Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C6DC50E2874A11F18FEE0DEECE1D38B0.roa
File: C6DC50E2874A11F18FEE0DEECE1D38B0.roa (raw, json)
Hash identifier: plvFXGqyPqOE7OBdJAIDnqnkzwTjTSSjflqDzW27vzM=
Subject key identifier: E7:B2:BB:CB:AF:46:1E:CF:1A:C8:90:1E:D4:91:05:E8:68:06:55:D8
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BE6
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C6DC50E2874A11F18FEE0DEECE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:31:06 +0000
ROA not before: Fri 24 Jul 2026 10:31:02 +0000
ROA not after: Thu 24 Jul 2036 10:31:02 +0000
asID: 36916
IP address blocks: 41.221.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3046 (0xbe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:31:02 2026 GMT
Not After : Jul 24 10:31:02 2036 GMT
Subject: CN=6a633eea-bc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:4a:ee:2f:dd:3c:58:db:9d:c8:e4:a3:f3:
6c:81:a1:b1:a6:f2:cd:7c:51:f5:98:9f:5f:67:11:
b6:45:0a:fe:34:e7:f8:bb:86:59:4b:ca:d9:e8:79:
a6:5d:0d:d5:0b:75:28:0b:b2:56:82:10:5f:0b:03:
76:4f:d9:4d:7b:30:ab:d1:41:51:1c:11:14:3d:3b:
4b:03:02:8d:c2:f4:2d:4a:9e:65:24:2a:fd:bc:ca:
06:4b:19:81:68:0d:d7:2c:9f:da:65:0d:4a:22:b1:
b0:94:a0:4e:f8:21:c1:ca:7a:e3:f2:b0:14:a9:f3:
86:f1:cb:01:83:e5:e7:a4:be:13:82:18:fc:de:9c:
73:13:4b:57:00:e8:9a:90:6a:f7:45:4f:d2:83:1d:
54:76:ad:c6:a5:59:9e:1b:73:bb:59:ea:15:e3:a2:
5e:4f:0a:7c:4d:d5:0a:04:dd:ef:14:d0:4c:12:69:
3b:7d:ba:da:79:00:6c:f2:3a:ff:99:1a:89:2e:ba:
ad:48:b4:72:12:cc:f2:21:f0:93:7f:d3:fa:19:44:
a8:da:49:14:53:b7:41:d9:b4:e6:b0:77:46:51:45:
c3:10:68:a7:2c:18:4c:c4:e2:1b:be:2f:0f:a4:11:
e5:d4:78:a7:81:75:ff:9c:bd:02:53:51:46:6a:fb:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:BB:CB:AF:46:1E:CF:1A:C8:90:1E:D4:91:05:E8:68:06:55:D8
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C6DC50E2874A11F18FEE0DEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.224.0/20
Signature Algorithm: sha256WithRSAEncryption
43:bc:e8:1b:0e:bc:fe:c4:49:40:4a:b2:a5:db:41:d4:69:b4:
3b:65:a9:c2:e6:67:2b:6b:45:9d:c6:f2:84:b1:36:52:58:f8:
44:70:c5:f9:8a:31:8c:1f:2a:c3:5d:8c:4f:bd:05:96:c1:c2:
81:a3:ff:5e:96:9f:36:d6:61:ab:09:04:b4:11:7f:54:1f:52:
5e:52:01:03:15:57:a4:0d:13:8f:6f:2e:0d:bc:52:6f:31:98:
5e:a3:5f:06:4f:5e:21:4f:e1:8a:bd:d7:91:fa:21:ce:fd:f0:
8e:44:00:73:84:ce:af:79:22:09:58:b5:2f:d1:50:34:d4:2b:
3a:bd:9e:98:95:db:10:10:19:2a:0d:cd:f9:a0:04:54:57:9c:
cf:85:05:52:53:5b:a5:f2:79:24:32:fc:83:60:03:2a:ee:0c:
a6:b6:99:f8:bc:67:46:5b:f8:ce:e8:d7:65:60:bf:dc:b3:dd:
ca:dc:86:29:c1:26:76:69:f8:32:3e:ba:d1:37:38:e5:81:61:
e0:98:1c:d2:98:fb:d0:72:f2:62:33:41:d0:00:02:10:84:d6:
f6:0d:aa:d8:91:76:01:f2:a5:06:3c:6b:66:4d:91:6a:e9:43:
70:d9:7c:39:1e:8e:4d:1e:ad:ca:67:00:12:4d:f7:de:d6:de:
b1:bb:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:50 2026 by rpki-client