Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/131322BE8A4411F1B3708715CF1D38B0.roa
File: 131322BE8A4411F1B3708715CF1D38B0.roa (raw, json)
Hash identifier: nFxPUQrhLpzyZT2u0OdSzLBcFLdzL3hx+ams0/B9I44=
Subject key identifier: 53:90:E5:4F:21:A7:E8:36:01:EC:D9:5A:67:19:DA:1C:9F:42:30:DC
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0975
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/131322BE8A4411F1B3708715CF1D38B0.roa
Signing time: Tue 28 Jul 2026 05:20:41 +0000
ROA not before: Tue 28 Jul 2026 05:20:37 +0000
ROA not after: Fri 31 Jul 2043 05:20:37 +0000
asID: 19905
IP address blocks: 41.139.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421 (0x975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:20:37 2026 GMT
Not After : Jul 31 05:20:37 2043 GMT
Subject: CN=6a683c29-ce19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:ff:08:ac:4c:bd:61:68:f8:8e:14:77:2a:
7b:8f:7b:bd:d1:af:c9:90:5c:90:0f:e7:50:d3:9a:
2d:21:cf:8a:b5:cb:f0:bb:92:96:fa:56:42:67:ea:
45:ad:d9:06:85:07:4f:f2:11:50:9a:00:13:e5:4e:
a2:73:3c:ec:1a:3c:e2:42:96:cb:93:5c:b8:7e:36:
39:12:b9:f4:25:a2:88:7a:99:70:f4:7e:f9:13:ed:
b9:2b:31:72:93:64:c3:fa:88:4f:cf:5e:88:a8:db:
d7:67:49:ba:00:c7:95:93:64:87:3f:ea:24:99:fe:
73:b9:34:10:e9:ca:51:db:0e:f7:bd:49:93:d3:f8:
eb:af:56:f6:13:f4:51:c4:03:2d:60:c1:74:af:56:
7b:9e:e8:fc:27:82:0e:0b:19:75:c6:49:71:ae:0e:
68:1b:40:69:5e:d7:af:1e:db:a7:56:cc:39:92:b0:
53:54:ca:14:3f:66:be:30:bb:7c:12:60:cf:08:97:
f4:36:51:03:06:45:d0:55:06:01:f0:ae:d3:93:62:
3c:d3:40:f0:18:a4:cf:8d:2d:26:31:19:15:b2:19:
9d:58:9d:2b:21:ae:fd:d3:9b:28:2f:85:c7:e3:06:
70:24:04:81:a1:e1:d9:9d:ad:64:3d:7b:48:23:4f:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:90:E5:4F:21:A7:E8:36:01:EC:D9:5A:67:19:DA:1C:9F:42:30:DC
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/131322BE8A4411F1B3708715CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.139.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4f:06:e7:dc:36:08:75:c4:57:6a:5e:c1:95:7d:27:48:7c:ef:
28:ee:55:7b:83:5e:f9:fb:4e:02:31:c3:58:92:a4:26:45:c5:
0c:79:a6:2f:e6:ce:73:2c:7c:0e:41:58:17:11:99:11:c5:31:
49:e7:b8:e5:bf:ae:92:ce:9b:03:0b:6c:9b:75:5f:73:04:43:
03:8b:8d:2c:ce:c4:52:f6:20:15:d6:7c:02:05:44:2e:21:2a:
95:0e:3b:f7:95:3e:25:99:24:2c:f9:29:c0:71:26:38:f2:d3:
a9:84:97:9d:35:27:1b:8a:78:f6:63:09:f0:0d:8d:6a:4b:a3:
a7:96:e2:6f:04:e0:6d:59:05:7c:b1:d1:e5:a4:6e:48:13:be:
69:96:39:48:b5:68:5a:cf:22:e5:6b:89:7c:00:76:ae:4e:7b:
8b:5b:f8:cc:77:30:76:37:6a:dc:6e:2a:b3:73:0c:4d:33:28:
af:1a:99:0a:9b:b7:51:d8:bb:75:5f:d1:dc:12:51:bf:87:0a:
d2:27:65:38:69:05:00:14:1b:ef:2c:6d:ff:cb:a8:09:40:66:
c2:7d:44:a0:06:e6:1b:35:92:ba:53:30:49:fe:f0:02:15:0e:
76:51:86:d4:f2:8a:1b:5d:dd:e0:9b:e0:60:f2:09:d8:6e:42:
2e:5b:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:00 2026 by rpki-client