Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C4E651D6875711F1A85C9ABCCE1D38B0.roa
File: C4E651D6875711F1A85C9ABCCE1D38B0.roa (raw, json)
Hash identifier: c1fOAkrq4GL+5sRX5GK9Om2aL2GAYx+aI1b4Jq/b7pg=
Subject key identifier: 9F:AC:56:67:55:4B:AC:86:0E:78:E2:50:D4:25:B9:7F:75:66:EC:C2
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C2C
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C4E651D6875711F1A85C9ABCCE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:04:06 +0000
ROA not before: Fri 24 Jul 2026 12:04:02 +0000
ROA not after: Thu 24 Jul 2036 12:04:02 +0000
asID: 36916
IP address blocks: 41.180.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:04:02 2026 GMT
Not After : Jul 24 12:04:02 2036 GMT
Subject: CN=6a6354b6-e633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:95:b0:bc:85:25:75:db:ce:e0:d0:fe:09:
2a:8d:85:79:89:de:a2:58:a1:7c:33:90:f9:23:b9:
fc:1c:c2:8f:40:85:88:67:8c:40:af:6e:14:9a:6d:
1e:3d:06:a1:4d:9b:fb:46:af:17:1f:5a:33:6c:89:
df:e7:ab:07:e6:a3:99:d6:73:86:8c:1b:3a:0c:b6:
29:1c:31:8b:ff:f7:a8:28:1a:d6:1d:8e:0b:74:95:
e1:53:17:11:69:d4:09:ad:02:b2:4d:51:a3:c1:7b:
4c:c0:05:18:e7:d6:b1:4b:95:06:93:22:5b:95:47:
1d:18:68:28:fe:59:c6:ec:81:ae:cc:0b:2f:e3:c7:
c8:4e:87:36:2a:cc:ba:e3:1f:77:4b:1c:a7:db:2a:
95:99:23:14:8b:f2:14:2d:5f:87:4b:c7:27:68:d4:
93:93:cf:dd:44:2b:e4:6f:ec:d3:23:1c:a6:e8:a0:
03:99:12:51:cd:41:84:90:d0:1e:f9:d8:a3:38:a3:
91:ae:5f:39:57:da:51:f0:d5:28:c5:90:1f:5d:a9:
20:67:c1:7a:af:4e:79:1d:28:54:06:3c:23:34:ee:
3b:b8:d8:b1:62:5e:24:a4:56:92:fc:d2:27:55:29:
af:95:19:8a:f8:75:a7:99:e3:0c:18:11:7d:34:4e:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AC:56:67:55:4B:AC:86:0E:78:E2:50:D4:25:B9:7F:75:66:EC:C2
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C4E651D6875711F1A85C9ABCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.72.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e2:30:ee:ad:75:91:94:7a:fc:38:69:d1:15:78:b9:74:50:
83:28:2b:9f:b1:bd:cb:02:ee:b8:ef:63:b8:38:6d:a9:d0:18:
47:9e:18:91:4b:7c:04:90:c3:a0:97:28:20:c3:f3:ed:75:ea:
cf:30:4c:5d:63:7b:08:91:a8:54:22:bb:61:40:e8:7e:c6:96:
ca:fe:1d:87:1c:9a:9e:22:79:1c:9f:aa:40:6e:50:e4:51:8a:
96:eb:41:c3:25:3a:4d:88:1f:7b:fa:42:a7:9b:c9:a9:81:19:
50:77:2f:c2:ae:7a:71:97:c3:6f:cb:63:fc:c0:6f:9d:f4:1e:
a2:11:12:21:30:d0:0c:ba:19:2f:56:95:ce:4f:7b:13:be:26:
42:c7:75:58:ef:db:80:20:6a:b0:54:71:8b:d0:62:c7:90:38:
78:a3:ec:8f:60:fd:2e:5c:f6:c6:ad:95:3a:17:62:ea:2f:02:
02:d9:17:f1:4b:f2:e8:6f:13:20:ce:d1:83:04:4a:74:48:30:
59:01:ed:13:e8:dc:a1:9e:c8:e0:df:68:c7:2e:dd:c2:4b:94:
24:6d:02:93:ba:9a:82:f0:51:c8:73:b6:2c:de:db:23:9d:54:
c6:99:c4:99:31:74:03:73:88:dc:11:23:7d:30:af:d4:08:3d:
26:8a:b3:00
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjQxMjA0MDJaFw0zNjA3MjQxMjA0MDJaMBgxFjAU
BgNVBAMTDTZhNjM1NGI2LWU2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYCJWwvIUlddvO4ND+CSqNhXmJ3qJYoXwzkPkjufwcwo9AhYhnjECvbhSa
bR49BqFNm/tGrxcfWjNsid/nqwfmo5nWc4aMGzoMtikcMYv/96goGtYdjgt0leFT
FxFp1AmtArJNUaPBe0zABRjn1rFLlQaTIluVRx0YaCj+Wcbsga7MCy/jx8hOhzYq
zLrjH3dLHKfbKpWZIxSL8hQtX4dLxydo1JOTz91EK+Rv7NMjHKbooAOZElHNQYSQ
0B752KM4o5GuXzlX2lHw1SjFkB9dqSBnwXqvTnkdKFQGPCM07ju42LFiXiSkVpL8
0idVKa+VGYr4daeZ4wwYEX00Tq2hAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUn6xW
Z1VLrIYOeOJQ1CW5f3Vm7MIwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4L0M0RTY1MUQ2ODc1NzExRjFBODVDOUFCQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAptEgwDQYJKoZIhvcNAQEL
BQADggEBABbiMO6tdZGUevw4adEVeLl0UIMoK5+xvcsC7rjvY7g4banQGEeeGJFL
fASQw6CXKCDD8+116s8wTF1jewiRqFQiu2FA6H7Glsr+HYccmp4ieRyfqkBuUORR
ipbrQcMlOk2IH3v6QqebyamBGVB3L8KuenGXw2/LY/zAb530HqIREiEw0Ay6GS9W
lc5PexO+JkLHdVjv24AgarBUcYvQYseQOHij7I9g/S5c9satlToXYuovAgLZF/FL
8uhvEyDO0YMESnRIMFkB7RPo3KGeyODfaMcu3cJLlCRtApO6moLwUchztize2yOd
VMaZxJkxdANziNwRI30wr9QIPSaKswA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:29 2026 by rpki-client