Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CE5749D0874F11F1BBC4F20BCF1D38B0.roa
File: CE5749D0874F11F1BBC4F20BCF1D38B0.roa (raw, json)
Hash identifier: mAWU8OzUAJ4mMlSkltDR/1Gf9DY4saPACSb4cnFs6AI=
Subject key identifier: 8A:FD:9B:D6:D2:FA:43:2A:CB:E2:6E:5F:24:C5:56:32:D5:9D:98:66
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C08
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CE5749D0874F11F1BBC4F20BCF1D38B0.roa
Signing time: Fri 24 Jul 2026 11:07:06 +0000
ROA not before: Fri 24 Jul 2026 11:07:02 +0000
ROA not after: Thu 24 Jul 2036 11:07:02 +0000
asID: 36916
IP address blocks: 41.180.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 11:07:02 2026 GMT
Not After : Jul 24 11:07:02 2036 GMT
Subject: CN=6a63475a-6ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:fe:51:29:11:98:cf:fa:a2:16:81:b3:2e:
2a:80:04:cc:8f:fb:89:3b:63:d9:c7:9a:44:db:cd:
fd:ae:da:24:03:15:98:f7:43:6c:44:d1:e6:33:39:
2b:11:35:f2:e4:a7:54:56:1b:21:d0:ca:4f:ec:06:
8d:e9:f6:e7:6f:01:a5:32:29:f1:90:24:ba:47:fb:
67:0d:46:a8:fa:ef:84:32:fd:81:4c:1d:d2:19:28:
76:03:92:9c:50:68:17:5e:de:9c:c2:99:5b:e6:f4:
19:33:f5:50:75:b5:ce:a2:0b:6b:e2:57:99:d8:89:
fc:20:b4:cf:03:3a:52:3c:a7:52:cb:77:ed:a1:d1:
17:d6:7d:c0:24:84:a2:d0:97:fd:fb:bb:87:5e:d7:
e6:57:27:dd:df:05:c9:65:81:26:16:73:73:98:65:
60:65:93:95:4c:c7:b6:bb:ee:1d:fc:69:0f:21:b2:
15:b3:b7:31:45:ed:94:5e:a5:06:97:1e:f8:ca:1f:
af:24:0f:e2:5a:da:d4:35:65:65:f2:85:fc:d2:1d:
f0:ca:88:55:b4:51:4e:c7:66:b7:3b:18:64:88:cc:
d4:ab:e4:f2:97:44:9f:b4:f6:ff:17:d9:6e:04:11:
19:0a:f0:61:3e:da:05:a1:c6:63:4a:8b:57:0e:05:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FD:9B:D6:D2:FA:43:2A:CB:E2:6E:5F:24:C5:56:32:D5:9D:98:66
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/CE5749D0874F11F1BBC4F20BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.48.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:f3:3b:72:86:56:a7:09:f4:16:2d:3b:e1:9a:6f:3f:0a:b3:
26:da:ba:cf:da:db:d0:e7:95:2b:45:01:47:e4:8d:09:f3:c2:
f3:3f:27:ee:72:82:f3:a8:de:69:95:0f:99:16:ea:0a:92:ff:
b9:1f:16:db:5b:fb:3d:a2:f9:29:61:4a:4f:6f:49:e2:3e:6c:
e3:3e:b9:3d:cd:21:76:1a:5d:6c:eb:ee:d1:06:db:78:c0:c7:
e3:9b:80:d6:6d:22:f7:6f:3e:42:89:dd:be:c5:13:9a:66:9d:
36:46:01:26:77:b2:48:bf:39:ae:c3:a8:aa:57:a4:e0:bf:35:
d2:cc:21:d6:45:ce:96:d7:d5:c0:8e:ca:e9:a6:5c:e8:64:08:
79:b4:65:12:76:14:c2:a6:3e:c4:3c:51:51:ca:24:0b:89:c1:
f7:13:42:e4:d8:d5:37:49:ff:db:ac:9c:55:e9:2e:24:b8:90:
8f:19:e2:ea:6e:8f:d7:72:08:2f:04:76:a5:ff:cc:53:f7:0b:
0f:0c:96:b4:8d:9d:6a:7a:4d:98:e1:03:d5:72:c6:00:f7:98:
67:67:44:d5:b8:ba:40:26:30:e6:3d:f2:16:c9:de:ac:a2:8b:
95:7a:63:1c:17:3d:91:03:1f:cb:e6:69:49:7d:35:e3:6a:51:
22:a9:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:30 2026 by rpki-client