Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/EE5EA7128A9E11F197BAACBBCE1D38B0.roa
File: EE5EA7128A9E11F197BAACBBCE1D38B0.roa (raw, json)
Hash identifier: rTiEG9/xtge0wQaYSN20Zc68dXGSG63UlDk72AuswZY=
Subject key identifier: F5:79:6A:C7:E9:8E:F6:E4:25:BE:AF:0E:6B:01:9E:35:B0:64:B3:0B
Certificate issuer: /CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Certificate serial: 052D
Authority key identifier: 56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/EE5EA7128A9E11F197BAACBBCE1D38B0.roa
Signing time: Tue 28 Jul 2026 16:11:04 +0000
ROA not before: Tue 28 Jul 2026 16:10:59 +0000
ROA not after: Thu 10 Sep 2026 16:10:59 +0000
asID: 37284
IP address blocks: 41.74.64.0/20 maxlen: 27
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1325 (0x52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367D0C5AF, serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Validity
Not Before: Jul 28 16:10:59 2026 GMT
Not After : Sep 10 16:10:59 2026 GMT
Subject: CN=6a68d498-57fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:c6:e8:d0:de:3c:de:fd:f7:3d:b1:cb:d5:
57:71:34:08:79:8d:2b:88:2a:5e:f7:55:99:4b:b2:
6d:87:61:36:87:2c:ef:7b:da:8e:a0:39:41:2c:02:
5c:c7:50:f6:ce:c8:53:1d:3b:93:ae:4e:f0:3c:10:
fa:4f:7e:4f:0a:72:a4:28:f1:93:72:13:1b:af:74:
92:7b:11:13:15:ee:d7:75:20:48:b3:0e:4a:cc:ff:
f2:42:9f:bc:d4:9c:13:54:4c:f4:45:47:3a:05:df:
9e:58:e8:06:bd:d6:6b:43:69:b3:62:07:40:35:9e:
9d:f1:a4:a2:8d:0c:91:85:c3:27:a2:5c:9c:51:64:
ad:a3:36:89:55:af:49:5d:3a:22:37:85:8b:8b:fb:
ed:52:7e:99:c6:e2:db:4e:4f:1a:0f:6a:bd:5f:10:
df:40:d1:11:f4:d7:d0:59:3b:1e:fc:9e:aa:bf:de:
97:0f:b9:c0:9b:af:10:31:c4:d1:66:36:ab:92:dc:
c6:62:7d:a4:a4:f2:3a:2d:e0:a5:37:19:fe:d8:80:
d5:fa:3c:9c:73:05:3f:ab:dc:08:58:1f:03:a8:76:
02:8c:03:b1:2c:10:c6:c2:67:f5:fa:8c:17:12:88:
1a:8c:44:01:03:44:8a:71:0b:c1:fb:c3:ff:7e:1a:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:6A:C7:E9:8E:F6:E4:25:BE:AF:0E:6B:01:9E:35:B0:64:B3:0B
X509v3 Authority Key Identifier:
keyid:56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/EE5EA7128A9E11F197BAACBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.74.64.0/20
Signature Algorithm: sha256WithRSAEncryption
85:68:1e:ff:53:2e:d0:e1:5e:d6:08:f6:e8:cc:2d:0f:28:90:
31:d8:3e:8f:15:f4:5c:5a:7f:1d:f2:80:04:11:01:10:f3:58:
6e:16:97:95:dd:21:52:3a:6c:5d:0a:3c:90:f7:62:85:3a:8f:
96:40:9f:98:5c:e5:da:ea:8b:42:22:3c:5c:16:42:0c:71:cd:
57:b7:4d:79:a0:55:bc:9e:85:0a:26:61:ff:ea:23:67:f2:2c:
01:b3:80:c2:4f:55:77:44:c5:21:0a:a8:36:b0:c2:9a:8b:7d:
94:8b:c0:9e:63:d7:98:25:81:f9:de:78:28:bf:59:e5:e9:92:
40:f1:76:a6:38:e5:9d:30:7c:98:ff:a6:b3:aa:37:99:91:61:
41:49:4c:a7:8b:f7:42:2a:d0:b0:e4:10:f8:e2:28:2a:2a:f3:
d9:40:c9:80:2a:fb:7a:f2:0f:0c:22:a9:ee:0a:ad:15:ec:3a:
f6:a7:7e:fd:79:d5:c5:68:7e:65:b4:d1:f2:60:b4:30:e7:09:
f6:63:6d:f8:58:1c:e7:c3:c2:8d:f3:6e:86:1e:58:68:5c:bf:
b2:c3:dc:14:8e:db:19:81:5b:1b:99:aa:c2:af:37:24:a7:54:
a1:4e:4a:cc:44:cf:81:de:5e:c4:21:a6:9b:c9:a8:16:ce:82:
41:98:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:00 2026 by rpki-client