Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/6FBFC4B8875611F1A275A3B4CE1D38B0.roa
File: 6FBFC4B8875611F1A275A3B4CE1D38B0.roa (raw, json)
Hash identifier: M4/tHtQFP46NJ8IMVADcSepGoNRz0Sgg9KqxQYJvayQ=
Subject key identifier: 21:19:DA:EE:2A:33:25:40:99:EB:42:EE:53:AC:F2:3A:00:EE:C6:24
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C1E
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/6FBFC4B8875611F1A275A3B4CE1D38B0.roa
Signing time: Fri 24 Jul 2026 11:54:34 +0000
ROA not before: Fri 24 Jul 2026 11:54:30 +0000
ROA not after: Thu 24 Jul 2036 11:54:30 +0000
asID: 36916
IP address blocks: 41.180.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3102 (0xc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 11:54:30 2026 GMT
Not After : Jul 24 11:54:30 2036 GMT
Subject: CN=6a63527a-1081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:c4:dc:d0:b7:5e:e9:2e:69:c6:ea:07:c5:
79:f1:ab:1c:1d:82:6b:cd:61:04:9c:91:52:99:0c:
b5:5f:18:ae:c2:03:06:56:7a:c9:cc:cf:19:6f:82:
12:cd:b0:2c:f8:04:28:e6:eb:48:08:54:91:6d:63:
fc:8e:d0:8c:bf:48:d3:fc:58:9f:ce:e9:96:96:b5:
27:99:6d:68:8c:4f:2e:3b:7a:fa:e1:9e:bd:90:e9:
6b:97:6e:4e:06:aa:fa:19:79:50:39:2a:d8:ee:3d:
b7:4d:b6:3c:21:a2:df:bd:24:9b:96:b9:f9:81:97:
ba:07:c1:b0:a7:47:7c:d0:69:d9:9d:71:6a:b0:28:
3f:9f:61:71:f0:06:04:3a:55:d4:b7:bd:7c:74:38:
b9:57:76:bb:43:ee:7a:f4:ba:5b:e0:c1:d2:e1:19:
89:57:bd:ac:2a:72:92:cb:d4:61:30:24:99:0e:1e:
d2:d7:5a:a1:6a:fb:37:4e:5f:27:bd:94:a4:3a:de:
c5:d5:f9:c1:4b:cd:53:36:8e:fe:50:21:dc:29:bb:
ee:05:5b:29:d9:db:ee:ee:5f:bb:22:50:53:a4:30:
96:20:b8:bf:df:e6:5f:21:ed:a6:e9:23:73:31:a7:
55:7e:33:8c:92:40:f6:49:96:e9:42:6e:92:e7:48:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:DA:EE:2A:33:25:40:99:EB:42:EE:53:AC:F2:3A:00:EE:C6:24
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/6FBFC4B8875611F1A275A3B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.16.0/20
Signature Algorithm: sha256WithRSAEncryption
24:c9:e6:bf:3b:bb:b9:98:75:ce:83:02:f3:c1:99:7e:10:ff:
dd:37:f6:65:2b:d3:c5:4d:3f:eb:de:cc:1c:60:23:b2:10:0d:
3f:13:78:f3:cf:12:e5:41:8a:83:81:e1:f8:84:48:be:9c:4c:
c3:cd:e6:29:4a:18:03:46:63:cc:72:5c:85:36:ee:d2:3b:42:
9c:74:95:19:4b:d4:92:99:e6:b1:d6:9f:36:1e:7f:88:cb:0e:
0c:71:8c:ec:95:1d:76:8d:4c:01:13:0f:1e:e2:98:41:f6:12:
65:2f:ad:e5:a1:89:98:72:f5:32:59:3e:87:0c:82:20:27:7f:
a9:9d:c4:31:b1:7b:39:86:8a:14:e1:cf:04:99:dd:57:9f:bc:
0f:cb:84:c8:2a:3a:90:bf:14:cb:63:93:81:e4:43:e4:be:f5:
9b:28:d2:93:13:fc:14:23:f1:41:f4:dd:74:cf:d4:05:1b:89:
82:35:45:4e:1f:41:dc:68:ad:f6:00:53:78:a1:ad:1d:6a:e0:
0b:52:83:3d:25:6a:e4:3e:ed:65:17:1f:45:07:2b:4c:ee:34:
ec:3d:27:f8:6d:46:22:f1:1a:90:dc:bf:c7:15:dc:d6:5a:2a:
85:50:08:fe:87:6b:87:3e:60:61:3f:ae:cb:5c:ed:c3:b4:58:
e8:9e:6b:5a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDB4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjQxMTU0MzBaFw0zNjA3MjQxMTU0MzBaMBgxFjAU
BgNVBAMTDTZhNjM1MjdhLTEwODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvrsTc0Lde6S5pxuoHxXnxqxwdgmvNYQSckVKZDLVfGK7CAwZWesnMzxlv
ghLNsCz4BCjm60gIVJFtY/yO0Iy/SNP8WJ/O6ZaWtSeZbWiMTy47evrhnr2Q6WuX
bk4GqvoZeVA5KtjuPbdNtjwhot+9JJuWufmBl7oHwbCnR3zQadmdcWqwKD+fYXHw
BgQ6VdS3vXx0OLlXdrtD7nr0ulvgwdLhGYlXvawqcpLL1GEwJJkOHtLXWqFq+zdO
Xye9lKQ63sXV+cFLzVM2jv5QIdwpu+4FWynZ2+7uX7siUFOkMJYguL/f5l8h7abp
I3Mxp1V+M4ySQPZJlulCbpLnSKGxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUIRna
7iozJUCZ60LuU6zyOgDuxiQwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzZGQkZDNEI4ODc1NjExRjFBMjc1QTNCNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQptBAwDQYJKoZIhvcNAQEL
BQADggEBACTJ5r87u7mYdc6DAvPBmX4Q/9039mUr08VNP+vezBxgI7IQDT8TePPP
EuVBioOB4fiESL6cTMPN5ilKGANGY8xyXIU27tI7Qpx0lRlL1JKZ5rHWnzYef4jL
DgxxjOyVHXaNTAETDx7imEH2EmUvreWhiZhy9TJZPocMgiAnf6mdxDGxezmGihTh
zwSZ3VefvA/LhMgqOpC/FMtjk4HkQ+S+9Zso0pMT/BQj8UH03XTP1AUbiYI1RU4f
QdxorfYAU3ihrR1q4AtSgz0lauQ+7WUXH0UHK0zuNOw9J/htRiLxGpDcv8cV3NZa
KoVQCP6Ha4c+YGE/rstc7cO0WOiea1o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:17 2026 by rpki-client