Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EAF43DE0875011F1A7E0DF13CF1D38B0.roa
File: EAF43DE0875011F1A7E0DF13CF1D38B0.roa (raw, json)
Hash identifier: V1IZmzTMnGLIIJoOUQbA9S+iXJsSipD0J8jBrttCEng=
Subject key identifier: 20:87:DC:17:91:3A:71:66:F7:AD:C9:7C:51:28:C1:C4:D1:83:C4:33
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0C0C
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EAF43DE0875011F1A7E0DF13CF1D38B0.roa
Signing time: Fri 24 Jul 2026 11:15:04 +0000
ROA not before: Fri 24 Jul 2026 11:15:00 +0000
ROA not after: Thu 24 Jul 2036 11:15:00 +0000
asID: 36916
IP address blocks: 41.180.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 11:15:00 2026 GMT
Not After : Jul 24 11:15:00 2036 GMT
Subject: CN=6a634938-0c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:72:16:ae:40:1b:0d:ee:08:ef:80:22:3c:
3a:fe:00:0a:c3:e8:4e:11:7e:6c:7b:0b:24:e4:52:
88:15:9d:1d:f3:c4:87:da:d6:5b:d2:09:20:c1:2a:
c4:e6:79:d3:89:3e:48:ee:92:84:5d:64:2b:d7:33:
4d:c8:f8:55:ac:ca:41:f4:fa:7a:a6:e8:f2:fc:5c:
f2:ab:1a:10:8c:4c:20:98:98:b2:c4:a2:0c:6f:9b:
96:8c:9b:cd:00:75:b1:59:ba:05:19:02:55:40:e6:
49:c4:f4:6b:99:fa:29:30:b1:3d:9c:47:73:36:9f:
55:b2:4b:b7:37:b7:c2:6a:6d:b3:4f:57:35:a3:0f:
71:fa:d3:d6:3d:37:f5:20:e3:cc:0f:d9:59:50:e0:
1d:39:7d:ca:93:59:42:41:d2:c6:3e:63:60:0f:66:
8e:a0:8f:1d:24:02:96:32:1b:7d:6b:2f:79:d3:05:
a9:dd:b8:48:38:4b:2e:d5:20:69:c1:26:66:1e:cf:
d1:d8:6a:47:fb:f8:b2:38:d9:a0:ec:61:5a:e0:cb:
e3:44:08:c4:cd:ac:a0:fe:38:3b:57:c2:7d:6e:a4:
a4:81:f7:7a:ff:f2:aa:fa:1a:ba:5d:b8:8c:42:48:
4c:6d:52:7c:cf:5a:6c:74:e9:61:cf:02:ce:fd:df:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:87:DC:17:91:3A:71:66:F7:AD:C9:7C:51:28:C1:C4:D1:83:C4:33
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EAF43DE0875011F1A7E0DF13CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.56.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:25:c7:e6:11:e9:33:d5:8b:f5:e2:31:8c:5a:85:58:f9:1f:
54:5f:31:61:f3:b1:76:a0:cb:aa:2e:cd:ea:b5:0c:58:94:b0:
9c:2e:36:fb:45:44:ba:d8:ee:82:e1:e1:be:e4:ac:bb:63:57:
7e:b8:1e:2c:b3:16:d8:50:a5:a5:25:2b:41:74:3e:02:68:24:
0c:63:3f:b8:1a:14:ae:18:c4:eb:b6:29:39:be:03:f9:3f:8a:
27:ce:16:95:ee:55:e2:fc:a7:b3:a4:83:f5:fa:65:e2:22:4a:
f8:0e:4a:2f:59:3b:81:bf:8a:0d:71:c7:ed:0a:89:d7:6f:32:
4c:1a:12:56:0c:77:f0:8b:e7:65:db:d7:30:68:8a:65:5f:26:
fc:52:6f:d8:9c:40:fd:51:c2:14:e4:31:a5:b1:7a:52:41:3f:
5e:aa:c5:67:6d:2a:db:e9:bf:93:cd:55:1e:82:4a:ef:0d:0c:
34:69:4d:9e:35:19:00:2a:0a:af:36:65:66:38:8f:7e:da:65:
a0:b7:ad:05:5f:51:6f:c0:40:f0:62:00:e7:16:63:91:03:e7:
fe:28:d8:44:8c:b1:7b:73:31:d0:02:a7:4c:b5:46:b6:fb:fa:
ef:18:19:97:5b:37:a6:c9:7f:ca:71:4d:f6:9a:76:01:ea:6f:
68:70:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:47:57 2026 by rpki-client