Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BDCF158885C011F1BC9FD703CF1D38B0.roa
File: BDCF158885C011F1BC9FD703CF1D38B0.roa (raw, json)
Hash identifier: 1NBjDBHTZun7Eb35Amhnvn7nKQxeSDTMTuGEWV4xApk=
Subject key identifier: 10:04:74:2A:49:48:C3:4A:D9:58:D5:2B:C5:A3:E7:07:70:B3:5F:4E
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BD4
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BDCF158885C011F1BC9FD703CF1D38B0.roa
Signing time: Wed 22 Jul 2026 11:30:29 +0000
ROA not before: Wed 22 Jul 2026 11:30:25 +0000
ROA not after: Tue 22 Jul 2036 11:30:25 +0000
asID: 60064
IP address blocks: 41.180.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3028 (0xbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 22 11:30:25 2026 GMT
Not After : Jul 22 11:30:25 2036 GMT
Subject: CN=6a60a9d5-2fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:d5:41:53:11:7c:3e:b4:f1:99:95:64:94:
5e:38:45:3a:f2:5f:df:88:6a:c3:51:db:bc:04:3a:
21:d5:05:27:b4:88:c2:a9:80:fd:1e:6b:73:18:5c:
df:d6:18:e7:b3:ba:ec:52:1d:fd:80:5e:3d:38:04:
a0:b1:ae:61:88:da:57:d7:4e:91:8d:da:5f:47:4a:
6c:58:e7:35:a0:7b:1a:80:64:ae:98:70:42:85:f7:
c7:fa:18:9b:e8:ce:20:49:5e:7d:75:32:4a:4a:1a:
4a:02:59:96:42:4f:14:45:c2:e0:57:b4:c4:81:e5:
4a:e8:07:01:77:8d:4a:6c:52:15:02:52:68:da:31:
50:1e:11:7b:a6:6d:ac:dd:66:d0:d5:58:cd:a1:23:
4d:d7:52:cf:bf:c8:b6:ad:1c:49:f8:0b:52:99:c6:
bb:d5:7b:ba:89:f3:f6:a0:88:f1:4d:8f:82:17:87:
40:1a:30:29:c1:71:26:d7:ec:de:58:b6:5e:2b:23:
09:d2:44:96:f1:6e:3d:aa:5a:7f:3f:15:c8:ba:8f:
e0:55:ea:49:f9:da:e0:2e:09:96:7c:46:b0:6f:42:
68:96:63:ed:64:5c:cc:e4:ab:94:b7:2f:cc:6d:00:
db:0a:73:e0:3d:6d:27:2d:77:1b:28:fd:2c:61:4c:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:74:2A:49:48:C3:4A:D9:58:D5:2B:C5:A3:E7:07:70:B3:5F:4E
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BDCF158885C011F1BC9FD703CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.170.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:fd:db:d5:b3:69:aa:4e:46:35:77:5a:42:8b:ab:9d:90:40:
37:71:1e:66:cd:bd:5d:84:54:b1:67:09:3a:f2:62:de:c0:47:
66:c9:24:99:a2:2d:bf:5c:5e:f0:40:24:8f:68:d7:c8:3f:39:
5b:fd:b3:de:4a:dc:55:11:48:ab:d1:7f:f3:97:7e:b8:e5:3a:
2f:50:54:29:32:4c:e1:b3:9e:76:e6:57:d6:a6:0b:2c:dd:18:
5f:1e:22:5f:42:3a:00:fc:5b:26:0f:8a:8f:73:7a:f1:57:73:
df:b0:35:ce:fd:15:ce:00:ed:78:cc:df:77:2f:a0:4e:4d:34:
7f:73:ed:ad:6e:3b:d2:ff:eb:39:bd:3f:13:29:7f:8e:9e:51:
18:bc:de:a3:c7:f9:60:99:a1:cd:1c:aa:8a:0b:93:ea:22:75:
fa:70:9c:c2:ee:bd:18:e4:54:54:ba:35:ad:00:fd:d9:68:75:
8c:07:14:b2:ec:90:eb:76:e8:3a:45:0c:d0:64:6d:8f:27:1e:
22:5f:ad:12:21:2c:63:b7:8f:b5:f4:61:2d:8b:08:e3:a5:ee:
82:a9:9f:8e:c8:bc:fd:9b:10:e2:06:eb:23:d8:f5:4c:3c:cf:
23:3c:a2:12:de:0b:fd:0b:9d:5c:29:ec:46:dd:71:d4:07:92:
bd:1e:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:59 2026 by rpki-client