Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/18FADF668A4211F18551D206CF1D38B0.roa
File: 18FADF668A4211F18551D206CF1D38B0.roa (raw, json)
Hash identifier: EFJNW77UkwO/Yngz5FbqiyR5Ry/RF/ED8FRHoJ+2vJ8=
Subject key identifier: B8:B8:0A:45:52:F1:AD:CA:CC:25:D2:A8:69:09:12:3B:84:B4:35:53
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0969
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/18FADF668A4211F18551D206CF1D38B0.roa
Signing time: Tue 28 Jul 2026 05:06:32 +0000
ROA not before: Tue 28 Jul 2026 05:06:28 +0000
ROA not after: Wed 31 Dec 2031 05:06:28 +0000
asID: 19905
IP address blocks: 105.160.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:06:28 2026 GMT
Not After : Dec 31 05:06:28 2031 GMT
Subject: CN=6a6838d8-ad11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4d:dc:5a:d1:41:d7:9b:32:34:5c:82:be:30:
41:28:75:5e:95:e1:b4:9f:68:09:a0:2e:9c:8b:66:
72:27:1d:09:4a:99:d7:b2:16:c8:da:14:8a:3f:81:
cd:bc:32:4b:ff:1d:9b:2f:ed:ce:6d:67:4d:10:7d:
b1:45:8c:db:2f:41:56:e0:52:f8:68:de:42:a9:bf:
fe:55:15:a7:fa:ae:19:be:78:9d:48:32:e0:49:ba:
cd:fb:aa:0f:cc:06:8b:a6:5f:65:91:22:92:0c:60:
e9:57:41:1d:35:31:aa:8c:28:1a:b2:9a:2d:51:63:
27:1d:c8:6f:8a:11:3d:ef:99:d4:53:0d:f3:8f:9c:
86:3f:5a:aa:f9:29:f7:57:98:b7:0e:c9:16:3e:0b:
55:97:6f:a4:10:fe:c4:51:ad:b2:e2:50:82:66:06:
ec:91:f2:e4:83:1b:a5:ba:40:fd:54:f9:fa:17:ae:
c0:91:7e:d0:85:b1:c0:18:73:ab:d1:a1:7d:5e:0c:
74:de:ac:21:6d:40:eb:ae:9d:9d:86:27:7d:ca:04:
2b:d6:49:6a:f9:15:fe:a0:90:74:8c:f1:db:60:f0:
27:2e:87:a7:24:f0:fb:ee:21:dc:be:c8:c1:85:93:
d3:c0:72:42:f3:7e:ce:91:88:90:6b:f3:12:79:d4:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:0A:45:52:F1:AD:CA:CC:25:D2:A8:69:09:12:3B:84:B4:35:53
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/18FADF668A4211F18551D206CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.160.0.0/13
Signature Algorithm: sha256WithRSAEncryption
3f:b5:c7:1c:b3:6a:6d:09:54:e5:95:a1:d7:4d:51:a7:eb:b2:
cf:23:e3:3c:9f:97:4a:be:01:f6:df:12:62:0f:06:9e:14:2c:
b2:76:10:aa:34:09:52:31:98:d6:93:5a:44:12:53:3c:d6:78:
a5:29:fc:4c:84:4b:ee:31:8e:c7:63:ce:03:88:d7:a6:e1:ec:
f1:64:b5:9a:da:93:5d:ac:04:93:60:88:ea:d5:95:e8:81:e1:
43:13:85:07:d9:ac:41:be:8c:e9:d0:06:10:7b:25:ec:fd:a6:
99:09:3b:87:ee:12:85:93:df:e4:cb:a8:4a:77:2f:c5:e0:03:
39:dd:3f:da:39:5e:77:ae:c2:f7:57:32:8f:74:74:dd:dc:84:
27:cb:53:f0:fc:87:36:f8:b1:0a:5c:4a:8b:2e:95:f8:87:77:
36:73:47:da:2a:cd:12:d7:96:bd:41:8a:2d:b5:90:57:7e:71:
8d:f9:14:2d:a2:69:c8:24:b8:5a:f4:05:61:a4:b2:16:bb:5d:
35:32:e9:d9:13:1d:69:0e:cd:83:1e:91:2b:90:a4:a0:2d:bd:
23:bd:3a:2f:4a:bc:07:a6:28:9d:10:52:6e:ed:40:29:93:c9:
f4:1f:a3:1e:24:d4:f5:dc:01:3f:d6:1d:a7:af:c8:16:d2:67:
da:98:9b:6c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODIxMDRBRjExMC8GA1UEBRMoOEIxMDI2OTUzRUNGN0M0Q0UxMzlGRTlBNTlCREQ3
MjI4QTE1MzU0NDAeFw0yNjA3MjgwNTA2MjhaFw0zMTEyMzEwNTA2MjhaMBgxFjAU
BgNVBAMTDTZhNjgzOGQ4LWFkMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD0Tdxa0UHXmzI0XIK+MEEodV6V4bSfaAmgLpyLZnInHQlKmdeyFsjaFIo/
gc28Mkv/HZsv7c5tZ00QfbFFjNsvQVbgUvho3kKpv/5VFaf6rhm+eJ1IMuBJus37
qg/MBoumX2WRIpIMYOlXQR01MaqMKBqymi1RYycdyG+KET3vmdRTDfOPnIY/Wqr5
KfdXmLcOyRY+C1WXb6QQ/sRRrbLiUIJmBuyR8uSDG6W6QP1U+foXrsCRftCFscAY
c6vRoX1eDHTerCFtQOuunZ2GJ33KBCvWSWr5Ff6gkHSM8dtg8Ccuh6ck8PvuIdy+
yMGFk9PAckLzfs6RiJBr8xJ51OhrAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUuLgK
RVLxrcrMJdKoaQkSO4S0NVMwHwYDVR0jBBgwFoAUixAmlT7PfEzhOf6aWb3XIooV
NUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4QUVBMjI4L2l4QW1s
VDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2l4QW1sVDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4
QUVBMjI4LzE4RkFERjY2OEE0MjExRjE4NTUxRDIwNkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwNpoDANBgkqhkiG9w0BAQsF
AAOCAQEAP7XHHLNqbQlU5ZWh101Rp+uyzyPjPJ+XSr4B9t8SYg8GnhQssnYQqjQJ
UjGY1pNaRBJTPNZ4pSn8TIRL7jGOx2POA4jXpuHs8WS1mtqTXawEk2CI6tWV6IHh
QxOFB9msQb6M6dAGEHsl7P2mmQk7h+4ShZPf5MuoSncvxeADOd0/2jled67C91cy
j3R03dyEJ8tT8PyHNvixClxKiy6V+Id3NnNH2irNEteWvUGKLbWQV35xjfkULaJp
yCS4WvQFYaSyFrtdNTLp2RMdaQ7Ngx6RK5CkoC29I706L0q8B6YonRBSbu1AKZPJ
9B+jHiTU9dwBP9Ydp6/IFtJn2pibbA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:13 2026 by rpki-client