Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3F9ECE34874A11F1B0B3FEE9CE1D38B0.roa
File: 3F9ECE34874A11F1B0B3FEE9CE1D38B0.roa (raw, json)
Hash identifier: 5lnpA1L+KfRNN4eY35QaNSqgvvoVFaQ3hzKwgUUCQlQ=
Subject key identifier: DD:1B:98:65:C4:9E:F9:3B:A9:A5:20:3B:DD:46:34:17:8F:21:A8:28
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BE0
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3F9ECE34874A11F1B0B3FEE9CE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:27:19 +0000
ROA not before: Fri 24 Jul 2026 10:27:15 +0000
ROA not after: Thu 24 Jul 2036 10:27:15 +0000
asID: 36916
IP address blocks: 41.180.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3040 (0xbe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:27:15 2026 GMT
Not After : Jul 24 10:27:15 2036 GMT
Subject: CN=6a633e07-26ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:05:cd:84:a8:ff:08:5f:f1:81:97:9a:c6:
47:aa:2f:20:e6:5d:c2:8e:e9:cd:69:3f:21:8e:27:
47:a1:52:48:31:05:a3:08:82:0e:3c:a8:cc:48:b4:
f8:a1:db:2a:7e:e5:76:72:c6:cb:78:c6:4f:29:8c:
eb:92:8c:a1:86:dc:4e:ff:e3:2b:63:25:e8:a2:9f:
50:a7:08:22:15:5a:26:9b:5b:6d:72:23:a5:e8:d1:
98:73:c5:3a:41:ed:1a:51:80:89:69:c1:3f:aa:5f:
2c:f4:a1:b7:e3:fd:25:8a:df:fd:39:57:89:92:96:
ec:a5:af:67:8f:5b:ef:e0:e3:fb:9d:cb:90:ad:b0:
85:19:9d:5b:33:5d:7c:f9:ba:9e:b0:09:d4:6e:29:
9e:38:ca:10:e5:c9:95:76:f2:80:bf:ef:68:84:53:
e5:5a:7e:7c:79:8a:e0:0d:39:20:17:41:17:2e:85:
a1:e7:9a:3e:7e:eb:19:a2:25:23:da:7c:1f:d5:08:
c4:bb:75:d6:91:7a:14:e0:0b:1d:d9:6b:e6:a3:e7:
27:50:f9:73:dd:51:ba:80:0f:2c:ec:e6:f3:9e:cd:
3f:64:01:c6:56:25:fe:6c:ee:d3:60:ba:97:ef:6f:
62:b1:bf:5b:7c:91:de:08:18:d5:c9:a5:85:f5:3b:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1B:98:65:C4:9E:F9:3B:A9:A5:20:3B:DD:46:34:17:8F:21:A8:28
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3F9ECE34874A11F1B0B3FEE9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:a9:fa:f6:e2:9e:8b:6c:02:ce:6e:14:9b:2e:5f:b3:ec:55:
95:21:be:85:a6:8d:b1:f8:3f:8a:71:8f:ef:0e:7b:1d:36:7b:
91:dd:b7:44:fe:5c:9e:f0:1d:5d:c4:73:7f:c7:e1:22:99:fb:
04:47:e9:cc:61:5e:2b:1d:e5:1b:f0:58:00:37:44:ff:bc:3d:
8c:5a:f4:d2:4c:c7:bf:8a:0c:13:65:e9:7c:88:d6:02:b0:3a:
9b:f5:0c:61:44:41:07:ca:24:87:94:34:fa:4b:c3:1f:f8:e5:
d0:91:bf:e9:3c:0d:b2:b8:22:b7:6e:f0:22:8e:6a:ed:19:fc:
06:58:bd:c6:27:fb:f6:68:86:1c:3c:2a:05:f0:07:4c:3e:4e:
02:99:c7:49:d6:6f:ff:f8:87:22:63:0e:ca:7d:a2:84:a6:2b:
b2:25:e4:40:5d:9d:d8:16:38:2f:1c:19:b8:7c:4b:e5:87:19:
6c:90:51:af:1f:94:fc:12:bc:39:e1:ff:89:89:07:ef:64:f1:
ab:7a:21:ac:e1:f1:98:a7:99:7e:64:ce:9f:45:26:17:ef:63:
eb:35:8f:1a:8b:5e:c0:fd:f8:bc:d9:f4:b1:73:5b:71:a1:2f:
0b:cd:1e:13:c5:63:63:0b:2b:93:23:eb:1c:ad:61:1c:8c:9e:
e4:23:04:8e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC+AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjQxMDI3MTVaFw0zNjA3MjQxMDI3MTVaMBgxFjAU
BgNVBAMTDTZhNjMzZTA3LTI2Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbKQXNhKj/CF/xgZeaxkeqLyDmXcKO6c1pPyGOJ0ehUkgxBaMIgg48qMxI
tPih2yp+5XZyxst4xk8pjOuSjKGG3E7/4ytjJeiin1CnCCIVWiabW21yI6Xo0Zhz
xTpB7RpRgIlpwT+qXyz0obfj/SWK3/05V4mSluylr2ePW+/g4/udy5CtsIUZnVsz
XXz5up6wCdRuKZ44yhDlyZV28oC/72iEU+Vafnx5iuANOSAXQRcuhaHnmj5+6xmi
JSPafB/VCMS7ddaRehTgCx3Za+aj5ydQ+XPdUbqADyzs5vOezT9kAcZWJf5s7tNg
upfvb2Kxv1t8kd4IGNXJpYX1O7pPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3RuY
ZcSe+TuppSA73UY0F48hqCgwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzNGOUVDRTM0ODc0QTExRjFCMEIzRkVFOUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQptFAwDQYJKoZIhvcNAQEL
BQADggEBAGyp+vbinotsAs5uFJsuX7PsVZUhvoWmjbH4P4pxj+8Oex02e5Hdt0T+
XJ7wHV3Ec3/H4SKZ+wRH6cxhXisd5RvwWAA3RP+8PYxa9NJMx7+KDBNl6XyI1gKw
Opv1DGFEQQfKJIeUNPpLwx/45dCRv+k8DbK4Irdu8CKOau0Z/AZYvcYn+/Zohhw8
KgXwB0w+TgKZx0nWb//4hyJjDsp9ooSmK7Il5EBdndgWOC8cGbh8S+WHGWyQUa8f
lPwSvDnh/4mJB+9k8at6Iazh8ZinmX5kzp9FJhfvY+s1jxqLXsD9+LzZ9LFzW3Gh
LwvNHhPFY2MLK5Mj6xytYRyMnuQjBI4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:55 2026 by rpki-client