Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BBD7C1C8873511F1AD723EF0CE1D38B0.roa
File: BBD7C1C8873511F1AD723EF0CE1D38B0.roa (raw, json)
Hash identifier: 4yiAn70UW4j7b0ZY01Y9ysVnpSDn5YW99zVrSuPx8Ik=
Subject key identifier: 4D:23:A4:00:46:4A:8C:03:3C:91:61:83:55:15:D5:F1:56:32:E9:DB
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BDA
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BBD7C1C8873511F1AD723EF0CE1D38B0.roa
Signing time: Fri 24 Jul 2026 08:00:28 +0000
ROA not before: Fri 24 Jul 2026 08:00:24 +0000
ROA not after: Thu 24 Jul 2036 08:00:24 +0000
asID: 36916
IP address blocks: 41.180.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 08:00:24 2026 GMT
Not After : Jul 24 08:00:24 2036 GMT
Subject: CN=6a631b9c-31fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:1b:34:16:ca:e5:7c:a8:b2:c2:70:05:00:
6f:06:9c:5c:6f:8b:1f:58:04:25:3c:78:d8:77:31:
8c:2d:5b:34:94:a0:81:9f:b9:7a:de:6c:05:91:5c:
82:4e:3d:fa:84:4f:30:f2:ec:36:3a:8f:b2:87:40:
26:e9:d9:87:7d:59:6a:ba:5f:ea:50:2a:cc:19:93:
df:8c:30:69:b6:ff:59:55:76:0b:1a:ff:8b:42:c5:
73:97:7e:f9:86:33:25:2e:0c:40:b7:a9:33:9e:c5:
05:d3:a7:1d:b1:45:cb:fc:28:0d:c5:21:9f:3c:bf:
ee:4a:4b:72:90:40:06:50:9c:fc:cb:e4:34:aa:28:
8b:20:46:56:c1:73:f9:ce:5e:4b:d5:1d:89:5a:0a:
69:1e:b0:20:3a:b8:b8:7c:26:aa:e3:8e:5f:8f:3c:
60:28:a8:ff:46:3c:fe:0b:23:c0:47:57:00:4f:8a:
91:e9:cb:04:31:ee:2d:c4:ba:d9:e0:b4:21:c8:5e:
4f:9c:81:48:bd:aa:46:ea:52:5e:af:f5:ed:d2:8a:
ae:a1:ae:49:5a:70:6c:81:0d:ff:c5:3c:a7:bc:f5:
38:e3:02:c0:ab:b2:ce:ac:8d:6a:ff:e8:ac:f2:8d:
2f:4a:1d:fc:fe:d0:35:58:d9:f0:09:f5:d2:76:47:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:A4:00:46:4A:8C:03:3C:91:61:83:55:15:D5:F1:56:32:E9:DB
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BBD7C1C8873511F1AD723EF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.252.0/22
Signature Algorithm: sha256WithRSAEncryption
81:2d:06:07:0f:35:f8:c4:00:9b:20:90:b9:f0:81:60:a9:de:
e0:82:83:b4:fa:c0:40:30:67:2f:e8:f3:3b:28:1a:9c:a1:02:
b9:dc:23:7d:a0:d5:1c:67:0b:7c:99:29:13:27:f8:8c:fc:3d:
07:0f:66:c2:41:a7:51:77:7d:52:57:87:7d:30:13:db:65:24:
80:fd:f8:29:de:b6:75:1f:0b:72:e1:71:eb:ff:96:36:fe:9e:
df:01:46:f5:ac:f3:20:8b:f9:74:a3:04:30:ba:4c:c6:de:c0:
a0:67:51:50:51:94:fa:78:95:33:56:a6:d1:40:da:88:a8:8e:
23:22:1f:81:d1:69:2e:cd:89:d2:c1:8e:e6:e4:7a:59:f6:72:
76:7c:77:13:e4:31:8a:d3:3b:30:e0:6b:48:c7:c7:1a:b5:a8:
be:0b:8a:3b:bb:c1:34:d2:63:00:47:24:bd:30:79:8a:88:11:
c8:8a:7c:c2:0d:54:f2:3a:11:82:84:3c:0e:60:00:6b:b9:b8:
6f:ca:b3:0c:0e:c0:17:36:21:11:aa:81:eb:00:e7:2c:d9:07:
5b:58:23:2e:e7:71:e3:10:58:ff:76:12:7e:c7:41:af:23:18:
51:1f:31:eb:45:b5:b3:04:8d:ec:c9:1e:79:7e:4d:ed:aa:61:
0e:ae:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:58 2026 by rpki-client