Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/AFB09FE85DE411F1B0AD89D6CE1D38B0.roa
File: AFB09FE85DE411F1B0AD89D6CE1D38B0.roa (raw, json)
Hash identifier: lK9+gcJD82OD1cd0EMb+E1EuCpe3/JebmMS7KJQRTDY=
Subject key identifier: AA:C3:0D:98:DE:FA:D0:20:03:B4:67:4B:F8:D7:69:6C:14:CB:40:BC
Certificate issuer: /CN=F3668B03AF/serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Certificate serial: 01D6
Authority key identifier: C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/AFB09FE85DE411F1B0AD89D6CE1D38B0.roa
Signing time: Mon 01 Jun 2026 18:07:01 +0000
ROA not before: Mon 01 Jun 2026 18:06:57 +0000
ROA not after: Sun 01 Jun 2036 18:06:57 +0000
asID: 22351
IP address blocks: 41.194.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 04:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668B03AF, serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Validity
Not Before: Jun 1 18:06:57 2026 GMT
Not After : Jun 1 18:06:57 2036 GMT
Subject: CN=6a1dca45-b1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:06:74:59:2d:bf:f5:45:3e:72:f3:5d:e6:
8a:be:f6:85:07:29:f8:8f:e7:0a:65:cb:64:ba:4a:
e0:81:36:f5:db:a4:f6:9f:d3:5a:91:3a:38:d7:6e:
99:6d:19:38:31:84:f9:e3:d2:24:b0:ad:ea:29:bd:
c2:34:c5:b6:d5:c3:00:f7:33:26:cb:f3:d1:00:94:
88:ad:7c:90:b1:76:aa:e6:ee:d1:c4:4b:e4:df:ae:
b6:fe:81:6b:2d:70:37:d5:46:7d:e6:44:91:e1:de:
5d:4a:4b:5a:86:fc:49:70:3a:73:3a:b2:ae:b5:4f:
3c:f7:c2:ec:7f:7b:2e:2d:f9:9b:3b:58:6a:5a:83:
63:aa:5a:af:c3:47:26:46:68:2c:33:bd:32:35:cb:
31:d8:f1:5d:88:08:2d:dd:8f:0f:dd:8b:91:3b:4a:
76:a2:56:2e:be:27:27:31:9a:25:9f:fb:f4:d0:b2:
6d:48:29:10:b3:e5:6e:09:b4:9e:a3:92:ac:86:1e:
14:45:b1:f7:3f:13:31:e1:83:e2:36:2d:19:1f:73:
9e:6a:79:d6:86:fd:15:ab:2d:ec:ed:be:a8:36:30:
20:02:e1:13:b0:17:8f:58:71:72:21:51:ab:00:18:
4a:e3:a0:b8:17:0e:42:8f:54:39:90:01:24:e1:9c:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C3:0D:98:DE:FA:D0:20:03:B4:67:4B:F8:D7:69:6C:14:CB:40:BC
X509v3 Authority Key Identifier:
keyid:C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/AFB09FE85DE411F1B0AD89D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.194.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3b:7d:34:18:71:61:68:94:62:ed:91:04:24:12:ec:f3:12:
8a:39:b7:63:30:4e:58:38:d7:57:c0:46:85:d8:31:eb:5d:98:
16:27:91:0f:6b:4c:8a:e9:72:c0:7f:87:94:d4:1a:bb:de:8a:
c9:80:ac:ae:3f:1d:6a:6c:53:a7:61:26:1f:81:63:1a:59:d2:
ac:6f:2f:af:b8:28:85:43:db:0f:5c:42:01:f3:b9:fe:7c:45:
93:f7:a8:6d:4e:37:91:69:95:ea:30:b9:e8:2a:39:63:e2:01:
75:71:f3:d3:ec:aa:3b:12:87:e1:47:37:15:1c:43:54:49:1c:
d9:58:2a:6c:ac:66:72:1a:b3:73:c7:dc:b8:96:4a:3a:25:87:
0b:1c:db:75:cf:fa:fa:a5:cd:87:d9:8a:2f:d4:d3:71:2e:b5:
9c:54:75:38:a5:70:41:00:84:c9:28:cd:46:48:2c:fa:b8:35:
8e:1b:43:6b:4b:49:48:9e:41:58:eb:71:5a:63:18:f3:0b:78:
10:ea:4d:ad:e1:b6:07:4a:8d:14:e0:2e:3a:03:6a:1b:8f:57:
b6:04:eb:18:49:a5:ab:df:2b:78:42:92:8f:77:1c:57:f0:50:
1f:70:a4:4d:a7:ce:98:95:30:1a:0b:47:0e:61:d8:8a:21:76:
16:4f:0d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:14 2026 by rpki-client