Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EEFD2E88874B11F199B83CF4CE1D38B0.roa
File: EEFD2E88874B11F199B83CF4CE1D38B0.roa (raw, json)
Hash identifier: uU337sqAveKH1ZDP2/uj8Fg48p2O6pzefREpgvd9+z0=
Subject key identifier: 47:67:34:4B:15:91:02:5B:DB:6C:29:DA:A9:F4:0A:18:3C:8C:65:57
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BF4
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EEFD2E88874B11F199B83CF4CE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:39:23 +0000
ROA not before: Fri 24 Jul 2026 10:39:19 +0000
ROA not after: Thu 24 Jul 2036 10:39:19 +0000
asID: 36916
IP address blocks: 41.180.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3060 (0xbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 24 10:39:19 2026 GMT
Not After : Jul 24 10:39:19 2036 GMT
Subject: CN=6a6340db-ca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b6:21:b2:2d:01:94:67:10:67:25:45:11:04:
56:95:0c:70:8c:e3:21:a8:d3:f0:f8:65:7e:0d:97:
d9:c1:f2:89:ab:94:e7:6e:75:61:01:86:30:05:f0:
39:fd:fe:c1:05:8f:8e:15:9f:1a:d1:15:20:82:b6:
3c:33:cd:1c:a4:74:fe:c9:09:f9:f1:22:81:18:8a:
51:ff:15:83:64:0a:9a:d6:9e:ed:73:81:88:1c:fa:
4c:89:7c:a8:40:6e:95:a7:e2:06:30:9a:4d:44:ed:
6f:8d:50:29:5c:c6:b5:97:1b:e1:bd:54:d2:f5:2b:
ef:8a:f8:25:99:b0:c9:e9:f3:3a:55:57:11:e0:f6:
17:e7:52:70:9a:36:15:c9:bf:80:69:3d:9c:2f:bb:
90:03:8a:73:97:e6:f3:03:74:98:6a:5f:ea:88:2c:
4b:66:20:68:7a:a4:c0:1a:a2:36:52:35:56:1b:ef:
be:cb:ba:68:e6:e9:0f:84:97:0f:c8:59:00:b6:84:
e0:5e:9f:12:f2:1e:9e:26:16:e3:91:ae:4a:98:f9:
ed:ea:23:c3:f8:c0:ca:31:04:78:50:b6:fc:70:ce:
50:25:35:9d:75:1b:d3:43:0b:7a:09:a1:62:ff:2d:
c3:4c:52:cb:69:69:71:60:15:9d:e0:53:e5:b0:ad:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:34:4B:15:91:02:5B:DB:6C:29:DA:A9:F4:0A:18:3C:8C:65:57
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EEFD2E88874B11F199B83CF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.24.0/21
Signature Algorithm: sha256WithRSAEncryption
22:a3:73:35:a9:00:14:2b:bd:10:91:0e:9a:50:bc:17:6d:6e:
0f:73:a7:9f:8b:fc:08:d0:1f:50:f3:cc:d9:46:eb:f4:8c:fd:
72:af:ce:bf:7f:00:bb:68:37:23:75:6e:34:b9:c6:40:77:22:
b9:f3:bb:3f:81:7a:ce:f6:fc:48:6b:35:5f:44:bb:7a:bd:37:
1e:13:6b:3e:f0:0d:78:e8:03:aa:7f:30:8d:29:5c:32:1c:5a:
40:3d:03:a0:86:d7:4a:c6:d2:11:44:05:86:66:ee:20:b3:29:
82:41:8f:9f:2d:32:6a:17:d7:e2:ed:62:01:ee:76:a0:b3:9d:
de:fd:58:9a:3e:9c:c4:79:17:1f:b6:fe:f7:0d:b7:89:cc:75:
f2:5a:d4:86:d0:fc:7b:4d:91:94:48:a7:87:28:76:b1:5f:5d:
54:d8:32:88:5d:d9:93:ef:03:5f:3b:6d:a2:32:63:d4:26:c2:
f2:fb:50:26:a6:c3:54:71:07:e1:93:5c:98:e1:d8:26:45:68:
7e:7a:2b:28:14:84:48:bf:33:a4:ce:47:80:2b:c3:15:87:07:
d8:13:40:c5:63:4c:d7:9b:64:0c:61:f0:d5:68:2d:a4:18:3a:
03:f0:21:24:9a:77:c0:5b:ed:5e:2c:43:27:a5:1f:9e:e8:2c:
77:23:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:41 2026 by rpki-client