Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/6F04D1C8875911F191AB29C7CE1D38B0.roa
File: 6F04D1C8875911F191AB29C7CE1D38B0.roa (raw, json)
Hash identifier: HvLpZ6FPfGFNNYRq3DbaLcn/BhKlhGzn6teA7riIBws=
Subject key identifier: B3:54:B5:8A:61:30:A3:A9:02:EA:D0:1D:DD:F6:2C:1D:80:14:32:AC
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C48
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/6F04D1C8875911F191AB29C7CE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:16:01 +0000
ROA not before: Fri 24 Jul 2026 12:15:57 +0000
ROA not after: Thu 24 Jul 2036 12:15:57 +0000
asID: 36916
IP address blocks: 41.223.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3144 (0xc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:15:57 2026 GMT
Not After : Jul 24 12:15:57 2036 GMT
Subject: CN=6a635781-49ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:6f:40:9c:e2:40:5e:89:cc:10:91:74:e5:
2b:cc:bf:a0:99:b7:53:11:95:f3:97:7e:71:0f:11:
ac:7f:e2:2a:07:a2:36:e0:e0:43:74:6b:16:b4:c2:
49:51:1b:df:96:63:9c:b6:9a:c0:9e:b8:61:b5:f3:
9d:1c:4f:4e:99:d5:b3:17:d4:f3:c8:d6:3e:c1:3c:
23:4c:da:3c:58:7d:97:66:37:5d:82:c6:0c:a4:f4:
30:d8:d0:50:02:2a:52:c3:d4:11:bc:96:ac:3c:e0:
f7:d0:a9:2c:dc:96:43:19:a5:1e:f2:09:ba:fa:9e:
c9:99:bb:1c:36:99:7c:44:f7:20:a4:dc:b4:9f:19:
7d:6d:50:4f:7b:52:09:58:cc:a4:2a:de:21:fe:da:
28:be:f8:36:47:eb:16:7d:26:42:d8:ce:a0:03:14:
34:86:40:d1:3b:c5:c2:49:21:7e:60:4b:82:7a:7b:
d9:86:dd:6c:46:9b:9b:c8:50:b2:95:cf:3c:98:e5:
a0:7b:5e:b2:6b:f0:34:c1:ce:a0:fc:11:a7:c1:d8:
fd:35:33:f0:f7:ea:c8:65:e9:37:9e:f3:83:a0:36:
88:2c:05:d8:fc:61:30:7f:79:74:64:69:2f:3b:99:
a0:09:a2:2a:b7:36:b1:bb:a8:2c:08:a7:6b:e5:95:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:54:B5:8A:61:30:A3:A9:02:EA:D0:1D:DD:F6:2C:1D:80:14:32:AC
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/6F04D1C8875911F191AB29C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.60.0/22
Signature Algorithm: sha256WithRSAEncryption
05:ff:c9:60:6e:61:3d:3f:2c:2f:96:72:e1:47:2d:d4:38:1d:
fd:50:60:ab:34:9f:a4:b7:f9:13:84:21:f6:15:41:d1:4f:15:
ae:0f:8e:d1:d4:92:79:f0:89:34:66:fe:55:71:02:78:e8:2a:
dc:e0:39:0c:a7:3a:77:ad:c2:d6:7b:b1:d6:00:f9:40:1b:4d:
da:83:c0:1e:bb:fe:c4:de:24:0a:f0:d4:99:84:5d:48:df:76:
23:69:71:a0:6d:8a:e0:e2:dc:e5:37:ff:b4:6f:3a:d3:a3:60:
68:c3:1f:f9:1d:9d:17:d3:24:33:6a:4a:07:4e:39:db:fc:1e:
f8:a6:c6:23:20:2a:34:d9:36:51:94:81:0a:02:fc:72:5d:d4:
48:83:d3:be:d3:11:88:38:38:c0:76:4b:ba:5d:98:1c:0f:70:
48:dd:a0:00:e0:58:9b:15:78:85:20:94:f9:55:d6:ba:a4:b4:
a9:36:ad:ea:8b:48:da:62:5c:49:9e:4d:4a:db:c0:4c:fa:39:
c7:2f:0f:83:b7:d4:a5:20:f0:07:cd:3d:d3:41:05:ad:2e:2e:
07:0a:81:63:7b:5f:2c:81:3e:dd:f3:27:ee:35:69:fa:49:fd:
f7:49:6f:33:b0:f5:7a:4a:c1:f0:c4:ef:b9:92:27:71:16:10:
f9:a8:fe:95
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjQxMjE1NTdaFw0zNjA3MjQxMjE1NTdaMBgxFjAU
BgNVBAMTDTZhNjM1NzgxLTQ5Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuCm9AnOJAXonMEJF05SvMv6CZt1MRlfOXfnEPEax/4ioHojbg4EN0axa0
wklRG9+WY5y2msCeuGG1850cT06Z1bMX1PPI1j7BPCNM2jxYfZdmN12Cxgyk9DDY
0FACKlLD1BG8lqw84PfQqSzclkMZpR7yCbr6nsmZuxw2mXxE9yCk3LSfGX1tUE97
UglYzKQq3iH+2ii++DZH6xZ9JkLYzqADFDSGQNE7xcJJIX5gS4J6e9mG3WxGm5vI
ULKVzzyY5aB7XrJr8DTBzqD8EafB2P01M/D36shl6Tee84OgNogsBdj8YTB/eXRk
aS87maAJoiq3NrG7qCwIp2vllVR9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUs1S1
imEwo6kC6tAd3fYsHYAUMqwwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzZGMDREMUM4ODc1OTExRjE5MUFCMjlDN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIp3zwwDQYJKoZIhvcNAQEL
BQADggEBAAX/yWBuYT0/LC+WcuFHLdQ4Hf1QYKs0n6S3+ROEIfYVQdFPFa4PjtHU
knnwiTRm/lVxAnjoKtzgOQynOnetwtZ7sdYA+UAbTdqDwB67/sTeJArw1JmEXUjf
diNpcaBtiuDi3OU3/7RvOtOjYGjDH/kdnRfTJDNqSgdOOdv8HvimxiMgKjTZNlGU
gQoC/HJd1EiD077TEYg4OMB2S7pdmBwPcEjdoADgWJsVeIUglPlV1rqktKk2reqL
SNpiXEmeTUrbwEz6OccvD4O31KUg8AfNPdNBBa0uLgcKgWN7XyyBPt3zJ+41afpJ
/fdJbzOw9XpKwfDE77mSJ3EWEPmo/pU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:47 2026 by rpki-client