Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4ED95F78875811F19040EABECE1D38B0.roa
File: 4ED95F78875811F19040EABECE1D38B0.roa (raw, json)
Hash identifier: nb89ico3yQHkzDYCO5kBF9lc9dkwu5ZXU6Xos8xreaQ=
Subject key identifier: B1:D8:11:3A:0F:95:AE:16:B7:09:6D:9E:58:28:5F:DA:52:90:48:A1
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C36
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4ED95F78875811F19040EABECE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:07:58 +0000
ROA not before: Fri 24 Jul 2026 12:07:54 +0000
ROA not after: Thu 24 Jul 2036 12:07:54 +0000
asID: 36916
IP address blocks: 41.221.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3126 (0xc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:07:54 2026 GMT
Not After : Jul 24 12:07:54 2036 GMT
Subject: CN=6a63559e-1ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:4d:7e:0f:c0:bf:8f:e3:ae:5d:49:70:c6:
c6:93:47:30:9f:f6:97:d2:71:5e:b5:4b:09:28:b0:
a4:8a:08:76:c6:ea:e9:66:55:73:30:a7:60:1f:c4:
21:cd:bc:ad:f4:1c:39:7a:6a:6c:9a:c0:56:96:7b:
09:97:82:76:b1:4f:f9:d3:6d:7f:f8:47:78:c1:95:
c8:21:03:8d:a7:03:0b:a0:80:d3:79:97:1c:23:77:
38:c9:6a:2a:a2:7f:19:e0:b8:b9:9a:e9:e9:84:95:
79:83:8e:10:8a:3d:b4:ad:78:af:55:58:e9:22:7c:
a0:98:ab:98:0e:84:4c:d5:57:ee:88:74:e2:07:ad:
67:e2:fb:ad:e8:97:9f:70:14:43:29:00:ee:b4:95:
9d:8b:8a:46:5a:c5:90:e9:7d:b9:b3:21:1d:fc:55:
cc:2d:57:d9:5c:ae:d9:1a:42:15:15:f1:4c:37:34:
bb:a4:a5:f6:4f:46:b4:73:fe:e3:6e:a3:c7:21:20:
9a:e0:66:ed:44:9f:f1:9e:61:f6:8a:70:4e:06:5d:
5d:aa:09:b3:59:3b:7a:1a:5a:1d:58:a7:8b:a5:be:
b9:af:66:31:1b:c7:55:1f:53:31:1e:8e:ac:cf:b7:
5b:a5:a2:99:12:3c:8c:3c:7b:48:20:e5:ac:0d:56:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D8:11:3A:0F:95:AE:16:B7:09:6D:9E:58:28:5F:DA:52:90:48:A1
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4ED95F78875811F19040EABECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.224.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:76:9f:58:01:48:db:ac:0f:36:f2:bb:78:48:10:3c:bc:16:
9a:32:35:e7:5c:1b:23:5d:d0:ca:34:aa:f0:34:53:95:d3:03:
57:5f:e6:bc:6c:34:ac:7f:c3:b2:dd:8b:34:50:19:e2:b0:09:
4a:c5:e3:8e:a9:1b:1b:9b:cb:21:f8:84:b6:9b:21:db:3a:5e:
bd:b3:03:6c:10:f2:77:fd:10:db:b7:50:f9:66:bd:a2:b0:5b:
71:2d:2f:45:e0:9c:c7:00:6d:2d:db:16:80:bc:2f:bc:51:e7:
d5:65:35:b1:9f:89:f8:be:38:03:95:25:c7:75:d6:f8:a3:2e:
de:5a:70:bf:89:a4:68:34:b1:42:ba:0b:34:a8:6f:29:4a:b7:
2d:4d:ae:67:5f:5c:56:7f:87:5e:46:8b:c9:61:d0:7f:1d:81:
77:e0:26:a7:2c:23:3b:d5:c0:3f:2f:cb:3b:36:d3:c2:19:fa:
f2:20:90:2d:49:0b:49:14:46:fc:e5:f5:97:da:04:29:bd:f2:
84:54:fa:9e:12:46:00:fd:ce:03:d8:b3:e9:a4:df:f7:b3:25:
3d:9f:7e:18:90:bd:42:e2:84:5f:28:88:1c:40:6c:1a:66:14:
06:cc:d4:2a:f1:cf:c7:8c:19:32:19:6f:42:c7:0c:72:45:7e:
6e:ca:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:06 2026 by rpki-client