Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/BB6918388A3511F18F7925B4CE1D38B0.roa
File: BB6918388A3511F18F7925B4CE1D38B0.roa (raw, json)
Hash identifier: lMQATukCBQ7pN0oTSxmcZm8UFm5Hcbe+UCPWuDICHB0=
Subject key identifier: BC:3B:74:73:58:B8:0B:C7:F8:2F:5A:A3:91:4B:6F:1B:5E:5D:AB:FE
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09E2
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/BB6918388A3511F18F7925B4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:38:01 +0000
ROA not before: Tue 28 Jul 2026 03:37:56 +0000
ROA not after: Wed 31 Aug 2033 03:37:56 +0000
asID: 20011
IP address blocks: 41.132.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2530 (0x9e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 03:37:56 2026 GMT
Not After : Aug 31 03:37:56 2033 GMT
Subject: CN=6a682419-7d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:2f:6d:4c:8c:24:7b:34:30:19:ab:16:6a:
d3:f7:62:92:a1:50:f3:95:e8:7c:d9:cd:91:76:f7:
c7:5b:3a:e8:27:65:49:51:32:bc:e6:2a:6d:ac:91:
6a:88:e4:12:fa:0c:e4:ed:40:03:95:e5:32:1b:21:
4f:f7:65:25:42:6a:dc:d5:4e:3b:68:6d:da:12:05:
b1:45:88:ef:2a:3d:ad:a2:15:90:6b:df:fc:f6:25:
0f:54:de:31:b4:22:23:31:b3:f6:bc:bb:e7:f1:2d:
eb:c0:6c:cd:06:55:a2:ca:fa:1b:23:0a:da:3f:b8:
4a:55:6c:39:8b:f6:0a:dd:07:a3:25:92:f8:00:1a:
30:79:7e:e1:5e:64:38:32:d9:56:72:01:3a:da:f5:
fb:54:b5:fc:57:50:55:a9:c4:48:4c:e1:df:85:da:
93:8c:5b:66:ad:79:81:9a:5d:4e:21:31:4b:0b:b7:
13:7b:73:57:dd:c5:20:c2:57:c9:dd:dd:77:22:cd:
b9:aa:7d:9c:e2:81:cd:10:fe:f3:06:39:49:50:17:
aa:ce:d7:21:e1:b6:c7:b6:28:d9:20:e8:25:5d:50:
a2:ee:69:1f:d5:8e:a2:c8:2a:ad:f5:cd:1c:01:a5:
8c:20:10:aa:08:70:55:74:e6:c9:b5:54:33:2f:c4:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3B:74:73:58:B8:0B:C7:F8:2F:5A:A3:91:4B:6F:1B:5E:5D:AB:FE
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/BB6918388A3511F18F7925B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.132.72.0/22
Signature Algorithm: sha256WithRSAEncryption
03:a1:6f:36:bd:75:7a:9e:c3:4c:f6:ac:05:5c:90:46:b3:9e:
24:f9:34:3c:69:19:2e:36:5c:40:b8:24:54:8c:ef:6f:a7:98:
2b:a8:df:4d:2e:e0:ee:dd:b5:5c:89:27:28:36:d9:2d:0d:cc:
48:87:eb:72:94:4b:96:82:22:d2:b8:5e:8e:c9:49:69:57:4e:
49:18:40:84:b9:7a:56:11:7e:db:fc:4f:55:11:08:ee:07:ba:
1d:2d:dd:58:49:c5:7d:13:81:59:14:cc:da:0c:d6:6b:4f:e0:
67:6c:97:14:94:4b:cb:bc:1d:ed:3d:82:ab:a7:62:9b:a1:1d:
fe:40:5e:b6:fd:d7:b3:80:1a:42:17:85:6a:35:4e:d5:4c:78:
46:29:c5:78:e2:5e:c5:c0:78:b4:bf:5e:c3:15:2e:48:e5:b1:
21:fa:c2:2e:c4:a9:76:9f:98:3e:92:28:d8:ec:6d:7f:b1:b7:
90:2e:4e:1b:de:78:4d:e9:c3:de:e1:ca:28:e4:26:98:cb:8b:
7a:95:59:ad:e2:06:a4:78:1d:7d:5f:78:d1:69:53:c8:a2:ba:
8d:fa:86:1b:53:ab:31:1c:c7:79:03:c4:ff:c9:06:ca:47:19:
1a:c1:59:8c:f7:ec:26:d6:74:50:62:82:d9:d6:62:1a:88:d0:
ab:e9:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:22 2026 by rpki-client