Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B09482D2874F11F1A630E60BCF1D38B0.roa
File: B09482D2874F11F1A630E60BCF1D38B0.roa (raw, json)
Hash identifier: YdYHgJ/UZFYoINBCleGvI5/pPR0MSbNcF/GtjipNfLU=
Subject key identifier: F2:D0:69:8B:3C:72:FD:8A:5B:6E:FC:0E:11:9F:DA:92:91:95:A8:C3
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C06
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B09482D2874F11F1A630E60BCF1D38B0.roa
Signing time: Fri 24 Jul 2026 11:06:16 +0000
ROA not before: Fri 24 Jul 2026 11:06:12 +0000
ROA not after: Thu 24 Jul 2036 11:06:12 +0000
asID: 36916
IP address blocks: 41.221.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 11:06:12 2026 GMT
Not After : Jul 24 11:06:12 2036 GMT
Subject: CN=6a634728-766a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:52:c4:5a:5d:35:ab:60:1b:06:55:d4:00:
79:51:5c:47:3c:14:cd:0e:89:ae:2d:ec:cf:6d:8c:
c9:f5:07:e7:b6:8b:de:6b:6b:2d:40:de:7e:b6:e6:
ce:8d:2e:a8:ef:55:66:fe:9b:89:b8:33:c1:e7:70:
24:28:cc:a0:6f:96:4e:eb:1c:23:5c:38:e8:81:4c:
8a:a1:4c:c7:77:76:d5:db:8f:e7:10:f8:5e:a8:be:
34:3c:92:69:7d:4f:ef:3e:b5:f8:e6:fa:d7:df:93:
3d:92:4e:41:01:43:d5:15:55:e6:fa:a4:37:09:fa:
df:93:c4:47:12:24:2d:4c:95:78:c2:a0:e2:07:e6:
b6:0c:ea:cd:19:04:dd:d3:fd:b3:2a:a0:43:0b:b6:
f8:8e:77:03:e9:4b:82:8c:d5:bf:d1:04:e3:5c:e4:
99:f1:dd:69:15:5c:6c:db:12:1a:9e:38:26:32:e6:
15:34:a6:b2:69:14:a3:9f:09:63:1d:80:a5:c6:88:
53:f1:1d:d1:6f:35:49:9d:c4:d3:3d:e1:14:d5:88:
4c:7e:c8:00:40:dc:5f:86:18:a8:61:21:f0:16:45:
a2:be:26:3f:b9:4a:3c:a7:f2:ab:c6:bb:34:51:76:
6d:38:06:d1:08:eb:ae:42:ca:14:ad:c7:5e:b5:d5:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D0:69:8B:3C:72:FD:8A:5B:6E:FC:0E:11:9F:DA:92:91:95:A8:C3
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B09482D2874F11F1A630E60BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.234.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a2:22:b7:93:39:01:a0:28:80:66:3e:c4:df:54:35:3f:81:
76:8c:18:98:66:37:14:cf:96:eb:c3:f0:b4:02:f6:c4:64:d7:
2c:5d:5a:58:a5:35:2e:bd:9f:c0:34:e5:6b:7f:f5:7c:d7:39:
f3:69:c5:ed:1e:2a:df:54:9d:8a:34:a7:37:83:9d:0e:dc:d1:
56:4e:ba:1c:3c:52:e8:47:b4:82:fe:df:44:3c:d1:a8:cc:4c:
09:3a:36:5a:0e:e0:48:8b:f9:7f:6e:17:0b:50:ff:3b:c4:cb:
c2:74:7b:c6:4c:26:9e:61:dd:24:2f:38:ce:09:4b:00:6c:58:
11:a3:49:0d:a4:b8:12:de:fb:cd:1d:3c:21:e5:c4:8d:4b:be:
86:9c:e0:9a:4f:6f:0c:02:44:d9:49:06:74:92:c6:00:e3:81:
32:93:a2:e9:fc:93:74:59:ef:28:b3:21:ac:80:95:a3:9d:8c:
bb:dc:53:bb:3a:cc:d9:c1:d8:b3:a6:44:0c:40:4e:b7:f8:5c:
6a:da:5b:1f:d9:70:63:4f:0c:19:6f:57:4c:51:ee:91:ce:64:
13:c9:4c:0d:42:d0:27:25:8a:60:40:a1:0c:6f:0e:5b:af:e8:
79:c1:30:a0:60:39:4e:f7:13:11:56:69:e2:5d:f9:74:e4:31:
78:94:bf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:17 2026 by rpki-client