Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/0F3FA91E5DE411F18A9EF1D2CE1D38B0.roa
File: 0F3FA91E5DE411F18A9EF1D2CE1D38B0.roa (raw, json)
Hash identifier: 7LqF0h4HZlgH4xiK7+BEC8hYEvQZpFaEw4sMQ+xElKs=
Subject key identifier: EF:2D:55:4F:69:CF:A3:1C:D2:0D:3B:63:E5:7E:D8:8E:E6:9E:89:B3
Certificate issuer: /CN=F3668B03AF/serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Certificate serial: 01D0
Authority key identifier: C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/0F3FA91E5DE411F18A9EF1D2CE1D38B0.roa
Signing time: Mon 01 Jun 2026 18:02:32 +0000
ROA not before: Mon 01 Jun 2026 18:02:26 +0000
ROA not after: Sun 01 Jun 2036 18:02:26 +0000
asID: 22351
IP address blocks: 41.194.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668B03AF, serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Validity
Not Before: Jun 1 18:02:26 2026 GMT
Not After : Jun 1 18:02:26 2036 GMT
Subject: CN=6a1dc938-0e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:b7:24:7f:08:db:99:c0:1b:0a:a1:28:05:
01:88:16:29:04:57:2c:a1:55:87:25:c0:d2:11:2d:
57:b2:11:d1:22:3d:53:02:3b:5b:80:06:31:47:5d:
dd:8e:5e:3e:40:61:a1:53:e7:42:80:c9:e8:f7:9d:
26:18:f5:5e:8f:8a:b6:a7:3e:76:b2:f6:97:02:78:
fa:91:dc:7e:ad:9a:d2:08:b5:dc:8a:5f:40:74:4a:
c5:21:0d:8f:db:da:cc:8d:fb:43:b2:4d:d2:c3:5b:
c6:7c:50:77:c2:13:98:6b:8b:ea:da:48:92:7c:f9:
23:7c:99:b7:5e:48:a8:43:d2:a3:fe:89:e5:95:20:
db:cb:af:75:41:e0:53:19:16:5d:73:bc:f6:79:03:
5c:46:92:4d:11:73:96:f9:7a:82:59:b8:98:af:b2:
fb:a4:b4:62:4a:ab:85:46:a1:52:8a:f7:79:f0:7e:
8d:fc:d2:2a:71:80:30:d3:46:54:21:9f:cb:38:ec:
8e:61:7a:46:3d:a7:b4:82:0d:6a:2a:88:24:7a:ed:
18:5e:8d:03:a9:81:27:78:2e:ad:0b:e3:d7:89:62:
ae:ac:d7:23:9f:ec:77:9a:58:b1:b2:ba:1f:1f:53:
bf:48:b3:f3:0d:6b:a8:83:09:02:b8:02:37:60:25:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2D:55:4F:69:CF:A3:1C:D2:0D:3B:63:E5:7E:D8:8E:E6:9E:89:B3
X509v3 Authority Key Identifier:
keyid:C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/0F3FA91E5DE411F18A9EF1D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.194.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:41:90:bb:67:ad:d1:ad:51:f9:3b:e7:a3:dd:2f:e9:77:c2:
4a:8d:42:71:12:99:8a:39:d9:c4:19:4a:12:f5:68:39:f3:da:
92:ac:5b:8b:8b:5c:ee:bd:6e:f5:a8:7f:dc:c6:3e:3c:12:74:
84:7d:1b:37:f5:4f:b3:a0:b1:5a:6d:87:54:88:ba:70:10:86:
bb:46:78:7d:3c:e7:49:f1:02:ae:0d:78:ea:1a:0a:5f:de:59:
f8:a7:b8:48:75:f1:fb:18:77:dd:7e:4b:5a:3e:0f:f1:c0:85:
5f:f6:0d:d3:07:f8:3f:f1:83:e0:40:f3:05:e6:83:d9:91:66:
e5:7a:0d:d5:93:07:f1:31:6d:37:28:3f:1f:a8:4d:f9:ae:50:
96:72:44:b5:3b:03:a1:1e:4b:b6:d4:ed:0c:eb:c1:9e:18:fb:
d8:3b:02:e4:41:c4:d7:61:3d:67:4b:12:4c:ba:67:a4:7c:03:
fd:4d:37:01:f5:48:3e:fd:b4:64:65:e9:c0:97:60:c6:56:77:
5a:79:b3:c9:65:a4:9a:89:9d:da:32:7d:1f:5b:8e:77:d7:dd:
8e:6e:ed:98:d0:ca:15:60:3d:93:61:41:bf:f2:03:40:3e:48:
4f:f1:76:18:d0:d6:a1:a5:28:0a:ab:b2:6d:65:d3:29:8c:67:
f9:a1:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:38 2026 by rpki-client