Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A1F4B36A875811F1879AF8C2CE1D38B0.roa
File: A1F4B36A875811F1879AF8C2CE1D38B0.roa (raw, json)
Hash identifier: kwO5HMb5vvY4ojn5gNTxEOQft5gUITAQhWV4+2hocZk=
Subject key identifier: 7D:64:A7:75:46:5B:A4:58:58:F1:32:A7:2B:FD:8A:19:E0:34:0B:9B
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C3C
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A1F4B36A875811F1879AF8C2CE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:10:17 +0000
ROA not before: Fri 24 Jul 2026 12:10:13 +0000
ROA not after: Thu 24 Jul 2036 12:10:13 +0000
asID: 36916
IP address blocks: 41.221.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3132 (0xc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:10:13 2026 GMT
Not After : Jul 24 12:10:13 2036 GMT
Subject: CN=6a635629-25eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:fe:04:74:6c:ae:73:cb:d9:91:f8:27:90:
b3:4a:bc:7e:ac:7e:65:81:9a:45:7d:a9:ef:3b:6a:
1f:9c:96:a9:a2:c2:95:5e:6c:fd:36:75:6e:f9:6c:
6a:60:8a:38:c7:47:c8:38:ef:39:22:44:98:78:55:
cf:df:a4:f2:db:44:1e:c0:56:fb:71:f0:ea:73:45:
1e:f6:cb:cd:3f:4c:1e:22:dc:51:54:4d:f6:b5:a7:
89:d9:b8:06:6f:47:c7:ce:2f:94:c3:01:cb:8d:ed:
8d:67:34:74:6e:d9:54:0e:ff:21:84:44:e0:9b:bb:
93:f1:dd:a4:90:96:c9:aa:f6:0d:1d:9a:12:62:62:
75:7a:ba:a0:9c:1b:87:5a:39:a0:b7:f5:22:70:d6:
b8:6b:86:f0:53:9b:aa:f9:c0:a3:b4:fd:a9:85:bc:
2c:26:48:23:2d:0f:0d:81:b9:21:f3:f8:99:3c:24:
cb:3f:e4:ed:af:89:36:5f:61:85:7e:85:7c:b7:4d:
2a:aa:a4:b9:59:e7:b6:fb:d1:97:38:24:80:dd:2c:
21:62:b8:76:16:3b:fa:d8:f4:4e:68:8b:98:a4:9e:
8a:3a:44:81:17:63:e4:09:ec:89:07:9c:4a:2d:ab:
6c:4e:a0:5e:62:c7:68:c5:ca:ab:8e:5e:83:1f:2d:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:A7:75:46:5B:A4:58:58:F1:32:A7:2B:FD:8A:19:E0:34:0B:9B
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A1F4B36A875811F1879AF8C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.230.0/23
Signature Algorithm: sha256WithRSAEncryption
65:d5:4a:d3:3c:7c:b8:13:f4:bb:ed:f9:72:f1:b7:99:cc:c5:
6a:7e:b7:bd:92:f0:67:17:b0:b6:b4:ff:af:38:52:e6:5d:5c:
34:b9:a8:4d:1d:12:3a:d7:38:04:cc:a6:7d:27:6a:6f:14:76:
66:42:0d:af:8c:8d:a6:55:1b:e5:f2:b3:d9:43:af:17:62:6f:
82:06:53:88:45:59:f2:7a:a7:72:15:0f:01:5e:c8:ba:af:86:
d2:45:03:21:0e:ec:46:13:b9:13:50:44:ff:9d:6d:d8:c4:4e:
90:82:d4:8b:3b:16:11:f4:40:be:07:31:16:c8:e0:2b:81:de:
b7:d1:e9:66:43:ba:79:17:51:c9:8b:35:9a:76:f1:04:ef:c2:
c7:5c:f1:0e:9b:16:87:32:0c:a1:9a:47:ce:bf:d6:a5:50:75:
f8:9b:d0:c7:15:c9:c1:22:9c:cc:54:af:c8:66:c9:0d:94:af:
10:fc:70:d4:80:c2:53:6a:23:c5:4a:4d:f8:11:53:87:16:0a:
ea:fd:ad:c8:f3:75:d6:c8:af:7e:09:de:60:a4:11:d1:f8:8f:
9f:92:94:3c:50:9f:cb:0c:b4:34:e1:11:10:75:9a:8d:2c:2f:
3c:64:53:4b:e7:ad:25:f9:df:ae:1c:1c:7e:1b:f3:22:44:a6:
1d:7c:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:57 2026 by rpki-client