Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C4FB045C875511F1B57009B2CE1D38B0.roa
File: C4FB045C875511F1B57009B2CE1D38B0.roa (raw, json)
Hash identifier: JdEE5hlmKImGcHkVowsFyNZIkRzk1XitPU9BZmqti8U=
Subject key identifier: AB:17:A3:F9:C7:B1:EA:06:18:D1:35:E4:A9:D5:F4:D7:0D:BF:3F:AA
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C16
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C4FB045C875511F1B57009B2CE1D38B0.roa
Signing time: Fri 24 Jul 2026 11:49:47 +0000
ROA not before: Fri 24 Jul 2026 11:49:43 +0000
ROA not after: Thu 24 Jul 2036 11:49:43 +0000
asID: 36916
IP address blocks: 41.180.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3094 (0xc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 11:49:43 2026 GMT
Not After : Jul 24 11:49:43 2036 GMT
Subject: CN=6a63515b-3ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:36:96:57:52:f7:c1:72:2b:91:e7:ca:0a:0d:
c4:4b:fb:b8:3b:ea:2e:c9:89:c7:9b:50:b2:b0:e7:
f3:ab:32:b2:32:e1:4e:31:c9:84:49:ae:17:2e:43:
d5:eb:5a:f0:e5:0f:9b:5d:aa:45:e6:1c:03:16:a5:
fc:9d:83:e9:00:9b:ab:b0:eb:bf:49:db:77:0c:48:
5e:f6:89:91:e0:fc:4c:23:61:fa:d3:09:64:2c:be:
f9:5a:e9:64:28:e4:6f:76:6e:84:1f:b8:51:4f:f0:
ab:39:cb:bf:87:67:08:0a:68:26:fc:32:ff:a3:fc:
4e:82:aa:4a:28:25:8c:4c:b1:9b:17:10:be:80:36:
17:88:12:ae:e5:c9:d7:35:7d:0b:e7:03:25:d9:bd:
a7:3a:17:03:21:fc:16:ef:e4:3d:cc:c7:d4:16:3d:
dc:a7:42:a2:14:f0:e9:34:84:a2:da:b0:ce:da:62:
8a:f8:0e:35:e8:87:28:9e:cd:fb:c6:7c:39:75:19:
15:0b:9e:79:03:6d:6e:b8:1e:a5:f3:05:12:3e:c5:
4d:10:71:ef:cf:ba:73:e4:a6:b7:87:87:6c:e6:62:
44:e7:cd:39:da:ae:89:ec:c9:fe:e3:ea:bb:93:f4:
16:41:aa:dc:f5:1a:4f:b4:d6:c6:b1:47:8f:cf:08:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:17:A3:F9:C7:B1:EA:06:18:D1:35:E4:A9:D5:F4:D7:0D:BF:3F:AA
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C4FB045C875511F1B57009B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.112.0/21
Signature Algorithm: sha256WithRSAEncryption
65:25:b1:e4:0a:5b:56:c0:60:71:f1:d7:78:a5:9a:30:b7:a6:
64:1b:73:aa:2c:05:30:77:b6:da:17:be:78:1a:ce:fc:ce:5f:
59:76:09:c5:3f:11:5e:3a:5d:df:11:16:eb:2c:94:ef:77:a9:
b0:3c:51:ec:f3:ac:bf:b5:6a:ed:71:f3:0a:07:75:4b:31:cf:
09:ac:df:fb:63:2e:b0:fc:b0:96:b7:4e:e4:fe:9e:87:04:b4:
9c:92:0c:c6:b9:99:09:26:fb:8d:86:b9:4b:0d:56:0c:1a:31:
a4:65:cd:66:42:71:8e:ff:a6:cd:1f:f4:43:07:09:3f:b3:29:
1b:8e:a3:91:0f:67:12:73:81:f3:6d:47:9c:3b:41:d5:56:37:
57:56:09:45:95:49:b7:d4:d2:76:54:1e:b3:7b:3b:1f:92:a0:
d4:38:ae:19:8e:83:71:02:d7:c0:82:ce:ad:d9:84:21:e3:1a:
b6:b6:78:fb:96:8a:6f:16:81:7b:91:56:4b:a8:ac:53:10:a1:
ce:c9:ba:d3:3e:06:5b:b6:4f:ab:ea:de:e7:b9:a5:3e:40:e4:
44:a6:6e:18:71:67:f2:05:42:79:db:57:fa:3c:ac:25:35:55:
fd:96:ca:17:a6:a4:95:14:e6:97:5b:d5:b5:c1:69:8d:e6:9a:
dd:58:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:53 2026 by rpki-client