Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/1EAA28D08A4311F1B80C860DCF1D38B0.roa
File: 1EAA28D08A4311F1B80C860DCF1D38B0.roa (raw, json)
Hash identifier: y7oDSkY4VJRwd1DmzUhjmZxjs7eS7XYQV0LhmqyW5j0=
Subject key identifier: 0C:03:E6:E1:E1:B4:F2:43:11:F8:5F:5C:1F:D3:0C:78:E9:FD:93:BB
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 096F
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/1EAA28D08A4311F1B80C860DCF1D38B0.roa
Signing time: Tue 28 Jul 2026 05:13:51 +0000
ROA not before: Tue 28 Jul 2026 05:13:47 +0000
ROA not after: Wed 31 Dec 2031 05:13:47 +0000
asID: 19905
IP address blocks: 41.90.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2415 (0x96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:13:47 2026 GMT
Not After : Dec 31 05:13:47 2031 GMT
Subject: CN=6a683a8f-808a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:15:64:f6:db:4c:7b:af:1c:59:d8:95:f5:
4e:dc:0c:69:77:2b:3a:b8:7c:15:dc:5e:9a:97:dc:
55:62:ad:7c:94:6e:75:25:bd:1b:c8:02:55:77:54:
d1:ad:08:2a:bd:7f:62:f2:37:50:80:e4:c2:72:5f:
b1:ab:6b:77:02:c3:28:77:34:4c:49:89:30:60:27:
7e:22:52:30:de:91:42:08:38:93:86:cc:28:aa:9f:
85:3e:dd:be:8c:f2:6e:2e:d7:37:a0:19:11:6a:ff:
ce:74:78:0a:db:cf:09:b3:64:1c:4d:ba:52:0f:51:
3e:41:86:7d:a2:1c:77:1c:2f:89:34:d7:3d:a6:b7:
9c:8f:46:a7:af:7e:7f:9e:28:af:37:d0:31:03:02:
e5:b6:5d:e6:29:3e:9a:a1:3b:5a:26:41:d5:8f:a2:
cd:ef:10:a0:b5:f6:73:2e:27:d7:61:de:ec:5b:24:
a9:4f:62:89:db:2d:d5:83:d9:de:dd:70:ce:14:bf:
78:af:a7:c5:4b:38:33:85:03:39:99:7e:3c:4c:89:
f3:43:dd:1d:f7:95:1c:f4:ca:ce:c7:5b:d7:6f:38:
45:3a:5f:9c:a7:5a:b5:b5:da:a3:07:40:99:c6:87:
85:88:1c:4d:a7:7b:56:54:13:71:0a:e9:3f:49:1c:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:E6:E1:E1:B4:F2:43:11:F8:5F:5C:1F:D3:0C:78:E9:FD:93:BB
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/1EAA28D08A4311F1B80C860DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:a0:ef:4f:fc:f9:6a:62:df:57:e7:dc:7a:c8:c9:4d:a8:cd:
db:5d:4f:c6:56:0a:a7:b1:56:8b:44:89:4d:ba:88:34:8a:e0:
41:93:c7:c3:ff:4d:45:77:8b:ba:d8:52:12:2a:95:76:34:0e:
4a:cb:60:e7:47:49:9b:14:90:90:73:08:34:32:c5:1b:5a:31:
9a:3c:4b:e1:e4:13:98:ee:74:67:6a:db:b1:a4:88:0e:bd:3c:
4b:48:b2:c3:ed:43:5f:e5:24:ac:b2:9e:a0:95:db:91:69:28:
d0:fb:9c:76:d4:88:1e:07:1e:7b:a2:b1:a2:9c:61:73:f9:8c:
c0:60:5f:7c:b3:a7:44:d5:dd:5f:60:48:c0:e5:35:f0:a7:aa:
de:e9:ac:94:5b:02:e0:af:a7:80:66:37:c2:3e:58:03:f6:93:
01:07:bf:58:a2:ed:04:73:19:81:6b:94:f0:aa:dc:bb:55:ad:
c4:b6:1c:44:17:1b:f6:f5:36:cd:d1:d1:68:b5:d1:36:17:3f:
08:8a:9c:f5:04:eb:08:e8:9b:43:53:60:f6:ba:61:90:db:68:
2f:f0:3d:c0:31:0b:bf:44:1f:f2:29:eb:5e:50:7c:0e:85:33:
b4:56:3c:eb:b6:f7:bc:53:3a:4a:74:b6:c0:1e:5c:8a:3d:63:
87:79:7b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:50 2026 by rpki-client