Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8BC88F44873511F1B5360BEECE1D38B0.roa
File: 8BC88F44873511F1B5360BEECE1D38B0.roa (raw, json)
Hash identifier: rEVz41LnWlR0FUVVaOEeiKdrCjNoMtroO0XTaQW62eM=
Subject key identifier: 86:B8:55:C5:FE:AD:20:D7:CC:B5:D2:4C:D6:FE:02:15:4F:9A:9F:45
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BD8
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8BC88F44873511F1B5360BEECE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:59:08 +0000
ROA not before: Fri 24 Jul 2026 07:59:03 +0000
ROA not after: Thu 24 Jul 2036 07:59:03 +0000
asID: 36916
IP address blocks: 41.180.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 07:59:03 2026 GMT
Not After : Jul 24 07:59:03 2036 GMT
Subject: CN=6a631b4b-8a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:49:63:d7:d2:69:7c:ee:43:87:8b:3d:55:
96:1f:de:cc:62:9e:ff:56:2f:aa:46:39:bf:fa:2b:
ba:46:fc:39:85:6c:e3:65:08:ea:a6:1b:ca:f0:0b:
40:98:5e:71:12:23:fd:e2:54:28:d2:aa:d5:e0:f4:
8b:c4:10:a8:76:d1:5c:d7:d6:7f:ae:f9:99:94:58:
56:91:40:92:35:b5:58:c7:84:f0:40:42:55:4a:af:
a9:ff:c6:45:d7:9a:07:5f:72:f5:26:76:05:41:df:
78:1f:fd:e5:f9:c1:d2:ea:6a:2f:b3:d4:1f:54:99:
99:d0:d2:c3:92:7c:bd:6f:e2:ad:da:e6:82:67:db:
18:8d:ef:f4:27:11:4d:62:df:87:da:8b:38:57:31:
e1:4d:7c:83:d9:59:37:50:a7:ac:3a:0d:1d:50:cf:
ba:36:fc:53:a1:df:bc:c6:27:28:f4:96:31:0e:28:
9b:aa:8a:e9:85:f6:14:cb:0d:5d:45:8c:db:15:fd:
9f:46:5d:b8:bc:e4:8f:61:b3:fb:f0:d9:ad:4b:ac:
d1:ce:4f:9e:df:ae:22:84:10:0d:a4:fd:d5:5e:a5:
aa:90:29:d8:60:4f:e7:81:58:74:b4:ac:ae:d4:05:
48:f7:37:ed:f5:58:43:7b:12:57:61:d5:56:b6:a9:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B8:55:C5:FE:AD:20:D7:CC:B5:D2:4C:D6:FE:02:15:4F:9A:9F:45
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8BC88F44873511F1B5360BEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.248.0/22
Signature Algorithm: sha256WithRSAEncryption
53:46:5d:19:c0:f9:92:4b:51:f0:74:9e:91:41:5e:a8:76:b4:
d6:4b:d1:a5:5e:bb:23:24:87:10:9f:8b:7f:f9:09:41:fe:aa:
20:40:21:02:bd:92:a5:a8:e5:b4:4b:be:06:fe:70:12:60:e0:
ff:bc:47:f2:8f:29:7d:7e:c5:c2:21:a6:11:86:e0:4a:0c:0c:
cd:6b:a1:b2:aa:f9:e9:b5:74:ff:08:b0:7e:a6:b9:36:c2:e9:
1c:d7:8d:48:a8:bf:78:2f:68:db:3b:e8:f5:c4:02:5b:e0:74:
fb:9d:39:3d:9c:b9:83:22:5d:f6:a0:3d:a2:d7:c8:aa:94:a8:
53:62:67:6b:29:b7:26:14:b3:ed:b4:e6:ff:9e:db:27:8f:d3:
cc:8d:6a:d5:73:77:e9:5b:5b:32:68:cb:f9:49:4c:d2:eb:88:
21:44:8e:dd:9d:92:e6:dc:1b:d5:56:e1:18:a2:1a:50:a7:26:
e3:68:b9:14:1d:59:16:3e:b6:93:47:50:4f:5e:ac:20:d5:e2:
4c:0d:03:fd:fb:a2:b9:c5:41:24:a2:4c:71:d7:66:d8:c3:12:
ce:fa:99:d9:1f:3c:66:d8:d7:a5:78:41:59:f5:25:0c:0c:75:
49:39:33:88:ca:de:98:43:20:d0:b2:98:1d:dd:e0:c3:a8:02:
f2:92:ec:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:07 2026 by rpki-client