Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C3E94790874B11F1AE815AF2CE1D38B0.roa
File: C3E94790874B11F1AE815AF2CE1D38B0.roa (raw, json)
Hash identifier: Plm7AdOSg3H+mOlxwmZJDD7JHTo1ObsWDum3vCf9Gds=
Subject key identifier: 35:26:86:3B:C4:37:75:EC:53:56:5B:74:23:EC:B3:D8:64:A9:BF:86
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BF2
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C3E94790874B11F1AE815AF2CE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:38:11 +0000
ROA not before: Fri 24 Jul 2026 10:38:07 +0000
ROA not after: Thu 24 Jul 2036 10:38:07 +0000
asID: 36916
IP address blocks: 41.180.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3058 (0xbf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:38:07 2026 GMT
Not After : Jul 24 10:38:07 2036 GMT
Subject: CN=6a634093-5d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:8a:72:7f:73:12:bb:9b:4a:8c:6c:ac:39:
e6:7f:9b:47:bc:fa:93:9e:04:c3:47:77:4a:89:e6:
1a:51:c5:41:02:e1:8f:67:8c:64:0f:25:14:bd:45:
07:fb:5c:ba:a2:47:2a:c4:dc:97:df:44:f6:03:6c:
97:22:33:ae:0d:1f:84:86:50:09:47:f3:aa:ef:c1:
8e:58:24:91:c7:88:13:96:0f:de:3e:bd:b2:ef:76:
48:65:15:1c:3d:9d:9f:0e:76:aa:33:cd:52:df:ef:
71:79:cb:01:19:5d:db:61:42:51:15:f3:0e:b2:c8:
65:e7:3f:0c:bb:f5:c9:8b:1a:f2:05:be:d5:e9:97:
0a:17:d3:1c:51:a3:b6:3a:53:70:4a:8c:b9:78:ea:
96:33:ec:a5:3b:69:b1:13:39:40:7a:97:b9:7c:cf:
ac:5a:d9:72:ce:f8:f2:01:d1:10:19:f9:9a:26:74:
7b:d6:83:e3:94:88:83:67:3a:e9:8e:02:61:82:19:
f4:fe:6b:73:92:b7:0b:4d:04:a5:ae:f6:15:1c:df:
13:49:34:69:b6:57:e7:80:b8:7d:80:b3:84:8f:4d:
e4:4a:f7:62:43:30:e4:80:ee:be:e7:fd:c8:ed:7f:
79:91:0f:eb:49:7e:48:44:ea:48:bd:dd:36:32:bb:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:26:86:3B:C4:37:75:EC:53:56:5B:74:23:EC:B3:D8:64:A9:BF:86
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C3E94790874B11F1AE815AF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:cd:26:54:10:7a:e4:4c:51:93:38:e0:04:09:9d:da:ca:44:
f7:ce:9a:f3:f6:da:62:c9:73:98:50:c7:30:7a:12:8c:7e:ab:
ef:ee:5a:f7:c4:31:87:4b:7a:a5:6d:88:e6:79:d3:c6:79:bf:
32:a2:01:ce:c8:33:ee:b0:f6:b5:9e:4a:94:08:fd:c3:a8:78:
01:80:42:b9:d0:fb:bc:24:3e:04:fd:e2:23:30:30:28:82:15:
92:46:af:9e:00:84:3e:ef:3a:e2:37:05:ec:94:8d:7f:b9:e9:
12:c3:e6:54:b3:af:45:1f:95:f1:e3:a9:9f:db:43:f9:10:78:
f7:c5:d2:af:81:93:3a:b4:ff:35:5f:59:9d:66:89:65:a5:04:
ef:78:7a:c8:7f:9c:0d:78:4e:53:f5:10:04:bf:ea:85:15:ca:
83:1e:16:bb:e4:ea:03:29:ee:d1:4c:ae:95:d7:53:af:4a:25:
38:65:7c:32:22:7f:de:9c:fd:04:68:9b:73:94:20:a8:ac:6b:
bd:84:2c:d9:ed:c6:76:30:ca:bd:ff:22:fe:27:4a:cf:84:f0:
c6:ef:a5:0f:0e:09:8d:e2:99:c4:ba:54:66:62:18:06:dd:bc:
c6:e9:5f:9a:e7:84:db:56:05:e4:4c:d8:2a:bd:19:49:d0:20:
bd:23:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:31 2026 by rpki-client