD:68:3E:EC:AD:4C:54:F8:05:37:FB:D3:33:01:42:72:48
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BDE
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1C2AF432873611F1A5EF6AF0CE1D38B0.roa
Signing time: Fri 24 Jul 2026 08:03:10 +0000
ROA not before: Fri 24 Jul 2026 08:03:06 +0000
ROA not after: Thu 24 Jul 2036 08:03:06 +0000
asID: 36916
IP address blocks: 41.180.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038 (0xbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 08:03:06 2026 GMT
Not After : Jul 24 08:03:06 2036 GMT
Subject: CN=6a631c3e-7a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:e7:7a:34:68:ca:57:71:9c:ef:30:b6:a0:
37:b2:f1:f4:0d:4e:04:a4:e6:3b:3b:a4:f9:de:77:
8a:de:9a:d2:1f:a4:3a:6a:8e:1c:4e:8d:4c:70:c5:
83:ad:35:d6:12:87:8f:16:02:46:89:35:96:29:1a:
44:8d:a2:10:f9:19:41:44:2b:76:eb:62:1b:b3:ed:
a0:0f:5b:0f:e4:d1:a3:d9:44:59:67:24:de:2c:c6:
f3:2c:b7:dd:02:3a:10:04:a3:44:46:09:7c:20:bd:
82:f4:6f:06:59:59:43:8a:46:05:48:19:4d:a2:fd:
84:9c:d6:12:31:1b:a5:b3:97:ff:f9:1f:fc:8c:d8:
b8:07:2f:93:96:7a:28:53:39:8f:2d:2c:95:21:4f:
f4:d7:d8:54:ae:76:cb:f0:f6:76:2a:d8:96:0b:4e:
dc:71:22:fa:3b:a6:f3:67:69:c1:2c:1e:df:2f:53:
83:49:b3:d9:45:3b:1f:33:f9:5c:5b:35:cd:b6:68:
83:b6:10:74:79:c1:42:c2:a6:02:6b:cb:9a:7d:79:
fa:a7:4c:1d:1a:95:9c:60:2a:51:81:64:d6:5e:cd:
06:24:18:5e:28:f7:8a:be:21:67:aa:13:ad:7f:5d:
4b:3b:5c:a8:13:04:91:e4:a7:84:08:05:d5:98:df:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:02:F1:FD:68:3E:EC:AD:4C:54:F8:05:37:FB:D3:33:01:42:72:48
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1C2AF432873611F1A5EF6AF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.104.0/21
Signature Algorithm: sha256WithRSAEncryption
07:63:ae:0c:81:89:31:b1:63:d8:05:7f:cc:68:b7:ab:bb:ab:
d1:f5:d1:f4:6d:26:c4:00:de:72:2c:f1:52:bf:88:59:65:95:
8b:17:3c:ee:3b:46:5d:51:a6:30:0c:48:34:17:af:bf:ff:44:
7c:b9:8b:30:5e:9c:d0:ca:1e:52:56:17:0d:aa:0e:8e:04:51:
76:e7:00:c4:23:22:69:c1:e6:ae:e6:bb:22:5d:aa:38:25:c2:
fe:d5:b8:07:34:22:bc:62:ce:90:44:be:38:03:e3:2b:cb:3b:
31:ea:6b:13:d7:d6:98:6c:41:cb:2d:0b:e8:9b:3c:95:b0:40:
02:03:37:10:54:0c:bf:10:52:a8:64:38:2e:af:cd:fd:cf:bb:
e4:34:c1:71:75:06:a0:97:89:96:b9:83:c3:90:37:e6:48:82:
f0:87:12:b4:c3:e3:77:bc:4c:33:6b:aa:49:7e:47:d9:84:0c:
5d:31:1e:c0:e7:d4:0a:e6:7f:1d:51:68:54:4f:6f:2a:3a:7f:
64:97:9c:35:fe:28:2e:91:92:fb:79:1c:6d:0e:23:6e:21:93:
dc:d0:74:da:02:ff:3d:f6:81:95:79:88:98:d4:c0:db:be:39:
36:9b:c2:d8:60:d0:7a:26:4e:30:11:37:93:6d:fc:82:ac:cf:
81:ea:38:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:13 2026 by rpki-client