Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/964FF11285C011F1997F7603CF1D38B0.roa
File: 964FF11285C011F1997F7603CF1D38B0.roa (raw, json)
Hash identifier: VoRwAsehWt5CmsB0sWpSKlW08CQRplYISB7aMLtVJ7M=
Subject key identifier: F4:D5:55:FE:40:31:B4:9A:E6:DE:D5:19:77:68:AE:6B:B9:78:4F:7B
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BD2
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/964FF11285C011F1997F7603CF1D38B0.roa
Signing time: Wed 22 Jul 2026 11:29:23 +0000
ROA not before: Wed 22 Jul 2026 11:29:19 +0000
ROA not after: Tue 22 Jul 2036 11:29:19 +0000
asID: 210597
IP address blocks: 41.180.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3026 (0xbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 22 11:29:19 2026 GMT
Not After : Jul 22 11:29:19 2036 GMT
Subject: CN=6a60a993-553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:33:a0:7b:0d:5d:f9:c3:12:1e:3d:57:1d:
9e:c3:41:bb:5f:98:52:eb:ad:a6:ca:cf:24:73:0c:
76:98:73:b0:e4:f0:9d:ed:cc:bc:ce:d5:af:2a:18:
cc:5a:60:9c:a4:2f:16:58:64:43:fa:a4:46:99:21:
0a:95:67:4a:be:e8:50:2e:2c:37:3e:c8:55:95:3a:
e0:ea:f4:96:de:8b:07:4d:39:64:68:fd:de:0d:3e:
58:34:8b:75:de:7c:79:3b:5a:f3:d6:a4:f9:11:4b:
66:32:3d:a6:06:4a:57:41:53:ad:b2:77:3b:34:c5:
7e:1e:fc:c1:3e:a9:6c:b3:4f:93:eb:a2:c4:ae:1a:
fd:4c:e5:e5:a7:2e:3c:29:f7:25:0f:39:6f:54:ea:
5e:a0:28:1e:f5:c2:90:d5:a8:83:6a:6a:9e:8e:c0:
b9:c1:bd:c6:51:b8:c1:98:19:6e:aa:9c:5e:92:19:
e7:89:58:e5:30:6b:0e:35:7d:62:04:9c:10:37:91:
b1:7b:45:ce:2c:2a:df:ef:2a:97:5c:91:70:c4:75:
ef:ac:3c:ca:76:17:b5:2e:db:ed:98:70:c4:63:7a:
e7:81:ee:50:a5:a1:e2:30:9c:e4:77:28:25:6f:87:
ef:b7:c4:ef:04:62:d1:e5:39:44:2e:13:19:26:d8:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:55:FE:40:31:B4:9A:E6:DE:D5:19:77:68:AE:6B:B9:78:4F:7B
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/964FF11285C011F1997F7603CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.168.0/23
Signature Algorithm: sha256WithRSAEncryption
10:78:a1:b7:f2:fc:cf:7b:77:25:e6:4b:b4:1a:1e:bb:71:1f:
40:20:8b:89:01:a0:10:cb:31:d2:9f:4e:4f:d9:2b:9a:1b:d3:
91:1a:15:52:bf:28:a4:a3:5c:fd:e5:fc:95:3f:48:e6:5f:97:
e8:58:34:81:eb:c3:f3:73:06:f4:ea:ba:bd:f9:9b:f7:a7:bd:
8b:5b:87:0a:cc:6c:5e:35:84:8c:7b:13:04:1f:f1:dd:6f:29:
2f:17:85:df:44:a7:ff:33:1f:d0:a5:9d:8e:cc:5c:cf:18:8b:
6d:5d:34:ff:26:45:ed:f4:f0:45:cf:39:db:80:e2:77:95:94:
8c:9e:3d:5b:5d:bb:b5:54:f9:c9:a4:2c:67:fa:0a:16:c2:36:
95:ed:aa:c9:8b:df:1b:e6:4d:87:88:33:c6:07:e3:49:4d:98:
51:8b:41:8f:26:94:bb:e9:95:36:cb:ab:37:36:c6:8c:1d:1c:
5f:b9:db:b7:39:6d:7c:7b:e6:78:79:0f:a7:27:9a:af:73:f0:
f5:07:10:03:8e:3e:8c:53:31:58:51:48:89:27:11:3e:d2:15:
e2:9b:3e:9b:8f:50:f4:f5:6d:84:ef:e3:96:56:c2:97:3e:01:
93:33:98:5c:7b:eb:bf:40:e3:53:f5:8a:98:f9:0b:c3:f2:3a:
25:8c:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:31 2026 by rpki-client