Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E004A670875711F187897ABECE1D38B0.roa
File: E004A670875711F187897ABECE1D38B0.roa (raw, json)
Hash identifier: jAoc6Oy3ecWRuWF+AhjGDoa4GfAzITwRboNrKqdr3HE=
Subject key identifier: 1E:AA:4B:8B:66:4C:B8:3E:D0:DE:03:07:95:90:3C:4B:48:38:53:59
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C2E
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E004A670875711F187897ABECE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:04:52 +0000
ROA not before: Fri 24 Jul 2026 12:04:48 +0000
ROA not after: Thu 24 Jul 2036 12:04:48 +0000
asID: 36916
IP address blocks: 41.180.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 12:04:48 2026 GMT
Not After : Jul 24 12:04:48 2036 GMT
Subject: CN=6a6354e4-192e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:46:b2:e0:c9:0a:a5:ab:f2:8d:85:17:4c:
8c:b0:54:d7:50:50:4d:3d:d7:19:a3:ff:d1:8b:58:
14:f6:ea:7b:47:a4:0e:9d:79:97:63:fd:08:34:d3:
8c:bf:05:ab:e4:89:94:a8:b3:75:53:28:c0:75:bc:
e4:93:7f:81:19:f8:76:23:a8:dd:cf:57:ab:49:aa:
bd:1f:12:90:46:0f:44:10:6f:f9:be:dc:b3:62:2e:
c3:3b:32:19:c8:6c:f4:01:55:10:ca:61:e0:54:af:
57:26:1c:3d:09:03:19:23:50:74:2d:f7:f0:93:c5:
aa:dd:eb:be:e8:73:62:7c:ad:cb:a6:8b:b2:95:00:
ea:3c:8c:9e:b9:82:7b:01:b3:3b:1c:49:74:bd:f0:
cd:86:70:29:15:fd:b8:a9:17:1c:53:19:12:c9:b6:
7b:37:6a:67:3c:e6:27:36:da:df:7e:0c:d5:d8:a1:
ad:1a:35:58:a0:c6:6c:3c:33:13:12:ea:f3:f9:74:
f2:0e:00:94:42:aa:6f:46:eb:28:dd:f2:c5:04:e5:
ef:69:e4:d6:6b:76:bf:2f:62:08:4f:d1:a3:98:0b:
57:d6:ae:46:0a:4f:c5:be:31:fa:2c:47:74:b2:fc:
3c:2f:4f:68:4e:bf:89:6b:2a:4d:9e:f8:43:c5:75:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AA:4B:8B:66:4C:B8:3E:D0:DE:03:07:95:90:3C:4B:48:38:53:59
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E004A670875711F187897ABECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.88.0/21
Signature Algorithm: sha256WithRSAEncryption
50:e4:6c:db:26:97:c8:6f:3c:71:4a:d0:24:4d:24:6b:ca:1b:
c9:f4:d1:b6:e8:61:43:e3:b0:13:07:9a:20:61:f4:bf:14:c2:
8e:77:53:b2:1e:4a:bb:5c:b7:6a:8a:ba:49:f4:ca:ac:ad:7d:
02:d3:2d:2c:e5:97:96:d0:b8:a9:70:91:29:a3:b2:7d:7d:02:
68:96:18:b9:5c:1f:3c:15:e2:4a:ff:c0:da:7f:02:39:c6:4c:
01:cf:69:32:0f:91:e9:06:74:cc:4d:f2:99:5b:b7:e9:26:16:
b3:17:fa:d4:58:a7:6c:8a:8d:a5:63:91:b1:25:b8:7b:2d:65:
b7:e3:fa:39:16:46:04:fd:44:d1:96:ce:37:a3:bc:3c:3c:dc:
78:2b:c3:aa:f6:ad:b3:1f:a6:dc:ed:cb:62:12:38:c8:5a:6d:
06:b7:08:2d:b4:7b:51:07:f0:ed:b2:2f:42:5d:2f:5f:e4:7f:
a2:30:3d:88:7f:50:1c:f9:96:a6:fa:aa:a1:d2:ce:0c:35:dc:
5e:06:12:ec:f9:ab:ff:4e:77:b0:b1:67:05:23:b1:30:6e:f2:
0b:29:1d:8d:0b:8a:a5:b9:c8:c1:43:e0:b6:13:53:0b:fc:ee:
d7:36:04:c1:6d:9e:17:38:a3:1a:f5:c3:32:27:88:c0:ad:1b:
ea:59:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:49 2026 by rpki-client