Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5D2A32D6874A11F195A70DEACE1D38B0.roa
File: 5D2A32D6874A11F195A70DEACE1D38B0.roa (raw, json)
Hash identifier: bzZMpjyfg12+WH808ks6MJ1pXiqIMt/hnagb9Px/EgM=
Subject key identifier: 0C:36:F9:35:72:A9:CD:E8:2F:D6:50:60:01:17:79:38:B4:B0:AC:20
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BE2
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5D2A32D6874A11F195A70DEACE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:28:09 +0000
ROA not before: Fri 24 Jul 2026 10:28:05 +0000
ROA not after: Thu 24 Jul 2036 10:28:05 +0000
asID: 36916
IP address blocks: 41.180.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:28:05 2026 GMT
Not After : Jul 24 10:28:05 2036 GMT
Subject: CN=6a633e39-99c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b3:da:52:ab:0e:26:de:25:6c:c4:fd:7c:bb:
26:fb:e9:b7:21:93:2e:4d:33:00:a0:eb:00:75:1c:
71:21:e2:f5:fc:7a:3b:85:71:96:27:22:b6:ca:2a:
48:b3:91:8f:8a:bd:f0:84:9b:b1:fb:c4:9c:c5:6c:
58:23:02:ae:e5:4c:42:b7:67:2c:c0:26:d1:d3:32:
6c:ae:a4:9e:7f:83:18:bd:4c:f5:74:d7:d3:30:6b:
27:0c:d4:7c:ea:f5:91:e1:c2:3a:d4:78:6f:f7:70:
c3:c9:ce:75:29:98:e2:8f:83:b4:fe:30:c4:e5:99:
93:84:ae:07:f8:a3:8e:15:a0:d1:0f:73:be:dd:49:
a7:21:01:cf:31:07:89:ae:f3:16:cf:2b:03:d3:d8:
ed:a4:1f:fe:c4:85:38:6d:cb:98:5c:d3:9c:ef:c6:
ee:8d:27:44:94:e9:c9:c3:1d:d3:78:8f:a5:e1:25:
d4:45:f1:24:d7:b6:e2:f9:86:08:b9:6a:90:1a:3b:
e4:0c:57:a9:35:28:fb:2d:cd:2b:9e:17:cc:c9:d6:
93:ce:84:af:be:b5:e2:75:15:af:56:75:71:98:57:
67:4c:b9:09:55:bf:b8:df:32:a8:17:6b:18:84:b2:
d0:97:c0:c5:64:7b:0b:a4:3a:e6:8a:3e:b6:fc:2a:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:36:F9:35:72:A9:CD:E8:2F:D6:50:60:01:17:79:38:B4:B0:AC:20
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5D2A32D6874A11F195A70DEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.92.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:00:09:79:f5:72:69:a6:d5:aa:59:de:77:35:5d:e7:1d:ed:
89:e9:88:f9:c4:04:75:b9:3f:11:b0:64:3d:72:13:4b:6e:85:
f5:a5:5e:80:24:8f:44:c3:1f:3a:c4:28:18:09:00:a2:70:8c:
c9:61:7e:7f:b0:89:a0:d5:a0:91:58:99:ec:5c:22:95:cd:fb:
d8:71:07:5f:66:08:4c:36:a0:f7:05:a5:b4:98:75:7e:0c:60:
51:b1:29:97:74:4a:dc:4a:a5:79:40:f7:76:6e:49:1e:96:e9:
a3:63:4f:b1:34:da:ed:0b:a8:2b:5c:cd:49:a4:2b:1a:7a:65:
fc:17:a0:2e:32:69:78:a6:5a:c3:c1:1b:2b:16:d0:c5:9b:a4:
35:12:de:33:98:70:93:8b:4a:69:f1:77:64:42:13:97:51:90:
55:b5:d2:a2:87:26:b9:01:93:0f:7f:4b:65:13:a8:b3:c3:b0:
96:df:c3:39:04:cd:24:87:e7:78:1b:45:cf:60:77:2f:1c:d9:
8c:8c:d2:ac:d3:10:01:ee:bf:8f:1e:bd:72:40:93:f8:d4:05:
70:f5:8e:ed:03:5b:50:77:61:8e:8f:57:4c:65:7c:c2:54:04:
a4:eb:c6:93:7a:25:3e:7c:e1:58:b1:ca:5e:49:5b:fe:d4:57:
5b:e4:35:c4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjQxMDI4MDVaFw0zNjA3MjQxMDI4MDVaMBgxFjAU
BgNVBAMTDTZhNjMzZTM5LTk5YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvs9pSqw4m3iVsxP18uyb76bchky5NMwCg6wB1HHEh4vX8ejuFcZYnIrbK
KkizkY+KvfCEm7H7xJzFbFgjAq7lTEK3ZyzAJtHTMmyupJ5/gxi9TPV019MwaycM
1Hzq9ZHhwjrUeG/3cMPJznUpmOKPg7T+MMTlmZOErgf4o44VoNEPc77dSachAc8x
B4mu8xbPKwPT2O2kH/7EhThty5hc05zvxu6NJ0SU6cnDHdN4j6XhJdRF8STXtuL5
hgi5apAaO+QMV6k1KPstzSueF8zJ1pPOhK++teJ1Fa9WdXGYV2dMuQlVv7jfMqgX
axiEstCXwMVkewukOuaKPrb8KtvHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUDDb5
NXKpzegv1lBgARd5OLSwrCAwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzVEMkEzMkQ2ODc0QTExRjE5NUE3MERFQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEptFwwDQYJKoZIhvcNAQEL
BQADggEBAJwACXn1cmmm1apZ3nc1Xecd7YnpiPnEBHW5PxGwZD1yE0tuhfWlXoAk
j0TDHzrEKBgJAKJwjMlhfn+wiaDVoJFYmexcIpXN+9hxB19mCEw2oPcFpbSYdX4M
YFGxKZd0StxKpXlA93ZuSR6W6aNjT7E02u0LqCtczUmkKxp6ZfwXoC4yaXimWsPB
GysW0MWbpDUS3jOYcJOLSmnxd2RCE5dRkFW10qKHJrkBkw9/S2UTqLPDsJbfwzkE
zSSH53gbRc9gdy8c2YyM0qzTEAHuv48evXJAk/jUBXD1ju0DW1B3YY6PV0xlfMJU
BKTrxpN6JT584Vixyl5JW/7UV1vkNcQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:56 2026 by rpki-client