Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8200D882875711F1A3A7BBBACE1D38B0.roa
File: 8200D882875711F1A3A7BBBACE1D38B0.roa (raw, json)
Hash identifier: hwmWPJWYnQRdMAVb8g05keterYHWuPsgkYwHgiguW1Y=
Subject key identifier: BB:01:AA:ED:A6:B5:A6:14:99:A7:C4:3E:02:F5:7A:B5:50:0C:1C:D9
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C28
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8200D882875711F1A3A7BBBACE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:02:14 +0000
ROA not before: Fri 24 Jul 2026 12:02:10 +0000
ROA not after: Thu 24 Jul 2036 12:02:10 +0000
asID: 36916
IP address blocks: 41.180.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:02:10 2026 GMT
Not After : Jul 24 12:02:10 2036 GMT
Subject: CN=6a635446-0cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:f3:c2:25:43:89:bf:6e:05:39:09:d8:b3:
6d:b4:f7:f4:8f:58:a4:a3:ad:5a:6b:6e:8e:94:87:
66:6c:b0:16:24:61:ee:e9:7f:a6:b1:3f:e5:96:53:
d2:5f:ba:93:4b:e6:89:2b:99:09:a4:0c:61:5e:52:
c3:50:ec:b3:0a:31:70:8c:b8:d8:d8:b1:34:19:8e:
8c:10:a9:32:b8:e4:e0:a9:62:23:78:2e:e6:d7:99:
20:4d:01:07:8d:d0:62:38:04:10:31:a4:43:66:e7:
a0:13:dc:d5:2c:39:a2:d3:14:10:bb:3a:55:fa:aa:
b6:31:a9:ff:2b:db:38:b2:7a:e8:07:8a:8a:65:e6:
f6:36:d3:a8:7e:41:bb:d2:7c:5b:f8:6b:e6:8a:54:
38:bb:0d:62:26:6f:63:6f:85:ec:ad:d7:10:b1:3d:
66:c5:5f:a4:3e:31:2f:15:2e:11:05:55:50:95:88:
32:cc:f1:0b:a0:0b:5a:ce:37:3d:2d:67:64:ce:9e:
30:b0:f0:2f:a8:a6:34:4e:b8:01:7f:f1:94:e7:fe:
26:a2:d6:d7:21:61:2e:1a:7d:2d:4c:4a:5f:bc:fa:
e0:1e:40:1c:56:f2:d0:b8:0b:fe:f5:b9:4a:74:ed:
3b:b1:37:57:06:8e:d2:bb:79:57:32:0b:4e:05:dd:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:AA:ED:A6:B5:A6:14:99:A7:C4:3E:02:F5:7A:B5:50:0C:1C:D9
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8200D882875711F1A3A7BBBACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.64.0/21
Signature Algorithm: sha256WithRSAEncryption
70:0c:05:0d:b8:3e:c6:d5:83:fc:9f:9b:2b:f1:2a:d7:58:32:
11:7d:e7:13:d0:c1:ac:82:25:0d:d0:c8:48:c5:98:ce:fd:85:
69:82:e0:85:27:5d:2e:60:00:4c:8c:bb:77:ff:8a:b5:c8:9d:
88:aa:fe:3b:af:dc:29:12:f4:c4:b1:f8:79:91:31:2d:62:61:
83:9e:03:58:07:00:4a:0a:c4:10:1e:59:db:2b:e0:5e:47:c3:
8a:29:b0:0c:65:f3:e5:cd:c0:40:78:f1:6c:f8:89:50:3e:a2:
aa:e0:92:c7:9e:9e:21:fb:84:a7:ff:d1:24:34:2b:f0:3a:e9:
ff:48:d1:3d:ed:e6:71:d1:b5:4d:13:80:e7:a7:7b:84:29:19:
d6:23:94:9b:e9:ae:56:2b:db:01:5a:bc:c1:c1:da:1f:c3:fe:
d7:4e:19:9e:d1:c7:4a:5f:f4:9d:e3:60:52:64:17:af:92:4e:
e2:bd:65:95:72:8b:ed:3a:fa:0c:66:c4:8b:c0:f1:4a:1e:57:
f0:fa:74:5b:eb:2d:5b:25:76:98:65:d7:03:3b:1b:7c:ae:e4:
e1:fd:c3:ce:50:ac:a4:9a:0a:49:c0:88:37:69:14:fa:62:ea:
6a:a8:93:a5:fd:56:c1:6e:fb:7f:28:59:6b:35:e1:51:6c:51:
e1:77:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:47:07 2026 by rpki-client