Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/790BA6FC874E11F1BF119302CF1D38B0.roa
File: 790BA6FC874E11F1BF119302CF1D38B0.roa (raw, json)
Hash identifier: bVCFxPwpoWY/xd7UanCfWwguBHLxL301nBh0Y1Nznc4=
Subject key identifier: 78:0B:F6:1A:3E:AB:09:58:A9:D8:AF:A9:B6:A8:17:EB:9E:CE:7F:97
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BF6
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/790BA6FC874E11F1BF119302CF1D38B0.roa
Signing time: Fri 24 Jul 2026 10:57:34 +0000
ROA not before: Fri 24 Jul 2026 10:57:29 +0000
ROA not after: Thu 24 Jul 2036 10:57:29 +0000
asID: 36916
IP address blocks: 41.180.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3062 (0xbf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:57:29 2026 GMT
Not After : Jul 24 10:57:29 2036 GMT
Subject: CN=6a63451d-f4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:9d:de:ef:9b:be:f6:44:c2:a6:c6:8d:69:
fb:79:c0:f3:f5:84:32:a4:29:d3:0d:2f:b7:84:a7:
9b:e9:c0:93:19:0a:c1:28:30:ba:7c:c1:78:ed:4c:
be:af:f3:7b:60:3b:6c:fc:25:5d:6a:47:28:00:43:
f8:ea:11:93:04:af:6a:da:6c:30:e3:08:92:0a:5f:
ec:d6:57:c6:94:81:33:05:f6:97:f1:8a:87:c5:f8:
55:b9:7e:2d:c6:85:69:2e:00:2d:9b:e3:2a:d4:5f:
80:9d:24:08:bb:0f:40:76:92:34:5c:c1:82:d8:99:
f5:c7:50:50:59:f1:e8:7d:2b:c9:63:dc:0d:c3:4a:
07:f9:3b:77:13:23:0f:9a:b1:c6:4c:94:04:3d:3e:
c8:62:40:65:0d:86:3e:3a:f2:d4:0d:29:b1:12:eb:
ac:44:03:ef:c6:ca:c7:30:6f:7f:f4:6e:51:91:73:
2e:4b:b7:b9:30:56:46:81:08:8c:27:24:d0:00:95:
b0:6c:15:62:1b:99:cb:8d:fb:57:4f:d8:f2:ad:ed:
39:8a:9f:4a:43:1f:b1:0a:94:35:4d:5f:c9:80:0d:
5e:77:27:e1:2e:b7:1d:e9:61:35:6a:c0:de:3a:b5:
81:5a:84:b3:81:e9:c2:3e:f8:18:a6:f3:60:13:2f:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0B:F6:1A:3E:AB:09:58:A9:D8:AF:A9:B6:A8:17:EB:9E:CE:7F:97
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/790BA6FC874E11F1BF119302CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.32.0/21
Signature Algorithm: sha256WithRSAEncryption
09:2d:c1:64:2b:d5:6d:b6:fc:bf:7a:2a:99:01:36:2b:76:2a:
b0:0d:08:27:e7:6c:a8:fa:9d:85:f6:7a:cb:71:08:63:f5:3d:
32:a4:a7:a0:f5:c2:ad:0c:87:15:58:c4:69:da:33:20:33:0d:
ca:d8:aa:dd:86:1d:9a:90:60:6b:1b:2d:6f:b4:d3:fe:88:4e:
62:38:f7:55:c4:67:31:72:1c:9a:d8:f2:28:2a:22:6a:7b:6c:
d1:79:aa:64:4c:1e:d2:38:78:2b:22:90:bf:9b:95:9d:4a:05:
2f:64:50:57:17:19:f1:cf:71:42:06:59:c6:43:20:e2:9e:e0:
bb:4b:96:75:29:cd:df:a3:f7:36:77:7f:f5:b1:5b:0e:45:e4:
ab:77:73:e1:b5:f4:ce:e2:7c:b0:03:8c:df:06:4a:15:8b:9e:
af:70:41:60:80:34:b6:b6:49:f8:47:78:c5:3f:bb:0a:31:27:
79:f9:c2:1f:1f:ce:09:59:3f:92:c9:24:f5:bc:d0:f4:9d:d6:
7f:a9:47:b4:f7:38:40:13:77:83:82:27:79:04:bc:ff:87:f0:
96:da:c4:08:86:e0:a6:ba:32:d2:a4:72:a5:7b:7f:a3:ae:12:
00:3f:19:cd:c7:13:46:a7:f6:10:1a:aa:4c:e0:94:f3:48:19:
3a:dc:5e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:47:16 2026 by rpki-client