Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/06C6A08E8A7711F18B10D0CBCE1D38B0.roa
File: 06C6A08E8A7711F18B10D0CBCE1D38B0.roa (raw, json)
Hash identifier: kYdhjehJJ+7p9ptENDdhVsp3hPIU3M4FOM361med4fA=
Subject key identifier: E0:F8:4B:F9:89:A6:7E:B0:CF:A1:B5:E8:91:3F:FC:B1:7B:A2:07:02
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 0814
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/06C6A08E8A7711F18B10D0CBCE1D38B0.roa
Signing time: Tue 28 Jul 2026 11:25:25 +0000
ROA not before: Tue 28 Jul 2026 11:25:20 +0000
ROA not after: Wed 31 Dec 2036 11:25:20 +0000
asID: 36994
IP address blocks: 41.24.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 28 11:25:20 2026 GMT
Not After : Dec 31 11:25:20 2036 GMT
Subject: CN=6a6891a5-a0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:09:cb:74:eb:6c:76:30:82:e5:ea:08:d5:62:
70:ab:2f:74:32:ae:e3:f2:97:35:20:6e:0c:ee:06:
d9:eb:9c:c2:3f:86:4e:6d:a3:d2:c8:8d:24:3c:82:
bb:23:2b:a9:a3:09:58:eb:d9:3a:e1:88:d0:fd:e9:
31:6c:cb:4a:3c:e6:1b:f9:62:b0:d5:24:a7:57:d4:
d8:6e:75:6e:e7:c3:f0:aa:2d:94:88:55:7a:d9:34:
f6:03:4d:97:01:bb:81:8c:fc:1d:1c:ec:10:90:72:
c7:70:0c:a8:7d:44:a4:7e:18:b7:a8:b6:c2:9c:4c:
75:e7:2c:3c:e2:cd:60:80:f9:f5:f1:69:1f:e0:ed:
fb:33:a9:f6:0f:4c:70:5c:ee:a5:dc:71:8d:74:fe:
f3:90:9c:97:bf:1f:5c:ab:2d:c0:2b:a3:9b:8f:77:
0d:1b:5a:d5:ce:3a:fb:11:f3:99:b7:51:b2:db:b3:
6a:e8:ac:61:06:15:fe:e2:cc:d5:e2:c2:bc:83:4e:
f0:9f:c9:0a:8a:fb:32:df:b5:95:29:56:77:b0:bd:
5d:54:89:d2:16:b2:a2:15:f6:07:81:5b:c4:1d:d7:
89:2c:99:77:d7:22:1f:ba:70:90:b6:92:71:62:cc:
a6:39:0f:33:10:ce:86:3d:1c:c4:33:f4:c3:d2:3b:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:4B:F9:89:A6:7E:B0:CF:A1:B5:E8:91:3F:FC:B1:7B:A2:07:02
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/06C6A08E8A7711F18B10D0CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:87:3c:2c:d8:7b:99:2f:cf:98:54:69:8d:4f:f2:09:09:5f:
0d:79:b6:46:27:43:bc:f0:6b:e1:e7:08:16:c0:f8:4d:12:44:
9d:cc:5b:30:be:71:6a:0d:30:d6:04:a0:b2:be:10:2a:c5:2f:
ed:8d:d0:e3:ac:8e:4f:17:f6:c5:6a:66:5b:9c:86:6f:66:1c:
b2:7e:19:27:89:cd:5a:d6:63:9e:aa:72:fb:86:b7:f3:f8:ca:
3f:22:ca:50:46:7f:d2:55:3a:9f:cc:7b:65:9c:f6:4b:ad:a6:
e7:6f:e2:37:5b:ad:0f:77:c1:f5:71:7a:72:ac:eb:ab:a8:31:
20:7f:d2:7b:df:d9:7b:d5:97:3a:eb:ea:fc:b7:df:b1:f5:a8:
56:70:7f:12:da:5c:d7:3c:c6:e4:e2:ba:37:d2:5f:2b:7a:3e:
1b:c8:ed:32:38:1b:40:fd:5e:6d:c2:7e:ae:65:4b:8a:22:4f:
a3:f0:0f:fc:4c:2a:24:96:df:99:a9:db:6c:14:d8:16:c2:e5:
e0:77:12:4d:47:d4:97:b2:44:7d:11:f5:46:cb:41:fa:e8:a5:
ca:89:db:8c:07:43:04:54:2f:45:39:04:3a:48:5a:e1:6e:26:
5d:a9:f6:58:ea:66:b6:91:46:f1:52:9a:e9:4f:27:35:0b:a5:
80:ce:3f:ce
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA3MjgxMTI1MjBaFw0zNjEyMzExMTI1MjBaMBgxFjAU
BgNVBAMTDTZhNjg5MWE1LWEwZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuCct062x2MILl6gjVYnCrL3QyruPylzUgbgzuBtnrnMI/hk5to9LIjSQ8
grsjK6mjCVjr2TrhiND96TFsy0o85hv5YrDVJKdX1NhudW7nw/CqLZSIVXrZNPYD
TZcBu4GM/B0c7BCQcsdwDKh9RKR+GLeotsKcTHXnLDzizWCA+fXxaR/g7fszqfYP
THBc7qXccY10/vOQnJe/H1yrLcAro5uPdw0bWtXOOvsR85m3UbLbs2rorGEGFf7i
zNXiwryDTvCfyQqK+zLftZUpVnewvV1UidIWsqIV9geBW8Qd14ksmXfXIh+6cJC2
knFizKY5DzMQzoY9HMQz9MPSO1VpAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU4PhL
+YmmfrDPobXokT/8sXuiBwIwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzA2QzZBMDhFOEE3NzExRjE4QjEwRDBDQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwApGDANBgkqhkiG9w0BAQsF
AAOCAQEAHYc8LNh7mS/PmFRpjU/yCQlfDXm2RidDvPBr4ecIFsD4TRJEncxbML5x
ag0w1gSgsr4QKsUv7Y3Q46yOTxf2xWpmW5yGb2Ycsn4ZJ4nNWtZjnqpy+4a38/jK
PyLKUEZ/0lU6n8x7ZZz2S62m52/iN1utD3fB9XF6cqzrq6gxIH/Se9/Ze9WXOuvq
/LffsfWoVnB/Etpc1zzG5OK6N9JfK3o+G8jtMjgbQP1ebcJ+rmVLiiJPo/AP/Ewq
JJbfmanbbBTYFsLl4HcSTUfUl7JEfRH1RstB+uilyonbjAdDBFQvRTkEOkha4W4m
Xan2WOpmtpFG8VKa6U8nNQulgM4/zg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:26:29 2026 by rpki-client