Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/385840BC875711F18C2E94BACE1D38B0.roa
File: 385840BC875711F18C2E94BACE1D38B0.roa (raw, json)
Hash identifier: HeQi18zwZl/TQ3nJLUwkWysYOou6JdWCQHSZF4Ik+fE=
Subject key identifier: F4:16:58:7A:31:8C:D7:CC:1A:BC:DB:79:B3:86:BB:81:00:81:A6:C5
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C24
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/385840BC875711F18C2E94BACE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:00:10 +0000
ROA not before: Fri 24 Jul 2026 12:00:07 +0000
ROA not after: Thu 24 Jul 2036 12:00:07 +0000
asID: 36916
IP address blocks: 41.180.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:00:07 2026 GMT
Not After : Jul 24 12:00:07 2036 GMT
Subject: CN=6a6353ca-10cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:dc:92:1d:8b:6c:97:48:bb:dd:29:a1:43:
ed:7f:8b:60:10:2b:cd:57:4a:03:33:99:f4:bf:7e:
89:02:15:36:f5:a0:31:70:ad:21:3f:3a:56:fc:bc:
26:68:bf:9d:60:4d:eb:98:78:cd:7c:67:0d:ab:35:
e6:97:42:ff:1f:95:32:2a:f3:8c:6d:42:1f:88:2a:
43:3a:68:08:5e:04:b6:c4:ef:8a:e2:0e:fa:44:13:
10:92:31:75:97:5d:85:6c:8c:46:f6:98:9a:5e:ad:
e1:a5:f5:38:9f:4b:12:a1:8b:4a:c8:c3:80:5b:cb:
28:c4:29:52:b2:a6:cd:8d:9c:6c:ad:c9:33:9d:65:
ec:3c:ef:58:c5:ed:85:56:81:23:a6:d6:17:f0:25:
e6:84:69:9f:52:3c:16:a4:16:54:69:f8:ab:1f:5a:
d6:64:91:98:9e:98:92:48:8f:e0:6c:a6:38:39:e9:
72:c9:2b:e2:73:a1:cf:c0:93:d8:f8:98:87:0f:66:
18:40:6d:2e:d5:05:3f:08:c6:51:fd:2b:7a:8c:e4:
45:6b:78:0e:b3:16:b2:b4:0a:3d:95:d4:41:d2:64:
7a:ca:e8:f0:81:ab:23:0c:14:c1:18:5b:af:1f:42:
15:39:4d:7f:36:a9:f3:c6:25:c0:0b:41:1f:41:ee:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:16:58:7A:31:8C:D7:CC:1A:BC:DB:79:B3:86:BB:81:00:81:A6:C5
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/385840BC875711F18C2E94BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.48.0/22
Signature Algorithm: sha256WithRSAEncryption
40:63:b9:44:92:5d:4d:0d:70:be:49:f0:bd:80:90:da:f5:15:
ae:ab:2c:50:94:bb:62:95:29:90:50:c4:58:ec:71:49:67:2b:
4d:8e:fa:77:9f:d6:d8:db:fe:67:63:78:d7:18:01:cc:05:8e:
65:47:ce:05:29:47:01:2a:95:3a:10:63:b5:74:e4:e3:3a:5e:
1c:29:0d:e0:b5:76:05:bb:b5:57:12:5b:09:6a:35:6c:cd:6b:
c1:60:04:03:0b:dc:e5:bf:42:cc:cc:db:48:d0:bc:20:8e:0b:
da:7e:69:c7:e1:ab:c5:91:40:2f:c8:2c:a1:fb:2b:15:31:07:
b2:e2:f6:1e:26:9a:d1:8f:ed:3d:6f:d8:6a:c6:7e:e7:62:74:
27:23:8a:63:98:70:37:e3:fe:c9:ec:7b:d2:00:ab:72:6e:e1:
10:fd:dc:64:98:99:52:35:0a:8d:0d:7c:8b:77:0d:f7:c9:4a:
ed:63:de:41:50:15:12:44:b1:c3:be:1d:40:05:80:2a:08:90:
91:c2:99:8f:cf:b4:a4:9e:68:e8:0c:ef:e9:50:8f:3a:03:2e:
b8:f7:00:10:a8:3b:01:62:97:d8:fd:1e:f5:5c:b5:68:b6:7f:
5d:2f:a9:1a:ef:41:5c:21:2f:c5:64:f1:ba:2d:d7:b1:e1:df:
df:51:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:09 2026 by rpki-client