Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/78892848874A11F19711DDEBCE1D38B0.roa
File: 78892848874A11F19711DDEBCE1D38B0.roa (raw, json)
Hash identifier: fImoFZTXkFQu1tqTuPbl7buuuM9mO2MyG9zqxxhX+EE=
Subject key identifier: 6D:F1:53:22:68:D9:8F:47:5E:9F:30:61:E7:3B:BD:EB:5D:B4:42:05
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BE4
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/78892848874A11F19711DDEBCE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:28:55 +0000
ROA not before: Fri 24 Jul 2026 10:28:51 +0000
ROA not after: Thu 24 Jul 2036 10:28:51 +0000
asID: 36916
IP address blocks: 41.180.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3044 (0xbe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:28:51 2026 GMT
Not After : Jul 24 10:28:51 2036 GMT
Subject: CN=6a633e67-d7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:66:23:e6:f5:6f:c5:22:f5:6c:23:1a:f2:
6f:ba:20:42:33:86:39:82:ad:4b:76:73:e3:af:8a:
53:7d:cb:62:41:9f:1a:02:bd:5a:8e:7e:64:a7:ac:
e0:9a:c1:4c:ba:55:5a:7f:67:76:c1:3a:5b:22:aa:
f8:b1:ab:4a:36:21:42:80:91:99:9a:53:78:9d:de:
c7:0a:bc:dc:2f:44:e9:2c:1b:55:d0:53:33:28:55:
44:2e:07:87:a0:25:cd:6a:5f:4a:85:0a:b9:ef:de:
d1:84:be:65:5f:8a:90:78:a6:52:a5:29:57:78:1d:
3b:8e:68:e0:24:b7:a8:a2:d4:7a:be:a7:73:32:24:
45:44:15:92:9b:c7:3d:44:49:7d:52:7e:b7:e7:5d:
5e:87:41:71:95:0c:96:86:65:33:69:2b:56:6a:13:
41:f6:83:0f:54:eb:71:e4:fa:6d:d2:e6:fd:0a:5d:
58:a8:3f:54:40:31:03:18:91:9d:6c:5b:b8:e0:9d:
58:78:87:af:08:03:24:bc:d0:39:96:37:62:84:6e:
a7:ce:84:41:f0:21:b4:00:b5:84:d4:4d:c9:b7:f1:
5d:5e:3d:6d:05:d0:31:4b:6c:83:51:e5:30:45:cb:
31:a9:80:bd:53:20:10:60:d4:b2:4c:85:10:ae:28:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:53:22:68:D9:8F:47:5E:9F:30:61:E7:3B:BD:EB:5D:B4:42:05
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/78892848874A11F19711DDEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.94.0/23
Signature Algorithm: sha256WithRSAEncryption
45:d0:d9:5d:34:3b:5e:95:86:c8:ad:57:16:94:e1:73:68:53:
fe:67:5d:b9:a3:7f:2c:81:c4:39:08:64:09:d0:d8:31:cb:5e:
ea:62:e3:c4:9b:1a:e6:cb:04:4e:d5:06:ec:de:20:f9:fe:a3:
d0:1d:fb:22:bb:b0:3e:c5:0e:6a:6d:33:86:b3:1d:cb:a6:58:
6c:a8:15:ab:45:dc:8d:aa:b7:c4:af:a2:dd:2c:b3:8d:ec:53:
f6:dc:5a:e4:49:f3:6c:2a:1a:95:8a:3b:8d:8f:96:23:12:6c:
07:db:f1:eb:b1:c8:aa:a0:a6:5d:d1:08:19:b4:27:f0:96:1e:
2c:d9:83:54:39:17:e9:e4:16:37:c0:5a:99:84:77:1b:2c:c7:
d1:0a:55:ab:7f:83:7e:af:84:3f:99:14:ba:5b:1d:01:04:02:
8b:97:ad:d9:9d:18:ac:7f:46:88:2e:1d:de:77:da:d5:63:f3:
42:34:c7:20:b5:c9:d4:16:41:3b:94:e8:af:33:cd:06:99:f6:
67:57:da:d1:46:be:e3:88:0c:1c:c3:b6:32:e7:83:8e:4e:83:
53:49:94:bf:94:9b:e4:79:67:d7:54:76:b8:2a:eb:9e:7a:4a:
4b:5d:16:98:e9:b4:f6:01:7b:bf:ee:eb:7a:e3:d9:b2:eb:8b:
22:a2:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:39:51 2026 by rpki-client