Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/F62FC5E04E1511F1A75CF7ABCE1D38B0.roa
File: F62FC5E04E1511F1A75CF7ABCE1D38B0.roa (raw, json)
Hash identifier: eXaD9uNrzskgYX1zhyJOG2OtWxtH3cWaQ3wAyO77nPY=
Subject key identifier: AE:C7:2A:F2:86:4F:A5:05:BC:36:14:76:19:3B:20:89:BD:95:79:EF
Certificate issuer: /CN=F3669EE9AF/serialNumber=F46171D43E28D8CBB70AD73D2947CD20096210DF
Certificate serial: 06
Authority key identifier: F4:61:71:D4:3E:28:D8:CB:B7:0A:D7:3D:29:47:CD:20:09:62:10:DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/F62FC5E04E1511F1A75CF7ABCE1D38B0.roa
Signing time: Tue 12 May 2026 15:19:26 +0000
ROA not before: Tue 12 May 2026 15:19:21 +0000
ROA not after: Fri 12 May 2028 15:19:21 +0000
asID: 33786
IP address blocks: 41.75.48.0/20 maxlen: 20
196.29.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.mft
rsync://rpki.afrinic.net/repository/afrinic/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 12:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669EE9AF, serialNumber=F46171D43E28D8CBB70AD73D2947CD20096210DF
Validity
Not Before: May 12 15:19:21 2026 GMT
Not After : May 12 15:19:21 2028 GMT
Subject: CN=6a0344fe-d241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:3b:84:07:c2:4e:86:83:f7:bf:cd:60:a8:
6b:2d:8a:73:ff:53:26:3a:81:1c:2b:c9:50:e4:0b:
05:ae:a9:96:aa:9f:ef:b6:9c:f4:dd:55:9e:68:ea:
43:db:22:f4:7d:49:14:80:06:8a:5e:a4:88:7c:0f:
60:79:5d:fa:a0:68:45:38:60:c4:9b:07:d5:d1:53:
99:75:c2:9f:c6:51:2a:18:e4:4a:7d:a9:cb:87:9d:
18:3d:93:68:58:a0:e8:23:fc:98:b7:d0:1f:88:5f:
d8:f9:13:fd:cf:d0:c0:de:33:2d:bd:4b:d1:f3:0b:
1b:14:79:52:cb:14:f0:1f:b7:2d:a6:bf:9c:87:0e:
2c:17:97:40:4c:85:8f:33:e7:b6:08:9e:34:1b:d2:
6a:e3:5b:b3:45:d6:06:50:63:d7:bb:e0:d9:20:9e:
cf:80:f7:85:ff:e5:40:98:34:82:23:e6:8b:a2:97:
b0:83:3e:2c:1b:48:3d:a7:4e:bb:9c:0f:4a:39:52:
65:f1:75:f8:55:91:27:54:b5:cd:6e:9f:5f:d9:30:
44:49:a2:2f:ed:19:1b:38:ff:58:25:ce:1e:6c:c5:
30:d9:76:cd:8c:a3:22:cf:06:a2:7c:e7:39:f4:47:
71:f8:66:46:1e:92:42:15:c4:f3:a3:a5:11:d1:fc:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C7:2A:F2:86:4F:A5:05:BC:36:14:76:19:3B:20:89:BD:95:79:EF
X509v3 Authority Key Identifier:
keyid:F4:61:71:D4:3E:28:D8:CB:B7:0A:D7:3D:29:47:CD:20:09:62:10:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9GFx1D4o2Mu3Ctc9KUfNIAliEN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669EE9/A1CAC8E84DFB11F1AFCEE10DCF1D38B0/F62FC5E04E1511F1A75CF7ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.75.48.0/20
196.29.224.0/20
Signature Algorithm: sha256WithRSAEncryption
80:22:40:9c:60:10:a2:82:56:54:5f:c1:f4:b9:73:4b:8e:52:
62:13:39:68:bc:af:d1:95:02:63:c6:a3:87:ed:97:01:15:27:
ad:12:94:45:b5:63:75:c6:c5:fc:ae:b7:bd:13:37:d4:6a:97:
3a:28:ca:b9:6a:e8:db:b4:fb:9b:73:de:5d:cb:4b:32:9e:db:
6e:02:68:87:96:03:59:bd:ed:fe:07:01:f3:96:c1:9d:26:76:
49:46:d1:3a:86:38:dc:88:51:c4:10:95:ee:3e:30:5a:d9:8b:
27:7d:36:de:83:79:e5:3f:9f:52:46:c3:51:d5:86:1f:14:35:
8d:72:cc:d9:46:4b:f7:75:a4:1f:9a:7a:68:bf:a7:e2:ab:e3:
9f:f4:a3:63:07:4c:23:0e:e2:e1:27:f6:7c:3d:08:09:e3:02:
e9:2b:c8:78:4b:fd:75:8a:66:86:05:96:a6:0f:ab:59:46:29:
d6:86:6b:80:b9:6e:42:df:09:66:f0:96:d5:47:22:8d:c0:e2:
83:c4:ce:7a:53:57:26:d6:2b:83:bf:f4:12:98:d2:55:da:16:
be:37:79:a7:f6:62:9b:d5:27:1e:4f:30:be:c7:42:47:c8:a1:
07:ac:d7:e7:f0:0f:5b:45:d8:0a:0c:b6:df:3f:db:5f:d5:73:
98:49:16:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:51 2026 by rpki-client