Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/68DD4F588A7611F1A952BEC7CE1D38B0.roa
File: 68DD4F588A7611F1A952BEC7CE1D38B0.roa (raw, json)
Hash identifier: dBSDI4pF5T+CJaf1GEzqTRSoe0JHuusKVRbb8Hf0RWs=
Subject key identifier: 3A:1F:44:AB:1B:99:2D:64:2E:3F:92:DD:FB:D3:D9:80:90:E2:F1:00
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 0812
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/68DD4F588A7611F1A952BEC7CE1D38B0.roa
Signing time: Tue 28 Jul 2026 11:21:00 +0000
ROA not before: Tue 28 Jul 2026 11:20:55 +0000
ROA not after: Wed 31 Dec 2036 11:20:55 +0000
asID: 36994
IP address blocks: 41.23.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 11:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 28 11:20:55 2026 GMT
Not After : Dec 31 11:20:55 2036 GMT
Subject: CN=6a68909c-0dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:be:b1:f2:b4:9d:a2:71:ed:55:14:ca:c0:
40:3c:bc:7e:67:cf:a4:ba:f4:b3:3d:74:c6:1f:24:
46:27:f2:4a:0d:28:9d:ff:01:b0:48:7c:7e:e2:3f:
55:b6:8b:d9:61:28:2b:89:01:f1:33:2f:ae:8f:e0:
06:74:e1:0e:e0:d5:1c:f8:ce:6f:30:97:ec:b7:e4:
d2:4d:61:b6:b2:3a:eb:b8:8e:1a:a8:68:89:03:28:
fa:5e:79:95:75:9f:25:bf:6d:22:e9:a0:9c:d6:2a:
7d:05:53:78:ce:f2:f6:ee:95:0a:69:59:64:22:ed:
23:ae:fa:1d:40:79:21:b3:dd:eb:e9:ee:11:54:29:
9c:97:9f:83:1f:59:1b:ce:e8:b3:2d:48:28:7c:ad:
19:f1:9b:58:89:d4:fa:eb:5f:93:ad:7d:89:49:f6:
46:58:d8:e2:7a:29:16:76:d5:0d:fc:8c:c8:56:cf:
f8:f0:6e:01:51:7d:42:6c:54:ea:e2:12:ce:ae:29:
9a:92:c3:b7:9c:ce:c0:37:5f:e2:f2:a7:13:f7:3b:
bc:07:b4:94:22:00:d6:46:d2:a8:0f:75:e9:51:a0:
b8:42:30:50:cf:a1:8c:c9:43:37:d3:1f:37:3c:50:
96:cc:44:43:e6:3c:34:77:e8:09:26:df:46:ab:7a:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:44:AB:1B:99:2D:64:2E:3F:92:DD:FB:D3:D9:80:90:E2:F1:00
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/68DD4F588A7611F1A952BEC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.23.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:42:35:41:ee:a5:96:e9:18:fc:a1:dd:02:04:df:73:a0:09:
cd:e5:20:c9:01:4f:a0:be:b7:b1:ae:80:c3:49:17:24:da:60:
16:4b:49:2e:5a:eb:db:ea:e5:93:ec:02:27:dc:4c:93:05:92:
d8:5e:19:93:56:27:cf:b1:f6:e1:82:16:3f:9a:a8:c0:b8:16:
30:5d:91:b6:65:64:d7:f7:53:ac:b5:90:66:e6:10:7b:24:8c:
e9:86:0f:ae:f0:62:4d:ca:b3:fd:15:7e:1a:72:bd:e1:38:42:
a3:20:10:b9:68:c1:c9:4d:75:91:d2:1c:80:db:89:56:fb:7e:
97:4b:59:3d:9b:55:07:74:27:bc:b3:72:45:45:a7:6e:60:a1:
d6:3f:56:b0:0e:0d:af:6e:cd:8d:9e:d3:3f:b5:1b:25:0a:17:
6f:ad:5f:3c:de:bc:4f:9d:54:ee:9f:c8:82:c0:3b:86:dc:1f:
d3:28:5e:80:03:6a:df:ce:64:04:5c:38:d8:d5:97:17:30:b5:
f2:cf:2c:2f:ee:bd:7f:2b:72:8e:6b:07:49:6c:24:89:7e:6c:
10:88:16:0c:fc:b2:0c:c9:2d:d3:65:03:1e:c9:85:25:57:03:
c8:bb:9e:c8:50:68:4d:6e:a1:23:73:2d:e3:0c:19:cd:f5:b5:
34:3b:f1:e5
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA3MjgxMTIwNTVaFw0zNjEyMzExMTIwNTVaMBgxFjAU
BgNVBAMTDTZhNjg5MDljLTBkY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/Ub6x8rSdonHtVRTKwEA8vH5nz6S69LM9dMYfJEYn8koNKJ3/AbBIfH7i
P1W2i9lhKCuJAfEzL66P4AZ04Q7g1Rz4zm8wl+y35NJNYbayOuu4jhqoaIkDKPpe
eZV1nyW/bSLpoJzWKn0FU3jO8vbulQppWWQi7SOu+h1AeSGz3evp7hFUKZyXn4Mf
WRvO6LMtSCh8rRnxm1iJ1PrrX5OtfYlJ9kZY2OJ6KRZ21Q38jMhWz/jwbgFRfUJs
VOriEs6uKZqSw7eczsA3X+LypxP3O7wHtJQiANZG0qgPdelRoLhCMFDPoYzJQzfT
Hzc8UJbMREPmPDR36Akm30arejqdAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUOh9E
qxuZLWQuP5Ld+9PZgJDi8QAwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzY4REQ0RjU4OEE3NjExRjFBOTUyQkVDN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwApFzANBgkqhkiG9w0BAQsF
AAOCAQEAD0I1Qe6llukY/KHdAgTfc6AJzeUgyQFPoL63sa6Aw0kXJNpgFktJLlrr
2+rlk+wCJ9xMkwWS2F4Zk1Ynz7H24YIWP5qowLgWMF2RtmVk1/dTrLWQZuYQeySM
6YYPrvBiTcqz/RV+GnK94ThCoyAQuWjByU11kdIcgNuJVvt+l0tZPZtVB3QnvLNy
RUWnbmCh1j9WsA4Nr27NjZ7TP7UbJQoXb61fPN68T51U7p/IgsA7htwf0yhegANq
385kBFw42NWXFzC18s8sL+69fytyjmsHSWwkiX5sEIgWDPyyDMkt02UDHsmFJVcD
yLueyFBoTW6hI3Mt4wwZzfW1NDvx5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:50 2026 by rpki-client