Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DDD183FE875811F1A6490FC3CE1D38B0.roa
File: DDD183FE875811F1A6490FC3CE1D38B0.roa (raw, json)
Hash identifier: pr62tvMLOBFRUCIf73F+S+REm//9IQfaS0oE7trY6r0=
Subject key identifier: 98:D1:80:21:56:10:A0:B8:0F:0B:BF:BF:25:F8:C7:1E:A6:E1:7C:4E
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C40
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DDD183FE875811F1A6490FC3CE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:11:58 +0000
ROA not before: Fri 24 Jul 2026 12:11:54 +0000
ROA not after: Thu 24 Jul 2036 12:11:54 +0000
asID: 36916
IP address blocks: 41.221.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3136 (0xc40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:11:54 2026 GMT
Not After : Jul 24 12:11:54 2036 GMT
Subject: CN=6a63568e-79a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a4:04:2c:21:a0:3f:30:6b:1d:de:a4:b4:41:
6d:ce:6e:61:90:d0:a8:94:c5:e9:ce:b4:33:fc:86:
11:e4:12:11:77:39:0e:77:00:98:7f:f3:77:13:00:
bb:40:a0:a7:cf:08:42:37:92:43:a7:b7:87:ff:ac:
fe:59:17:c8:e5:43:0e:f9:b7:12:f2:62:de:8c:64:
c3:fd:d3:e0:35:b0:cb:09:2b:d4:d6:a3:49:50:4b:
05:26:e2:96:b2:33:1a:db:b0:26:35:8b:81:77:1d:
f9:93:f5:43:5e:f1:b8:2d:77:e3:49:c0:c6:ca:92:
66:97:78:9b:a6:40:60:71:46:dd:79:0c:d7:8d:44:
7f:5e:55:60:03:c8:3f:7a:c1:3c:13:e1:6f:52:53:
d7:11:f5:15:df:2c:ff:48:3a:46:53:89:e2:5b:1c:
86:73:9d:77:2f:49:01:9c:3e:58:a6:44:98:d7:fc:
25:dc:d0:0a:52:96:d2:aa:ff:1a:0b:b1:fe:7b:21:
9f:37:d5:ef:b0:13:6a:2d:b4:4c:fb:2e:a7:f4:f0:
5f:e5:98:b6:11:0b:57:e4:24:4a:7e:78:18:86:b7:
ad:1b:a9:b3:63:8f:b8:cf:21:46:75:c6:46:d5:13:
bf:34:fd:97:14:40:e5:30:d4:b7:50:98:52:e1:c7:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:80:21:56:10:A0:B8:0F:0B:BF:BF:25:F8:C7:1E:A6:E1:7C:4E
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DDD183FE875811F1A6490FC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b4:8c:e4:f0:ab:28:84:9c:d9:89:52:c2:79:e6:e9:bb:ef:
15:41:2a:b3:ad:3d:1e:f0:31:f1:54:fa:f4:a3:43:f3:f0:e6:
ae:b9:ac:6d:fd:ed:98:a4:79:4c:72:3f:19:34:01:e7:ae:95:
55:ee:ee:46:bb:f0:42:c3:2d:3a:18:da:63:63:f7:cc:7b:c9:
9c:76:be:72:71:c0:9c:62:1f:49:de:f4:81:e2:5c:37:27:7d:
e6:b1:e8:94:b2:28:45:0e:b3:2f:65:5b:9c:80:c8:ce:22:8d:
fb:c0:73:b4:64:45:38:ec:f4:b3:0d:6c:27:ea:b3:a8:be:ad:
92:c5:0e:2b:d5:3a:04:77:2c:5e:88:4c:e2:78:6e:0c:0f:aa:
9f:55:ea:c9:72:5c:b5:50:7b:25:f1:ef:0d:08:71:a8:d2:a2:
03:d6:22:66:ff:69:72:45:29:08:f8:71:d2:38:91:dd:c3:4a:
ef:f2:81:d9:61:4f:22:8c:5e:b5:d4:ca:23:e6:3e:1b:77:b0:
fd:ad:c8:af:f2:d1:a7:bd:80:1c:20:f4:14:61:b3:6c:2d:b9:
57:08:7b:c5:07:5b:a1:53:7e:2a:e1:79:6b:82:49:59:1e:48:
86:1d:e6:bc:f8:f5:63:da:b8:53:28:af:30:da:c9:11:38:2e:
f0:dd:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:54 2026 by rpki-client