Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/83FAA6B6874F11F18357970BCF1D38B0.roa
File: 83FAA6B6874F11F18357970BCF1D38B0.roa (raw, json)
Hash identifier: LsfAZS+zphMXnt0gxgSUYOFa2stCZAbUUcPwb1X1I18=
Subject key identifier: D3:E7:C8:59:F5:5A:AD:7E:78:6F:8B:D7:94:A4:EA:0A:B5:4B:E6:4A
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C04
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/83FAA6B6874F11F18357970BCF1D38B0.roa
Signing time: Fri 24 Jul 2026 11:05:02 +0000
ROA not before: Fri 24 Jul 2026 11:04:57 +0000
ROA not after: Thu 24 Jul 2036 11:04:57 +0000
asID: 36916
IP address blocks: 41.221.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3076 (0xc04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 11:04:57 2026 GMT
Not After : Jul 24 11:04:57 2036 GMT
Subject: CN=6a6346dd-5be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:47:a1:e2:de:1c:9e:bf:b1:a6:cf:a9:83:
2b:24:44:34:10:f6:91:e8:57:7d:bd:7c:16:56:1f:
0e:2b:cc:30:61:04:38:33:db:18:20:31:f2:d9:e7:
95:d6:a9:ab:fa:4c:ec:a8:a8:9f:57:6d:84:b2:b5:
ff:99:1d:e7:7b:16:dc:e7:4e:a0:7f:6e:28:fa:a5:
bf:be:0b:0a:fe:1a:15:c7:30:a4:89:8b:77:a3:8f:
66:6f:02:5e:81:74:ec:39:9f:71:2b:63:70:fc:2b:
66:2e:0c:ed:28:5d:9c:d4:df:c2:3d:2a:6b:b0:e6:
79:ee:ba:9f:90:e4:61:70:15:36:93:da:3b:24:a9:
1c:f1:8b:ae:70:e3:94:4b:30:63:74:70:cc:6c:be:
56:96:b4:10:5a:ca:91:91:92:0e:50:ce:f5:d0:5e:
0b:70:f4:5c:57:cb:b0:df:58:de:0a:d6:60:e0:2f:
7a:d0:35:fa:60:bc:3b:b8:8f:89:72:ae:ca:2e:06:
09:59:b6:80:c2:ed:75:41:e3:7b:f9:09:fe:74:1f:
e6:d0:97:4d:d3:35:85:68:b5:20:a1:b5:dc:8b:46:
0d:98:9a:5a:1f:52:23:eb:53:57:cc:51:57:bf:4a:
cb:c5:21:59:c2:22:5e:57:7b:49:37:c9:36:bc:d5:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E7:C8:59:F5:5A:AD:7E:78:6F:8B:D7:94:A4:EA:0A:B5:4B:E6:4A
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/83FAA6B6874F11F18357970BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:fe:7e:0c:89:a1:0c:d5:35:cf:63:1d:4c:29:c8:1d:d9:fd:
d8:86:9b:cc:44:bd:69:88:50:3f:26:62:de:7a:ee:b6:d9:02:
02:e7:77:4c:23:ea:8c:1c:aa:4d:8b:d8:80:c2:d1:68:da:66:
4c:13:b1:df:36:40:54:48:f3:ce:23:bf:ea:32:aa:87:be:91:
b7:81:3a:cf:a2:8a:f5:1e:a3:17:d6:5b:10:f6:93:5f:99:ae:
8f:65:16:02:33:79:21:6c:8a:c4:02:e7:d9:2e:7b:07:94:a3:
2e:62:ed:c5:cb:a8:40:3b:01:e2:5b:a2:5d:68:8c:1c:68:44:
33:5c:32:ef:0f:97:87:83:7c:c1:86:7f:1a:48:bc:ea:67:fe:
61:bd:ac:a5:ae:b2:0b:d2:83:df:e1:c1:87:f5:98:85:64:8d:
15:a3:2e:0e:87:34:55:e5:b9:df:52:19:53:50:d9:f4:72:d4:
f0:ff:4e:cd:ca:a6:3d:74:ad:7e:8a:6a:91:00:1d:99:6f:a8:
29:db:a7:9e:eb:16:e8:67:de:ec:83:0d:e6:58:2a:fb:70:61:
94:85:34:46:db:d8:fa:20:48:ee:9b:d8:75:95:43:67:05:00:
2d:58:38:80:3c:fe:dc:e1:29:9d:1d:3d:b8:0d:d4:1f:39:d1:
65:67:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:46 2026 by rpki-client