Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AF4A6D04875611F1ADDC8BB6CE1D38B0.roa
File: AF4A6D04875611F1ADDC8BB6CE1D38B0.roa (raw, json)
Hash identifier: k+jXbSyTG83kibSVGEcQAKE0KxdO3o3DJnA1pCE8xbE=
Subject key identifier: BB:61:89:FF:AD:34:71:99:FB:65:A2:51:03:0A:19:80:EB:C7:60:2F
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C22
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AF4A6D04875611F1ADDC8BB6CE1D38B0.roa
Signing time: Fri 24 Jul 2026 11:56:21 +0000
ROA not before: Fri 24 Jul 2026 11:56:17 +0000
ROA not after: Thu 24 Jul 2036 11:56:17 +0000
asID: 36916
IP address blocks: 41.180.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3106 (0xc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 11:56:17 2026 GMT
Not After : Jul 24 11:56:17 2036 GMT
Subject: CN=6a6352e4-aa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:7f:1f:96:e7:28:06:58:b2:4e:28:9b:a6:
84:7b:2c:d2:3c:16:1b:76:2a:f6:86:a4:1b:cf:f6:
82:75:3e:5b:e8:73:23:53:e3:57:9f:fe:89:09:d7:
b0:86:80:3a:7c:13:f0:42:99:7c:23:ff:63:a4:0a:
05:7d:dd:4f:57:dd:04:bd:fc:bb:64:e9:cd:d3:3b:
ff:6e:54:bc:e5:03:be:45:1e:81:a1:da:63:1b:bf:
f7:67:9d:6e:b3:cf:7c:de:f7:e3:3a:de:8c:35:55:
a0:33:d4:22:70:77:95:55:90:cc:f7:65:9b:41:d5:
d2:55:92:bd:87:1c:f4:4b:90:a9:bc:e3:e3:00:af:
37:4b:f8:8e:1a:89:61:51:71:f6:2a:2e:1c:24:dd:
c8:18:3b:16:8e:de:6b:d8:6b:87:bc:bf:ec:4f:9f:
c5:6e:fc:5d:e2:60:18:a9:87:0c:b0:3c:51:9c:a1:
f1:4c:ca:c6:6d:20:b7:68:9a:5f:26:b2:fd:5c:f9:
3d:a0:a9:f7:a2:3c:7c:bf:b8:b4:27:25:c0:fe:74:
44:af:1b:e3:17:28:14:3f:f2:11:f0:3f:25:52:3d:
85:25:5c:e6:d2:d5:28:14:f7:13:e7:15:11:99:00:
ba:b9:20:71:a3:48:e9:f4:55:59:9d:ec:3a:65:35:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:61:89:FF:AD:34:71:99:FB:65:A2:51:03:0A:19:80:EB:C7:60:2F
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AF4A6D04875611F1ADDC8BB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.44.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:30:9b:ee:4d:e7:c1:08:5c:d0:f0:bd:7c:58:0c:e4:ef:f6:
4f:4f:79:4e:43:90:04:ae:4d:e4:77:72:13:f0:de:c6:39:70:
cb:85:d0:05:cc:38:d5:e3:e2:22:45:80:ef:42:aa:47:88:6d:
78:3f:97:cd:20:1f:e2:7a:0d:c0:6a:ae:f9:10:17:10:1a:71:
f9:f4:d0:c4:07:b7:ce:52:07:ce:8a:a0:bd:36:93:17:25:5e:
c8:e7:db:ab:f0:d3:4d:7d:d7:89:37:3e:0b:9d:f2:f2:3b:a1:
a0:4f:fc:c9:f4:33:eb:9c:2b:b5:f6:94:b8:63:76:26:b6:f3:
68:1f:07:af:e0:34:12:c0:03:18:5c:18:6c:a1:6e:c1:02:57:
1e:06:c5:1e:6d:f3:94:e3:e8:c1:e1:db:56:fd:58:90:c7:43:
69:da:cb:e5:3b:3e:45:09:33:a7:86:4b:aa:96:66:92:e2:a9:
92:0f:79:e6:df:6d:7c:d7:a8:b7:06:70:f7:53:be:e7:00:e6:
12:80:92:ce:25:8f:27:28:f8:71:df:f0:68:3b:0d:45:2e:4b:
cb:8b:77:cf:f7:af:1c:ec:95:36:d5:ca:36:67:71:68:23:83:
b2:51:da:e6:bd:a0:ce:1b:3a:4c:51:53:79:b7:fa:7b:1b:eb:
64:1b:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:09 2026 by rpki-client