Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/9743DFA85F2C11F1B08A20ACCE1D38B0.roa
File: 9743DFA85F2C11F1B08A20ACCE1D38B0.roa (raw, json)
Hash identifier: 6+I4Ss6xdQzMUvMZ4EpZ+iZcvqYNBP3da5JJTuOSMIE=
Subject key identifier: 6A:EF:87:4A:48:30:76:D6:C1:67:D3:DA:52:A7:D6:FE:43:72:B5:FC
Certificate issuer: /CN=F362CE41AF/serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Certificate serial: 04AD
Authority key identifier: 6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/9743DFA85F2C11F1B08A20ACCE1D38B0.roa
Signing time: Wed 03 Jun 2026 09:14:15 +0000
ROA not before: Sun 28 Jun 2026 09:14:10 +0000
ROA not after: Sun 24 Jun 2029 09:14:10 +0000
asID: 17400
IP address blocks: 41.221.240.0/20 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362CE41AF, serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Validity
Not Before: Jun 28 09:14:10 2026 GMT
Not After : Jun 24 09:14:10 2029 GMT
Subject: CN=6a1ff067-1268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:2f:c7:8a:02:d2:7a:e0:8c:57:7e:f4:cc:
9f:1d:c7:94:7b:67:e3:83:b2:ee:af:2e:c2:fc:80:
bd:01:47:4a:9e:42:36:39:87:23:64:92:a4:83:ab:
a3:7e:d8:f2:d1:c2:65:6e:38:6d:10:05:43:d3:8a:
96:a0:b3:7f:c4:4a:f2:aa:ec:f4:6a:df:5e:db:11:
2f:02:dd:78:35:d4:32:3a:c5:0e:77:f0:5a:57:4a:
c2:94:90:e2:a9:3d:24:23:5f:71:7b:6e:66:5e:0f:
eb:7d:12:13:3d:a4:ad:da:3f:43:69:11:bf:2c:56:
93:77:47:4b:5a:e5:15:42:b6:1d:a7:aa:5d:d4:c0:
34:2f:3b:7e:cf:28:52:43:85:24:8b:44:6d:52:7b:
78:15:6c:47:8d:7f:9e:1f:91:79:d1:ca:23:af:87:
1d:62:68:4f:0f:7f:a3:e1:88:39:b5:3b:53:15:53:
a5:27:88:35:48:b6:19:24:b5:d8:15:8e:ad:16:e7:
5c:54:aa:dc:74:11:6a:1d:bf:01:dd:b4:f2:50:ff:
63:1c:8b:17:4a:4a:f6:d7:0c:e0:6b:f0:a8:df:e7:
1c:1f:cc:a7:63:74:86:84:7e:37:bc:ac:68:4e:f9:
dd:7e:f5:36:cb:5e:34:4b:d7:4b:c2:84:ef:24:89:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:87:4A:48:30:76:D6:C1:67:D3:DA:52:A7:D6:FE:43:72:B5:FC
X509v3 Authority Key Identifier:
keyid:6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/9743DFA85F2C11F1B08A20ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:0f:6c:4c:66:b5:45:3a:51:df:3f:3c:aa:63:ec:c7:e0:68:
38:50:c8:5b:66:f2:b8:c8:47:21:5d:6f:ef:d0:e1:ac:d4:c2:
45:6b:3d:c6:b1:f4:64:23:10:74:9f:e6:a5:f8:21:9c:e7:99:
07:64:b3:34:fb:7a:ce:b4:21:95:d3:20:38:51:f5:b4:10:3d:
3d:e9:de:c3:c2:90:cd:40:bc:19:43:a5:86:b2:ac:a7:39:7d:
3a:90:94:75:2c:8b:fa:e3:8c:9f:82:c1:61:67:6a:23:a3:14:
9d:f0:c0:2e:5b:f3:37:ed:49:30:00:06:d2:1c:4b:f8:cb:86:
28:14:c2:04:fc:f8:5f:44:69:9d:b3:da:f6:f9:93:44:19:0c:
57:e3:e9:b6:53:2d:c9:a5:9f:74:14:c5:7e:14:1b:3c:d6:4a:
fb:37:64:e4:ff:c6:72:2e:8d:f1:c5:f3:73:07:14:82:b3:24:
48:1d:7d:7a:9b:d9:5a:74:ee:0c:9c:4f:f1:6e:06:ee:22:9b:
b2:bb:46:a7:f6:80:44:be:7f:ce:1a:7a:30:f1:18:f1:7e:68:
77:ee:bf:1a:38:9f:9e:23:36:0a:4b:f0:51:84:5e:68:91:e3:
2e:ca:27:57:45:63:de:69:81:b0:2e:6a:94:9f:04:1f:64:58:
c4:ea:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:52 2026 by rpki-client