Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F98AAB1E859811F19F5CC217CF1D38B0.roa
File: F98AAB1E859811F19F5CC217CF1D38B0.roa (raw, json)
Hash identifier: gnlUDlx683Q3JvQpNzXF6SA39zyMEC2goQoIDFKF1zI=
Subject key identifier: FE:7B:F5:96:B9:F9:96:29:48:4D:2A:F9:D1:42:92:F5:EE:3F:2E:12
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0BC6
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F98AAB1E859811F19F5CC217CF1D38B0.roa
Signing time: Wed 22 Jul 2026 06:45:50 +0000
ROA not before: Wed 22 Jul 2026 06:45:46 +0000
ROA not after: Tue 22 Jul 2036 06:45:46 +0000
asID: 137409
IP address blocks: 41.180.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3014 (0xbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 22 06:45:46 2026 GMT
Not After : Jul 22 06:45:46 2036 GMT
Subject: CN=6a60671e-65c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:bd:3d:1e:8d:27:8d:89:b5:0b:4d:0f:75:
02:e0:d4:6b:cd:9c:96:ad:88:98:88:2f:83:5f:5b:
86:a3:f5:34:25:a2:53:b1:23:a9:1a:91:db:8b:e7:
08:81:c4:f6:f4:d5:19:70:13:86:9f:14:bb:db:2e:
19:77:b7:7b:98:ea:ed:c0:da:c8:50:7b:cc:77:ac:
94:66:b9:ed:50:8b:fe:8e:f5:08:1b:35:ba:2d:e9:
1e:cc:5d:31:c3:82:74:28:04:6b:38:61:db:04:d9:
8c:64:db:34:c3:df:0e:0b:fa:d5:ab:c5:48:3e:b8:
14:e3:2e:41:be:87:a5:f5:46:c2:f8:0b:82:88:4c:
97:eb:6c:ba:48:88:44:7e:e9:6d:ff:44:28:82:84:
04:af:93:e3:3a:09:d8:23:85:88:ef:38:a8:18:31:
92:6c:7e:06:b1:d6:9f:db:f9:9c:21:17:75:19:e5:
28:62:5a:5c:2c:29:97:b2:e9:a5:ea:ac:c9:99:3a:
2e:1e:52:ff:31:1e:ad:c2:72:e6:94:82:72:dc:fc:
2b:51:f9:da:9c:2d:2a:23:68:88:98:fb:f6:c5:c9:
af:a0:28:47:7d:11:f9:29:d1:37:dd:04:2e:6b:2b:
86:d9:ae:00:d3:a6:fa:d4:7b:16:6e:ac:95:9d:c7:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:F5:96:B9:F9:96:29:48:4D:2A:F9:D1:42:92:F5:EE:3F:2E:12
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/F98AAB1E859811F19F5CC217CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.161.0/24
Signature Algorithm: sha256WithRSAEncryption
90:74:fa:cc:b8:e4:dd:01:ae:99:4b:67:1f:c4:28:53:ac:73:
df:fc:a9:9f:bf:15:e2:95:7e:63:a7:2f:33:76:cb:54:60:b0:
e9:52:b6:49:d8:14:9f:ae:2d:62:3c:12:5f:b1:34:80:66:86:
75:b1:61:80:51:4c:04:22:52:36:09:c2:ab:a2:3f:e3:83:81:
cb:56:16:ac:01:5a:f1:b9:bf:65:a0:19:48:9b:47:10:a1:56:
f8:c0:13:0f:2e:f6:10:f6:b1:55:ae:c6:9d:17:a8:1c:40:a0:
3f:d3:2a:93:35:5b:bf:97:2e:7d:84:5e:62:af:81:4a:60:2e:
f8:1f:3d:7d:4d:55:b8:26:30:3d:9d:92:ab:67:84:ba:b1:de:
e9:63:34:63:64:3a:5b:c6:0f:1c:68:c3:0f:a2:04:8c:87:f6:
56:3f:5d:27:69:67:cb:ba:73:db:6a:00:f4:31:78:9a:dc:58:
31:ac:47:10:78:9c:40:cc:5e:83:5a:c4:ff:83:46:cf:05:60:
cf:6a:ae:bf:e9:56:ff:5d:39:b2:11:70:86:f7:ec:3a:87:f0:
38:c4:f4:82:9c:a0:86:91:2d:e1:bb:39:20:d6:4a:44:f8:bb:
6e:be:67:ed:d2:b6:66:3f:9b:ab:e4:5f:63:01:eb:a7:23:de:
1a:a2:0a:88
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yNjA3MjIwNjQ1NDZaFw0zNjA3MjIwNjQ1NDZaMBgxFjAU
BgNVBAMTDTZhNjA2NzFlLTY1YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfJ709Ho0njYm1C00PdQLg1GvNnJatiJiIL4NfW4aj9TQlolOxI6kakduL
5wiBxPb01RlwE4afFLvbLhl3t3uY6u3A2shQe8x3rJRmue1Qi/6O9QgbNbot6R7M
XTHDgnQoBGs4YdsE2Yxk2zTD3w4L+tWrxUg+uBTjLkG+h6X1RsL4C4KITJfrbLpI
iER+6W3/RCiChASvk+M6CdgjhYjvOKgYMZJsfgax1p/b+ZwhF3UZ5ShiWlwsKZey
6aXqrMmZOi4eUv8xHq3CcuaUgnLc/CtR+dqcLSojaIiY+/bFya+gKEd9Efkp0Tfd
BC5rK4bZrgDTpvrUexZurJWdxx8FAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/nv1
lrn5lilITSr50UKS9e4/LhIwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4L0Y5OEFBQjFFODU5ODExRjE5RjVDQzIxN0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAptKEwDQYJKoZIhvcNAQEL
BQADggEBAJB0+sy45N0BrplLZx/EKFOsc9/8qZ+/FeKVfmOnLzN2y1RgsOlStknY
FJ+uLWI8El+xNIBmhnWxYYBRTAQiUjYJwquiP+ODgctWFqwBWvG5v2WgGUibRxCh
VvjAEw8u9hD2sVWuxp0XqBxAoD/TKpM1W7+XLn2EXmKvgUpgLvgfPX1NVbgmMD2d
kqtnhLqx3uljNGNkOlvGDxxoww+iBIyH9lY/XSdpZ8u6c9tqAPQxeJrcWDGsRxB4
nEDMXoNaxP+DRs8FYM9qrr/pVv9dObIRcIb37DqH8DjE9IKcoIaRLeG7OSDWSkT4
u26+Z+3StmY/m6vkX2MB66cj3hqiCog=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:31 2026 by rpki-client