Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EBC859D8873511F1BF8B58F0CE1D38B0.roa
File: EBC859D8873511F1BF8B58F0CE1D38B0.roa (raw, json)
Hash identifier: +Tpw3/WaOzgyPM+Ur01HMqJjlHdgaBAOY6Q8yfv4f2g=
Subject key identifier: D8:67:22:25:BA:C3:3F:93:D8:23:62:98:FE:C2:32:14:51:40:B0:29
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BDC
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EBC859D8873511F1BF8B58F0CE1D38B0.roa
Signing time: Fri 24 Jul 2026 08:01:49 +0000
ROA not before: Fri 24 Jul 2026 08:01:45 +0000
ROA not after: Thu 24 Jul 2036 08:01:45 +0000
asID: 36916
IP address blocks: 41.180.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 08:01:45 2026 GMT
Not After : Jul 24 08:01:45 2036 GMT
Subject: CN=6a631bed-2523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:ac:c8:e2:f8:bc:22:51:ca:c5:a9:e4:d2:
85:6b:7a:2e:86:1c:45:a1:8c:d6:c8:49:45:76:cc:
69:7b:44:db:1b:fd:ac:20:05:57:c2:25:e1:1a:75:
29:24:1e:ab:62:6c:ac:7c:ef:05:8a:af:5b:a4:76:
f8:a7:c4:be:d9:cd:01:47:c8:fb:13:27:7a:a4:74:
f0:35:b4:a9:59:4b:12:a6:27:ea:4f:cc:da:34:ea:
fa:5a:51:41:d6:59:6c:eb:a0:1c:2f:10:fa:c7:e0:
a9:83:16:8a:3d:fd:ae:3b:dd:01:0e:61:0d:18:39:
6f:8f:4a:f7:84:30:7f:49:91:a2:34:4b:13:a1:11:
1d:cc:4c:be:8f:f4:56:d4:75:f9:db:fd:c9:cb:15:
ba:ea:be:c5:4d:6d:47:9b:e1:a5:fe:0c:4e:db:a1:
53:40:52:8b:21:0d:3e:34:76:9d:23:da:9c:32:8f:
c3:47:da:43:5b:c8:1f:5e:ba:9c:7a:4c:ba:33:a0:
e8:a5:f8:db:d6:dd:34:58:c3:c7:2a:19:b9:00:df:
a1:e7:d9:05:08:a5:b0:ad:9b:f7:7e:a9:7a:b7:fe:
f7:47:55:c8:11:b7:93:a5:a3:d9:45:38:6b:c2:ea:
58:8f:2d:11:d6:85:39:85:0a:08:82:ad:08:56:7a:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:67:22:25:BA:C3:3F:93:D8:23:62:98:FE:C2:32:14:51:40:B0:29
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EBC859D8873511F1BF8B58F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.96.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:1a:5c:ad:b3:ef:16:1a:fe:d9:c7:0b:f2:83:e1:88:d7:67:
3a:dc:c4:ff:aa:8d:cf:18:86:8a:18:b1:e3:d9:40:be:e7:24:
0e:9d:b2:92:bd:06:01:e1:c3:4e:67:36:bf:93:e2:1a:c6:63:
4b:15:6f:46:9d:b7:03:75:b7:e7:f5:40:72:c3:8b:de:d1:c3:
be:1a:fb:d2:a4:ee:ba:05:3b:8c:d2:d9:57:4a:41:3e:2e:f2:
a6:2b:6c:d0:88:5b:a1:03:e9:fe:cb:7d:a4:47:e8:e2:96:ab:
1f:43:87:20:95:74:07:cf:5c:00:03:a7:29:50:8f:f8:64:ae:
0d:19:2a:5d:1e:8d:73:6a:8a:33:57:d3:de:54:9c:62:5a:48:
74:b3:31:f1:bb:86:cc:0d:00:b6:73:85:4c:33:df:43:c0:08:
aa:01:29:bc:13:94:de:a6:b6:77:7e:48:08:27:15:d8:24:26:
e4:13:16:a9:2a:75:56:85:a0:d1:b1:97:b9:9a:d3:62:0a:61:
9d:00:eb:b5:dd:f7:89:27:f8:5e:50:7a:ba:10:75:63:3d:85:
52:6d:de:16:f3:1e:1c:2c:ae:be:ad:2a:e6:ba:30:cd:b9:e3:
fe:5b:4e:9c:10:1a:b7:21:54:9e:b4:cb:65:b6:d7:a8:16:7d:
c8:4c:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:05 2026 by rpki-client