Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9A4BB690874E11F19B7AA802CF1D38B0.roa
File: 9A4BB690874E11F19B7AA802CF1D38B0.roa (raw, json)
Hash identifier: 7uLpFMlqhhKZ3e8oGXP+f3XxR3K1WodOVyAp1CuLq5w=
Subject key identifier: 94:7D:37:D0:C7:34:EB:63:26:90:DD:E2:B4:F8:71:55:C7:6F:EA:73
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BF8
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9A4BB690874E11F19B7AA802CF1D38B0.roa
Signing time: Fri 24 Jul 2026 10:58:29 +0000
ROA not before: Fri 24 Jul 2026 10:58:25 +0000
ROA not after: Thu 24 Jul 2036 10:58:25 +0000
asID: 36916
IP address blocks: 41.180.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:58:25 2026 GMT
Not After : Jul 24 10:58:25 2036 GMT
Subject: CN=6a634555-09d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:4e:81:6f:67:81:a9:5b:b7:2d:9c:35:42:
23:57:dc:c7:b5:9e:cb:fe:c2:59:ce:85:4e:9c:08:
3a:7c:0c:db:24:dd:f7:71:6c:0b:44:70:20:1b:d2:
37:97:ca:15:9e:fa:cd:3a:4d:f7:26:c4:1c:fc:a9:
8d:5c:e7:dc:03:76:5b:66:bc:9d:0a:f9:95:6f:e7:
8d:76:7f:5f:4a:14:9d:78:e1:d9:70:16:c9:12:54:
2d:bf:b9:61:cc:34:e9:45:79:6e:6a:d2:10:1e:93:
d1:e3:02:0b:a6:b1:cb:75:b1:ad:61:cc:97:eb:c9:
c4:7a:97:f8:7b:7e:8b:5a:e1:ba:15:77:ac:6b:f5:
5d:93:eb:43:1a:57:ac:70:30:3a:06:ac:5d:09:8b:
d4:e3:6a:29:3c:86:a0:29:29:14:d9:f7:53:a6:d8:
e3:75:ee:56:02:2d:32:56:49:a0:6f:1e:d6:a1:03:
b5:f5:50:03:37:a5:fc:cb:3f:6f:19:63:01:64:a7:
b9:77:23:3f:71:db:ea:17:62:67:85:44:51:dc:17:
b9:83:e8:7f:f3:6b:ef:e2:78:89:de:ff:55:4f:a8:
28:90:ce:5e:2b:1c:1d:e9:5d:73:ea:71:d6:81:65:
9b:38:1e:96:55:f5:16:aa:ca:df:b1:a1:c3:1c:9f:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7D:37:D0:C7:34:EB:63:26:90:DD:E2:B4:F8:71:55:C7:6F:EA:73
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9A4BB690874E11F19B7AA802CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:38:ef:04:24:07:cb:56:c0:d9:ea:48:2b:4d:3f:c8:d8:99:
fd:de:ae:40:cf:3c:16:1c:85:27:fc:b4:46:04:18:49:13:52:
21:ed:93:f4:c4:48:9b:19:5f:9f:4d:c4:64:90:74:fa:07:86:
1f:f5:bf:0c:5e:67:b3:08:93:35:79:1c:ce:46:97:13:3e:88:
a9:54:d1:fc:62:66:4e:ac:e9:29:af:a8:4b:86:9c:fb:6a:58:
cf:8a:23:85:b4:4e:f7:60:05:43:3a:fc:05:d9:31:e6:e7:44:
69:25:d2:2b:12:03:81:4b:2c:2f:f0:22:13:c5:f7:5d:3c:7a:
fa:64:36:5f:07:27:53:d0:c5:71:3e:76:0b:b5:27:ed:0e:38:
2d:1b:30:ec:a9:2e:f5:23:09:d4:17:9f:32:46:a6:6f:42:bc:
3e:d2:fa:11:13:67:d7:fe:7e:52:02:f5:9b:b8:e7:8f:87:3a:
dd:d4:71:27:20:d0:8f:5f:4c:a0:3b:95:70:98:e8:6c:c6:ab:
bf:0e:80:6f:fa:84:1d:4f:95:08:01:53:b0:a4:57:c4:0c:6d:
60:e1:84:5d:e5:19:bf:1b:8a:8e:66:83:0a:47:2f:bd:e1:bb:
f5:92:85:d5:f2:e8:2c:2f:cd:b0:8c:9c:6a:15:0a:a9:1b:bf:
c9:7c:c2:ed
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjQxMDU4MjVaFw0zNjA3MjQxMDU4MjVaMBgxFjAU
BgNVBAMTDTZhNjM0NTU1LTA5ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXPk6Bb2eBqVu3LZw1QiNX3Me1nsv+wlnOhU6cCDp8DNsk3fdxbAtEcCAb
0jeXyhWe+s06TfcmxBz8qY1c59wDdltmvJ0K+ZVv5412f19KFJ144dlwFskSVC2/
uWHMNOlFeW5q0hAek9HjAgumsct1sa1hzJfrycR6l/h7fota4boVd6xr9V2T60Ma
V6xwMDoGrF0Ji9Tjaik8hqApKRTZ91Om2ON17lYCLTJWSaBvHtahA7X1UAM3pfzL
P28ZYwFkp7l3Iz9x2+oXYmeFRFHcF7mD6H/za+/ieIne/1VPqCiQzl4rHB3pXXPq
cdaBZZs4HpZV9Raqyt+xocMcn9rFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlH03
0Mc062MmkN3itPhxVcdv6nMwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzlBNEJCNjkwODc0RTExRjE5QjdBQTgwMkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIptCgwDQYJKoZIhvcNAQEL
BQADggEBAI447wQkB8tWwNnqSCtNP8jYmf3erkDPPBYchSf8tEYEGEkTUiHtk/TE
SJsZX59NxGSQdPoHhh/1vwxeZ7MIkzV5HM5GlxM+iKlU0fxiZk6s6SmvqEuGnPtq
WM+KI4W0TvdgBUM6/AXZMebnRGkl0isSA4FLLC/wIhPF9108evpkNl8HJ1PQxXE+
dgu1J+0OOC0bMOypLvUjCdQXnzJGpm9CvD7S+hETZ9f+flIC9Zu454+HOt3UcScg
0I9fTKA7lXCY6GzGq78OgG/6hB1PlQgBU7CkV8QMbWDhhF3lGb8bio5mgwpHL73h
u/WShdXy6CwvzbCMnGoVCqkbv8l8wu0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:17 2026 by rpki-client