Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/6A3CAA065DE411F199794AD6CE1D38B0.roa
File: 6A3CAA065DE411F199794AD6CE1D38B0.roa (raw, json)
Hash identifier: 917FqsA/LK7EQ13YXGZzA5d97W1Nzk/ziVaJ/T9Mseo=
Subject key identifier: E0:B5:7F:81:EA:E8:B7:4E:84:B7:40:5E:83:B1:A0:8C:EA:3E:75:C7
Certificate issuer: /CN=F3668B03AF/serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Certificate serial: 01D4
Authority key identifier: C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/6A3CAA065DE411F199794AD6CE1D38B0.roa
Signing time: Mon 01 Jun 2026 18:05:04 +0000
ROA not before: Mon 01 Jun 2026 18:05:00 +0000
ROA not after: Sun 01 Jun 2036 18:05:00 +0000
asID: 22351
IP address blocks: 41.194.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668B03AF, serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Validity
Not Before: Jun 1 18:05:00 2026 GMT
Not After : Jun 1 18:05:00 2036 GMT
Subject: CN=6a1dc9d0-00f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:d1:e4:7c:92:bb:bb:79:5a:a1:6a:f2:fc:
b7:1b:02:52:4a:d4:1e:17:31:4a:f6:e4:40:b7:55:
9b:8e:c2:db:3b:5a:11:2f:80:e0:c8:96:18:c7:f2:
7e:7c:c0:42:b4:db:43:a8:96:37:17:a4:b7:9b:77:
c4:e3:43:5e:03:4e:6a:f1:4f:29:a2:f5:e9:91:b4:
c0:71:b9:02:bf:5d:a4:56:0e:6d:b4:e1:23:ba:f2:
d8:4c:22:af:ad:73:aa:6c:2a:63:89:97:ae:c1:a2:
9d:f3:57:0d:29:63:aa:08:3b:83:0a:d8:87:29:0a:
4e:7d:b3:35:ec:e2:ac:b5:61:c8:93:01:83:b0:d8:
7e:3b:1d:98:d3:5f:72:00:c7:7d:83:51:7d:33:df:
95:06:c3:52:87:56:50:f5:fa:bd:c2:19:62:09:21:
bc:2e:8b:54:37:11:ad:7e:ef:2c:0b:ce:4e:e8:d8:
6c:8a:05:de:cc:77:1d:cd:0c:47:af:9e:35:22:c4:
2b:3c:fa:ae:49:77:67:8a:72:99:d1:f4:d9:33:2c:
9e:40:a9:77:cc:85:86:ed:e5:98:18:79:f7:92:f6:
69:f7:8c:46:36:f8:73:cd:ea:96:f6:85:7e:0f:2f:
f3:19:fc:29:4c:9c:c7:e2:6d:f6:99:94:08:2b:fa:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B5:7F:81:EA:E8:B7:4E:84:B7:40:5E:83:B1:A0:8C:EA:3E:75:C7
X509v3 Authority Key Identifier:
keyid:C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/6A3CAA065DE411F199794AD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.194.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c8:de:44:d0:cf:df:46:ef:4f:4a:64:67:0f:e1:bc:35:09:
2d:b8:b0:f6:50:c5:37:10:e8:f3:cc:76:f4:63:68:ce:93:63:
a2:fc:ae:12:c2:af:cf:fc:ff:e2:dc:74:80:09:16:f0:b5:4a:
d2:53:3a:a4:4a:ef:22:73:66:19:96:79:ab:08:59:1e:55:dd:
63:ce:26:27:b8:5a:b4:29:1a:38:23:d3:8e:14:96:42:f3:34:
2b:85:10:b1:13:d9:db:d7:66:79:42:e9:95:fd:78:0d:41:e6:
7b:82:34:ff:0d:3f:ca:5f:b5:17:fa:ba:ff:5c:cf:36:8b:60:
b1:60:56:d9:1b:ab:b4:c0:8a:2c:c9:60:8b:89:59:96:e8:9d:
2b:ea:48:ab:3b:04:5e:18:5b:42:63:e6:73:54:fe:56:b2:90:
30:7b:90:e0:5d:56:05:54:39:b1:79:f4:8b:c5:1c:34:6d:84:
a0:cb:c9:5b:21:7a:23:ad:de:3f:2d:fb:d0:c3:c7:3b:ae:58:
62:82:e0:96:72:2c:0b:c9:22:8d:d6:e6:c9:3f:97:8a:f4:f6:
7c:6a:7f:75:86:a1:ad:49:3e:f4:eb:15:d8:ae:18:11:58:2a:
0d:eb:be:89:c3:9a:ee:73:f7:2e:f8:b3:73:61:44:86:15:32:
e4:a5:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:40 2026 by rpki-client