Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5495D404875911F186691DC7CE1D38B0.roa
File: 5495D404875911F186691DC7CE1D38B0.roa (raw, json)
Hash identifier: XGfMsb9IQnyw7ABMQNe8gnyuPUOUx/1uSGyt7XXMx+0=
Subject key identifier: 0D:BB:66:3D:66:D1:D6:77:F4:4A:AF:29:16:3C:E1:F4:67:B5:F5:35
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C46
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5495D404875911F186691DC7CE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:15:17 +0000
ROA not before: Fri 24 Jul 2026 12:15:13 +0000
ROA not after: Thu 24 Jul 2036 12:15:13 +0000
asID: 36916
IP address blocks: 41.221.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3142 (0xc46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:15:13 2026 GMT
Not After : Jul 24 12:15:13 2036 GMT
Subject: CN=6a635755-08d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:79:c1:6c:e8:86:ce:8f:96:4f:d1:33:38:
e2:5c:53:12:b0:e5:19:c1:fa:f3:37:c9:de:d0:2a:
e3:c8:a2:a5:e1:70:fc:f1:77:6c:00:88:52:e4:4d:
cf:8a:22:f1:73:a0:c2:20:ad:c0:23:4b:26:bf:b5:
b0:fc:5d:4f:61:06:10:a4:cc:1c:3e:9d:3f:3f:e4:
c3:45:72:3b:b9:6a:86:93:bd:f7:8b:36:15:4e:76:
a5:bb:05:c8:67:97:ce:20:5c:ae:64:2e:32:56:14:
2c:27:ce:2f:e3:0d:dd:bf:94:3c:e2:88:05:73:c4:
12:91:85:23:97:16:3d:70:da:c3:6d:30:84:dc:fd:
90:99:8f:a5:1d:c2:76:3b:84:3f:73:fa:cf:4b:37:
66:a2:78:f6:84:00:3f:b4:14:ad:c7:da:2f:12:33:
7c:c3:02:e0:f3:9e:37:a1:42:cd:31:63:07:44:19:
1d:29:0e:06:63:99:f9:04:97:66:26:34:ba:fa:90:
e6:36:75:9c:e1:bd:94:a7:13:c2:d1:85:83:ee:61:
bc:f8:94:1b:2c:bc:a5:f5:58:3f:d1:4c:b6:61:4b:
0e:6d:87:06:08:77:bd:33:af:fb:4f:28:1a:49:30:
16:a6:b5:7d:af:df:1e:19:ab:2c:e8:cb:36:0c:b5:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BB:66:3D:66:D1:D6:77:F4:4A:AF:29:16:3C:E1:F4:67:B5:F5:35
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5495D404875911F186691DC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.238.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:ae:f6:1f:50:d4:a5:10:7b:d5:15:91:95:ba:83:e1:f4:e9:
31:d1:92:a8:20:06:d5:72:77:a2:3a:2b:cc:a4:1a:97:ad:34:
f9:13:c2:22:78:e5:1c:95:ca:82:b7:81:67:69:07:a0:84:c4:
7e:8b:b4:ec:c5:2a:bd:7c:5b:87:4c:5a:b6:0f:04:2b:51:a9:
9c:dc:5b:b8:da:95:36:a2:b7:38:13:ac:1c:54:bf:37:40:cd:
67:cf:ae:15:e3:24:f8:e8:5e:f1:02:f0:1f:03:cc:f9:9a:7a:
01:bb:bf:27:9e:c8:2a:49:e1:d1:b5:c6:b0:88:9a:0b:15:49:
dd:2f:43:33:9c:e1:36:22:d5:6f:c3:d0:85:9a:3a:4e:94:14:
65:fe:66:34:11:b2:f1:31:87:4e:c8:7d:0d:21:65:a6:c3:bb:
ba:11:fa:ba:28:ff:d3:0e:ca:f6:ba:e7:3e:08:bd:f9:a6:66:
4e:fe:7f:72:25:a8:0e:0f:0d:d2:4c:4a:68:cd:51:9d:b6:90:
42:62:28:6d:87:21:b7:87:17:06:8e:61:bb:05:ab:f6:fb:ba:
a5:75:e1:5f:1f:b3:36:72:06:90:0e:7f:b5:2b:80:a2:7b:55:
7e:53:fc:2a:69:24:1f:38:a4:22:ef:d5:57:2c:3c:be:a1:ce:
08:92:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:03 2026 by rpki-client