Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9C0B9732874B11F19CE34CF2CE1D38B0.roa
File: 9C0B9732874B11F19CE34CF2CE1D38B0.roa (raw, json)
Hash identifier: PIjJszq7BkclERK/jAXV5EJ4VC8m2SiK0jAyH7pHv2Q=
Subject key identifier: 79:ED:2E:DA:BA:EF:95:D5:14:B4:3F:27:50:F3:22:E2:13:BC:F6:8E
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BF0
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9C0B9732874B11F19CE34CF2CE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:37:04 +0000
ROA not before: Fri 24 Jul 2026 10:37:00 +0000
ROA not after: Thu 24 Jul 2036 10:37:00 +0000
asID: 36916
IP address blocks: 41.180.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3056 (0xbf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:37:00 2026 GMT
Not After : Jul 24 10:37:00 2036 GMT
Subject: CN=6a634050-1095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:86:29:80:a0:f6:2f:ae:be:2c:7d:c7:15:
71:14:07:4d:30:cc:e6:3f:ca:bf:98:f9:1a:86:f4:
4e:f7:81:e0:03:40:2b:ec:6e:49:ee:3e:48:bb:68:
3f:a5:43:4b:75:ca:71:42:3a:65:76:6d:80:59:5b:
c9:0f:d0:91:e6:34:80:15:6f:55:af:e9:c9:b7:36:
a8:5e:3e:ae:60:6d:32:9f:ca:19:1b:7c:65:53:a6:
68:f1:a2:5b:38:14:af:22:24:b8:33:2b:b7:23:22:
e9:21:c5:50:62:14:db:2c:69:39:c9:7d:89:15:e6:
2b:db:dd:9e:bb:42:e9:5b:91:9a:af:83:ae:8b:02:
17:e0:53:79:c4:ba:e8:7e:48:81:90:01:91:a5:ba:
3d:fb:cc:1d:ce:52:39:7e:78:98:7e:84:a3:23:b4:
77:b0:72:bd:4c:a3:c3:30:35:cb:48:4f:e5:93:fe:
68:46:c5:9c:99:6e:00:fd:e3:a9:62:2a:45:72:d0:
92:d6:29:92:28:aa:59:fe:af:da:ef:5d:e1:fb:12:
a8:22:5a:97:99:ae:d6:15:e6:ca:d8:f3:af:84:c5:
8e:17:f5:4b:8c:27:63:65:c3:44:ac:29:cb:b2:66:
62:47:7e:d9:8f:98:1c:77:76:80:0b:f4:1a:a5:ff:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:2E:DA:BA:EF:95:D5:14:B4:3F:27:50:F3:22:E2:13:BC:F6:8E
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9C0B9732874B11F19CE34CF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.12.0/22
Signature Algorithm: sha256WithRSAEncryption
82:72:82:ef:a6:a5:c7:f3:07:9b:98:b4:1f:35:89:9f:14:00:
0f:99:df:b5:be:91:d4:ae:57:de:ed:e6:b6:aa:99:b8:6e:cf:
02:85:9e:06:9a:cb:91:fb:ed:b1:cb:cd:60:e1:b5:58:09:94:
6d:68:fe:1c:7e:ad:f2:e8:15:d3:2c:fe:38:53:d9:b4:de:dd:
82:0d:df:aa:fb:b6:f5:0b:8a:f6:28:18:fc:0d:c8:32:eb:f4:
ad:f5:0a:8d:da:4e:0e:e4:21:6a:ba:0b:79:c5:19:01:42:0a:
8c:4e:62:74:0d:3d:40:26:71:d1:e5:c8:66:db:36:d5:f1:22:
86:8c:7e:ce:41:c7:d7:7e:f6:4c:80:a0:11:60:25:ef:cf:bb:
76:e2:c9:01:fb:7d:99:cd:0f:86:ff:12:24:75:77:e9:ab:7b:
f2:27:ce:af:c9:3d:13:02:7f:5d:d3:d0:8d:ca:86:2a:af:8f:
28:ec:d9:01:ec:0b:c8:a0:d9:f9:9b:b0:54:67:7b:c2:2d:9a:
74:ff:9e:64:89:bf:34:02:c0:2d:b9:33:ca:b2:e7:6f:bd:cb:
d7:78:3f:b8:e4:3e:38:ca:3f:bc:1e:b8:9f:3b:35:83:f3:45:
a9:36:7e:dc:b7:d9:a1:43:e7:27:4e:be:a3:38:73:95:4f:30:
cb:e9:39:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:04 2026 by rpki-client