Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/2CFF187E875911F18B48FDC4CE1D38B0.roa
File: 2CFF187E875911F18B48FDC4CE1D38B0.roa (raw, json)
Hash identifier: ew8/Ng/RjjQ2IC7JNfO8dsMCBIJvz9h9rpvqeM1K/Oo=
Subject key identifier: 2A:59:73:5E:3C:C4:EC:40:1B:42:08:5E:E1:F6:28:DF:E5:44:C1:FE
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C44
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/2CFF187E875911F18B48FDC4CE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:14:10 +0000
ROA not before: Fri 24 Jul 2026 12:14:06 +0000
ROA not after: Thu 24 Jul 2036 12:14:06 +0000
asID: 36916
IP address blocks: 41.221.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:14:06 2026 GMT
Not After : Jul 24 12:14:06 2036 GMT
Subject: CN=6a635712-7e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:3b:d8:e1:b5:1d:c8:ef:83:26:cd:4f:31:
3a:15:ad:d1:5e:7f:12:2c:32:30:5e:62:25:54:e2:
82:7e:14:aa:66:cf:85:06:40:6b:c4:e2:2d:75:db:
50:3f:f4:5a:cc:d8:ce:71:b8:41:5b:ef:ba:fa:92:
fe:b2:e9:59:3b:14:07:af:9a:de:ff:d3:cc:ae:07:
65:6f:06:27:b7:da:5a:99:d0:8f:81:ef:5e:01:7a:
46:e6:db:a5:37:52:5b:d1:10:53:ee:b1:ff:15:21:
f5:12:6e:79:d9:e3:dc:3a:12:8f:05:55:19:f2:20:
b6:f9:ff:13:2b:11:74:68:b6:92:4b:c1:54:8c:ca:
7e:08:d9:ba:7b:c8:bd:f5:aa:0c:2c:db:ad:42:67:
3b:7a:a6:2b:bd:eb:12:cb:05:81:33:ef:97:84:43:
7c:fc:4c:bf:d4:61:72:a1:be:be:e3:4c:93:56:a4:
39:93:16:ec:8f:65:22:57:c4:24:21:d8:7c:d3:cb:
be:b9:f7:24:17:b0:d7:0f:8f:f1:10:6b:27:ec:c3:
d1:48:be:c2:6e:ad:0c:81:7b:0f:79:c3:81:6e:04:
c0:7d:de:a6:a6:85:31:16:fd:c2:b1:db:29:a6:02:
ba:cf:dd:c4:64:54:fd:d5:7d:60:1b:d4:93:8c:2d:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:73:5E:3C:C4:EC:40:1B:42:08:5E:E1:F6:28:DF:E5:44:C1:FE
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/2CFF187E875911F18B48FDC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.236.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:6c:74:0a:59:a4:a8:45:b4:a0:57:1e:97:74:0f:7a:5a:f4:
02:6d:47:9f:2a:bd:89:70:ca:1c:d7:10:ac:e9:c5:8e:3c:57:
12:e5:8e:10:9b:2d:ad:c2:10:46:61:56:84:ca:f1:ad:24:d2:
30:ff:be:33:6c:15:0e:67:00:a5:bc:48:70:90:9c:6c:02:dd:
77:8f:c1:ac:59:b3:1a:0f:b1:9b:e7:82:25:83:47:22:b9:68:
c7:8c:f1:e1:e1:25:ce:93:68:03:d6:49:32:fa:4b:2d:b1:7a:
51:77:e9:6f:f9:50:bd:8d:f0:8f:db:b2:ed:66:c7:09:d1:37:
7a:ad:75:3a:23:70:4d:c1:68:c5:06:77:6d:31:c7:a6:6e:ae:
5b:be:f0:44:44:2f:16:86:ee:15:88:91:88:d9:63:c3:d7:34:
ff:c5:a3:88:d9:69:84:f5:1d:1c:e2:fd:0d:a3:65:50:98:f8:
5e:ca:a9:78:90:e4:7e:43:81:75:ae:1a:cb:7e:ba:25:cb:21:
d8:3d:42:2b:68:1f:17:43:9c:74:d1:f6:ea:6b:dc:71:36:20:
eb:46:e5:c4:32:25:5d:4d:c3:b0:24:b0:4b:58:1d:98:dc:06:
0e:37:b0:58:df:92:cc:bd:1e:5c:15:dc:0f:5a:3f:44:2a:21:
fa:cf:ae:4d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjQxMjE0MDZaFw0zNjA3MjQxMjE0MDZaMBgxFjAU
BgNVBAMTDTZhNjM1NzEyLTdlMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2/zvY4bUdyO+DJs1PMToVrdFefxIsMjBeYiVU4oJ+FKpmz4UGQGvE4i11
21A/9FrM2M5xuEFb77r6kv6y6Vk7FAevmt7/08yuB2VvBie32lqZ0I+B714Bekbm
26U3UlvREFPusf8VIfUSbnnZ49w6Eo8FVRnyILb5/xMrEXRotpJLwVSMyn4I2bp7
yL31qgws261CZzt6piu96xLLBYEz75eEQ3z8TL/UYXKhvr7jTJNWpDmTFuyPZSJX
xCQh2HzTy7659yQXsNcPj/EQayfsw9FIvsJurQyBew95w4FuBMB93qamhTEW/cKx
2ymmArrP3cRkVP3VfWAb1JOMLbtVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKllz
XjzE7EAbQghe4fYo3+VEwf4wHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzJDRkYxODdFODc1OTExRjE4QjQ4RkRDNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEp3ewwDQYJKoZIhvcNAQEL
BQADggEBAA9sdApZpKhFtKBXHpd0D3pa9AJtR58qvYlwyhzXEKzpxY48VxLljhCb
La3CEEZhVoTK8a0k0jD/vjNsFQ5nAKW8SHCQnGwC3XePwaxZsxoPsZvngiWDRyK5
aMeM8eHhJc6TaAPWSTL6Sy2xelF36W/5UL2N8I/bsu1mxwnRN3qtdTojcE3BaMUG
d20xx6Zurlu+8ERELxaG7hWIkYjZY8PXNP/Fo4jZaYT1HRzi/Q2jZVCY+F7KqXiQ
5H5DgXWuGst+uiXLIdg9QitoHxdDnHTR9upr3HE2IOtG5cQyJV1Nw7AksEtYHZjc
Bg43sFjfksy9HlwV3A9aP0QqIfrPrk0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:55 2026 by rpki-client