Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5663AB96875711F1A156A2BACE1D38B0.roa
File: 5663AB96875711F1A156A2BACE1D38B0.roa (raw, json)
Hash identifier: /BUmhHao9t8R+dGpHYUanNLOThhCa1sNbaMyFz96bs0=
Subject key identifier: CF:BD:1E:61:F4:F1:DE:DD:AA:A2:66:17:D9:B4:EE:3E:36:98:47:0B
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C26
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5663AB96875711F1A156A2BACE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:01:01 +0000
ROA not before: Fri 24 Jul 2026 12:00:57 +0000
ROA not after: Thu 24 Jul 2036 12:00:57 +0000
asID: 36916
IP address blocks: 41.180.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:00:57 2026 GMT
Not After : Jul 24 12:00:57 2036 GMT
Subject: CN=6a6353fd-280c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:54:51:6a:9f:20:8f:d2:60:ed:a1:1f:fb:
a5:60:af:4a:90:ed:a2:35:5d:6a:79:12:48:b5:24:
1b:e4:5f:38:21:dd:a2:6b:b4:d0:d9:b3:2d:ee:c7:
0f:4e:11:9f:16:b5:13:4a:5b:82:1b:3c:a2:78:c7:
b5:c7:44:72:23:a7:40:57:01:1d:aa:2c:7c:15:96:
d1:cd:c5:b4:fe:af:d9:fc:0f:87:79:66:a9:a6:b0:
00:a2:fe:51:37:c7:ae:36:78:12:c3:b6:50:7f:7d:
c6:d8:5f:22:a3:54:46:c1:26:a6:36:ee:a5:94:f7:
59:de:49:3f:ed:cc:a8:3a:c4:41:2f:3f:54:f3:11:
a0:25:4f:47:2b:64:d5:5f:f7:0b:ab:6d:3d:aa:3f:
44:5c:78:87:80:9c:92:9f:c3:84:b2:c3:7d:14:65:
cd:0f:1e:6e:ae:f4:2d:27:22:69:f7:9b:cd:b2:78:
87:58:40:6a:93:a8:3a:c0:64:70:de:bf:25:62:f7:
3b:56:c6:41:1c:8b:d3:6e:1a:f5:bd:29:51:97:b7:
7f:e0:ed:e8:8a:30:d1:cd:70:01:60:e5:4d:3b:e5:
ec:c6:47:25:73:8d:29:55:7a:b4:96:18:f0:02:ef:
b1:d6:16:14:b1:5f:b1:e9:f2:e1:d5:0c:02:92:58:
b1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:1E:61:F4:F1:DE:DD:AA:A2:66:17:D9:B4:EE:3E:36:98:47:0B
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5663AB96875711F1A156A2BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:52:27:1d:da:1f:03:48:0a:f7:ee:80:59:89:b5:80:13:01:
ae:57:69:bc:6f:68:f1:a4:1f:93:8a:9a:88:29:3f:38:71:3e:
84:41:99:b5:c3:89:89:b0:b3:1a:b3:58:31:f0:2f:39:ce:f2:
14:06:e2:3c:5e:5f:b7:98:3a:90:37:1c:53:0c:fa:72:79:35:
11:32:ee:14:e8:0c:14:4c:d5:31:dc:8c:86:55:e2:45:bb:b4:
77:b5:a9:dd:38:c0:4a:e9:25:28:80:1d:a4:20:8f:12:ac:6c:
73:f8:29:66:88:47:85:0e:55:77:d9:25:1f:6a:8f:b0:f0:58:
26:34:c1:2d:ef:74:4e:c8:f0:b4:c0:44:43:45:6a:eb:47:df:
41:d8:db:5a:53:26:01:f8:dd:05:e1:9b:17:92:b6:ee:b9:ad:
aa:52:34:9f:35:40:6a:01:9b:4f:ca:8a:9b:4d:ed:b9:23:31:
31:24:5d:47:a4:cb:b8:85:26:1a:c0:2d:fb:f4:a0:15:83:9f:
d7:4c:17:fc:18:37:71:d8:da:33:c7:e7:71:aa:3c:13:a7:9b:
5f:d4:4a:43:da:99:af:24:b0:1f:20:ae:f6:17:35:da:14:63:
d7:6f:5c:f4:fd:b4:27:b7:99:09:b9:81:92:a8:f0:ce:15:51:
d4:80:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:05 2026 by rpki-client