Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/33BEA8EC875811F18936E5BECE1D38B0.roa
File: 33BEA8EC875811F18936E5BECE1D38B0.roa (raw, json)
Hash identifier: z7GXHq5BeNmpD5imYQ7R5wQDIa0pdd7L6/KzMdGnNlY=
Subject key identifier: C4:26:13:72:1E:07:2F:D5:47:1C:B8:3D:F2:3C:3F:F7:CA:67:03:76
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C34
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/33BEA8EC875811F18936E5BECE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:07:12 +0000
ROA not before: Fri 24 Jul 2026 12:07:08 +0000
ROA not after: Thu 24 Jul 2036 12:07:08 +0000
asID: 36916
IP address blocks: 41.180.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3124 (0xc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:07:08 2026 GMT
Not After : Jul 24 12:07:08 2036 GMT
Subject: CN=6a635570-1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:1d:b5:3b:3d:b5:ea:47:96:a3:3d:f0:93:
72:8d:6a:9b:ba:e7:49:cd:7f:67:b0:ce:42:44:e9:
67:bb:dd:2a:bd:b4:bd:f6:c3:ee:05:b8:e7:ed:84:
ff:40:05:aa:16:92:44:90:0f:65:e1:d1:53:1e:5a:
84:27:25:bd:88:02:77:cf:25:35:bc:06:1a:72:b1:
06:89:43:1d:02:d1:2c:97:f1:e3:6c:44:0b:8c:45:
3f:ee:8a:20:a5:b2:7f:98:6a:59:77:84:a7:ca:6b:
a7:eb:3c:cd:a4:45:e2:a1:0b:2c:13:b2:60:4c:7f:
8e:ca:d7:fa:61:07:12:c0:88:91:e8:92:b8:34:7a:
8e:cb:03:89:72:dd:95:ff:12:46:d7:de:7e:e8:4e:
31:69:eb:6c:06:14:9a:b1:96:17:1c:0e:47:f2:60:
87:77:cd:da:8a:7b:27:76:cf:82:81:5e:33:16:4a:
e6:0c:34:88:1b:a7:ba:30:9a:c2:15:b3:71:15:f5:
3e:89:d2:ca:5a:45:b9:05:15:10:66:1a:ca:ec:d7:
e2:3a:3c:e2:60:e1:ae:8d:76:7f:9a:84:7f:44:40:
3b:b2:eb:b6:92:98:6a:82:7a:e7:e9:c2:e1:00:6c:
3d:d1:09:34:74:00:6e:34:c1:2a:e0:8d:ed:27:b4:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:13:72:1E:07:2F:D5:47:1C:B8:3D:F2:3C:3F:F7:CA:67:03:76
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/33BEA8EC875811F18936E5BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.96.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:6f:93:56:9d:22:58:3a:af:ca:13:ff:4c:60:2b:97:51:76:
16:19:66:f5:02:20:99:b7:1a:2e:e9:ec:f8:f0:45:3d:f8:1e:
e6:4b:d5:40:6f:57:70:de:5e:72:b8:79:53:42:56:7c:24:16:
92:0f:da:4e:f0:06:80:e1:9b:ff:11:29:7b:38:5f:32:14:f8:
b6:e4:fb:a6:7a:60:59:d5:2c:fe:78:61:47:a8:4b:02:86:30:
05:17:c6:81:b4:d7:37:3a:4b:bd:c5:f6:91:08:fd:de:46:73:
82:41:e2:75:f7:1d:3f:08:e3:a7:37:33:95:90:f8:44:7c:54:
95:1a:73:9e:96:09:76:38:cb:e0:c5:44:4e:ca:df:8a:73:31:
7c:32:9b:98:f8:18:11:6d:fd:ea:45:b3:02:b8:5e:73:b5:b8:
da:72:2a:5d:ca:d3:be:07:01:30:36:0b:22:07:f6:52:6c:49:
99:ba:5c:b2:ca:11:dc:cb:b6:fb:e7:44:ab:10:ff:24:81:33:
50:a8:9a:cf:54:dc:f6:a1:8e:42:1b:83:8f:91:21:82:ed:3c:
40:e9:90:6f:68:22:32:1f:51:03:ca:4c:45:94:7a:85:cf:f9:
e4:7a:6c:f3:a7:9c:bc:98:53:c4:dc:4e:60:19:cb:75:68:69:
b7:6a:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:50 2026 by rpki-client