Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/33A143F8875611F184E472B2CE1D38B0.roa
File: 33A143F8875611F184E472B2CE1D38B0.roa (raw, json)
Hash identifier: Pwxn2WjSDUuVbdp2r1iXNEPH/iEBzjwjlubetn52a9E=
Subject key identifier: D4:A0:00:DF:C8:60:B1:5C:50:92:EC:9A:4F:9F:32:7A:AC:E7:D1:E4
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C1A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/33A143F8875611F184E472B2CE1D38B0.roa
Signing time: Fri 24 Jul 2026 11:52:53 +0000
ROA not before: Fri 24 Jul 2026 11:52:49 +0000
ROA not after: Thu 24 Jul 2036 11:52:49 +0000
asID: 36916
IP address blocks: 41.180.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 11:52:49 2026 GMT
Not After : Jul 24 11:52:49 2036 GMT
Subject: CN=6a635215-8f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:26:35:1f:5f:09:d7:e8:a5:6b:e1:86:2f:
af:76:be:c2:80:89:88:7d:26:36:67:67:ef:29:a7:
db:48:be:7a:a5:f5:ad:52:ad:44:83:ce:d0:f1:2f:
85:50:70:73:d8:2e:06:b8:23:66:24:b9:91:6d:e4:
fa:db:46:80:89:25:f1:23:57:00:4c:b5:38:8c:dc:
38:7f:44:a9:38:57:c5:74:25:32:bc:6f:c3:75:1f:
5c:65:d8:fb:6d:d8:40:93:1c:02:bf:8b:f6:e5:11:
ab:b9:33:68:ed:34:ff:7f:70:8d:c7:ee:b2:f5:7a:
d4:7d:57:b6:50:19:e4:f0:a5:e0:19:80:ba:39:de:
a6:b1:9f:72:64:06:19:d4:7a:4c:0a:12:a5:61:05:
bd:d5:95:8d:71:4a:b5:d5:33:ee:87:fb:5e:f8:5b:
1b:32:09:1b:db:7d:81:9a:ff:04:c3:df:a6:e6:6b:
3b:6b:35:46:f9:37:54:1f:43:87:e7:b4:db:6c:06:
99:e8:1e:82:0d:4f:c4:13:2c:46:c7:c5:b1:2b:b4:
f9:a0:35:dd:e1:84:dd:85:ed:d6:75:91:fd:4a:65:
de:63:62:f2:ab:ef:14:84:54:42:97:ae:26:fb:3c:
d6:7c:44:bf:f4:5a:98:56:b6:29:ec:7a:73:d9:a9:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:00:DF:C8:60:B1:5C:50:92:EC:9A:4F:9F:32:7A:AC:E7:D1:E4
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/33A143F8875611F184E472B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.0.0/20
Signature Algorithm: sha256WithRSAEncryption
27:eb:ab:aa:28:b4:e9:70:3b:01:50:04:a0:71:8e:3d:58:5b:
bc:e7:45:c0:2d:d8:bd:c1:da:c8:94:99:37:33:ce:0f:b1:b0:
f6:04:45:83:18:84:18:83:0f:08:f3:dc:b6:45:17:13:f0:56:
98:17:24:ff:9f:90:0d:4e:d9:c3:18:a8:02:0c:a3:ec:ee:0a:
47:ef:9a:3f:4c:10:2f:a4:61:e2:bf:e0:34:4b:f1:60:f9:39:
54:8b:72:ec:00:dd:4e:3e:91:35:fc:60:28:cf:b1:fc:26:03:
77:ef:0c:ff:64:9b:67:46:e4:f1:17:0a:b2:87:bd:ed:86:ce:
23:ee:fd:41:54:42:60:76:3a:46:fe:8a:04:b5:00:01:c0:80:
db:e8:ea:f8:14:c2:35:ff:fc:5c:23:34:da:3c:11:13:5a:74:
ed:d1:f5:de:e2:7e:95:36:d8:fe:6d:5a:97:3b:78:16:82:cf:
cf:ba:36:67:f4:1a:07:27:6d:29:30:31:41:4f:cc:86:b3:13:
80:a4:0b:59:6c:2b:b0:c5:04:0a:c3:cd:da:e2:07:4a:6c:9f:
2c:cd:4b:5d:f5:ca:e9:35:02:fd:fb:6d:ce:ee:4c:5c:a1:9a:
14:cb:f9:f0:4f:58:2e:1d:c8:18:7d:28:dd:ed:dc:a0:76:e9:
ec:20:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:08 2026 by rpki-client