Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/6679CA665D8F11F1B99E3DDDCE1D38B0.roa
File: 6679CA665D8F11F1B99E3DDDCE1D38B0.roa (raw, json)
Hash identifier: vHvA5+wAtU3QNSpWi/AryTgMZzTm5r9z0oV1H9RPG64=
Subject key identifier: 58:8A:22:73:30:FA:EA:E4:84:43:D5:E8:F5:7C:54:25:6E:09:FA:E3
Certificate issuer: /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial: 0EE4
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/6679CA665D8F11F1B99E3DDDCE1D38B0.roa
Signing time: Mon 01 Jun 2026 07:56:31 +0000
ROA not before: Mon 01 Jun 2026 07:56:26 +0000
ROA not after: Sun 01 Jun 2036 07:56:26 +0000
asID: 37670
IP address blocks: 41.77.48.0/21 maxlen: 24
41.77.48.0/24 maxlen: 24
41.77.49.0/24 maxlen: 24
41.77.50.0/24 maxlen: 24
41.77.51.0/24 maxlen: 24
41.77.52.0/24 maxlen: 24
41.77.53.0/24 maxlen: 24
41.77.54.0/24 maxlen: 24
41.77.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3812 (0xee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651254AF, serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Validity
Not Before: Jun 1 07:56:26 2026 GMT
Not After : Jun 1 07:56:26 2036 GMT
Subject: CN=6a1d3b2f-a25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:62:ec:6b:cb:cf:bf:a1:f9:27:7d:7b:b1:
a7:01:47:9b:08:80:3e:52:6f:1f:50:0b:98:d6:db:
08:de:29:b0:12:cc:15:da:ff:30:36:ba:b7:e8:6e:
0b:82:67:16:d8:46:ca:33:db:33:f8:85:5b:92:90:
f2:2f:f2:bd:c4:cc:ad:84:65:89:64:ee:aa:bf:d6:
16:99:38:5b:15:f2:96:d2:24:19:e9:9a:fc:4f:6f:
10:a7:fe:ca:9f:11:3a:9a:39:df:67:20:89:73:21:
4e:86:1e:44:bd:c1:55:ea:39:e6:33:4b:02:1f:21:
0b:41:f0:43:02:f4:9a:66:18:21:3f:ac:1f:68:22:
d6:45:75:b4:9c:ec:0a:fc:ee:70:db:35:0c:26:bd:
5c:f4:da:d0:bd:53:96:d5:3e:3a:0f:27:a2:30:de:
f8:00:5c:b6:ad:77:ea:67:77:59:ea:1f:78:68:31:
e3:91:00:c7:73:53:90:38:bc:3e:b5:b6:41:b3:e7:
35:2c:d6:e5:27:56:f1:38:13:be:40:8c:d2:b5:33:
17:44:b1:e5:55:d6:2c:47:d3:6d:b4:04:da:0d:df:
e4:6a:42:30:5b:1d:1f:ea:c7:e9:d2:72:4e:a2:df:
c0:63:fa:76:89:7b:8a:cb:13:9b:01:41:2a:72:e4:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:22:73:30:FA:EA:E4:84:43:D5:E8:F5:7C:54:25:6E:09:FA:E3
X509v3 Authority Key Identifier:
keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/6679CA665D8F11F1B99E3DDDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.48.0/21
Signature Algorithm: sha256WithRSAEncryption
95:2c:6f:a2:ac:7d:d1:af:31:58:5e:f2:69:3d:27:6f:d4:7f:
1f:a8:b6:98:ea:91:32:ad:85:aa:cb:23:34:e8:11:b0:1d:aa:
a4:9e:52:d0:5b:26:be:11:04:2a:23:67:b0:32:1d:64:36:da:
dc:08:12:ac:ac:46:b7:fc:9c:16:1f:45:3e:69:46:d0:35:f9:
25:a7:d4:44:58:87:0a:77:69:bf:88:83:6a:b4:7d:df:31:8d:
16:df:b5:0f:70:37:e7:4a:61:cd:64:81:60:2d:0c:da:3c:44:
5d:aa:ad:37:11:ed:65:2a:8a:82:5c:0a:2e:e2:70:45:f2:95:
17:8c:76:13:23:fc:55:58:a5:a6:4f:7a:2b:8a:c5:0d:2e:87:
ff:24:ed:ba:af:6e:59:f8:db:91:53:5c:48:04:b5:d1:f9:21:
a3:c3:00:d7:75:e9:33:b4:3c:df:bf:ee:49:09:9f:dc:ef:ca:
f6:0f:bf:10:20:04:51:df:eb:91:3d:f3:25:bc:2d:98:c9:ca:
7e:7e:a5:0b:42:36:7c:c6:fc:7b:34:d8:ac:f8:cb:c0:0c:ad:
24:78:91:c4:d2:01:7c:2d:10:8c:01:3c:2f:ae:73:8c:ed:c0:
9a:b9:85:10:66:be:71:60:ff:31:6b:d9:6e:f1:79:c4:73:d8:
9a:c5:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:06:30 2026 by rpki-client