Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/622E917C8A4311F19934E50FCF1D38B0.roa
File: 622E917C8A4311F19934E50FCF1D38B0.roa (raw, json)
Hash identifier: 09wAq0k14UAMG0dZdGjRyMaD2s85j0ILxfKvfzbeqqk=
Subject key identifier: 40:65:18:91:73:FF:D9:32:CA:98:30:FB:06:D5:0D:E0:01:CD:20:24
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0971
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/622E917C8A4311F19934E50FCF1D38B0.roa
Signing time: Tue 28 Jul 2026 05:15:44 +0000
ROA not before: Tue 28 Jul 2026 05:15:40 +0000
ROA not after: Wed 31 Dec 2031 05:15:40 +0000
asID: 19905
IP address blocks: 41.203.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417 (0x971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:15:40 2026 GMT
Not After : Dec 31 05:15:40 2031 GMT
Subject: CN=6a683b00-0645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:c2:bc:62:fa:4b:22:95:d1:3a:04:d5:73:
cc:a2:55:b1:48:f4:72:93:70:59:42:7b:f2:6e:ca:
3c:6e:4e:ac:8d:87:a7:59:87:05:9a:7b:a3:a5:d4:
9a:79:e3:a6:0d:ea:15:a1:32:93:29:08:55:c0:29:
25:9c:ee:da:3d:ba:36:7d:3d:9c:47:d3:b7:08:76:
11:57:12:54:b9:9c:d5:f5:67:a6:c5:94:3e:be:eb:
da:50:58:9a:6d:6d:24:ae:43:e7:df:01:63:58:e8:
ea:82:b2:d5:0f:7e:dc:29:31:e6:1c:7f:96:ba:02:
98:af:b8:84:88:c8:45:ac:45:18:ad:0d:3d:3a:33:
4f:d6:1f:94:bc:39:2f:d9:51:32:34:30:f7:c9:ec:
e7:4c:7a:d2:57:2d:54:75:94:70:fb:4d:83:93:df:
1d:a1:e8:36:43:e4:1e:32:56:73:e9:24:51:1f:c2:
8a:89:f1:1d:42:8d:be:8c:8f:05:97:b3:e6:d2:dc:
6d:ef:56:24:2c:e1:34:07:35:2d:ae:c7:56:14:a8:
6e:24:51:94:95:5f:ed:86:72:6b:c0:cd:3e:fa:c7:
6d:e0:ac:b4:6b:a7:37:5a:92:1c:f0:45:87:42:15:
e5:5d:7b:f8:bf:f4:b6:ad:cf:8a:f0:fa:ec:a3:da:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:18:91:73:FF:D9:32:CA:98:30:FB:06:D5:0D:E0:01:CD:20:24
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/622E917C8A4311F19934E50FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.203.208.0/20
Signature Algorithm: sha256WithRSAEncryption
48:f2:7a:5f:d2:09:dc:e4:a2:b3:dc:e2:e0:66:c1:8c:d1:2c:
6f:f3:15:de:7f:4c:7d:69:29:eb:7a:df:4a:72:41:1b:70:63:
7a:db:2e:4e:5f:6e:26:61:86:58:8f:b5:d8:0d:49:4b:c9:27:
11:d6:f2:81:35:b1:9c:64:0d:99:23:5c:bf:46:00:79:48:0b:
b4:96:88:ae:68:cc:c5:37:22:44:16:58:c0:cf:be:a5:da:12:
7e:97:b6:27:3a:58:ca:e9:c5:00:78:12:20:8f:d3:3d:c0:c5:
43:1b:14:ce:ee:21:e2:5f:02:f8:b9:6b:e0:f3:0b:97:05:3d:
44:6d:66:cd:06:af:9d:11:89:bc:83:8f:5a:08:52:79:48:4e:
21:c4:d8:c8:17:44:e8:29:b7:41:e4:7b:0d:d7:91:5f:3c:4e:
11:d8:a7:de:c2:7f:d9:09:a1:8b:42:59:83:80:83:8c:af:c6:
b5:c3:37:79:e0:72:1c:7f:34:c4:9a:89:4d:a8:9d:61:5a:c9:
b6:4b:6b:5d:26:6f:59:fa:d2:e2:d7:cc:5c:94:bb:72:05:3c:
fb:7e:a8:d8:7b:8f:d6:b9:3d:ea:9e:a7:b1:b2:c1:e8:0c:a9:
be:f1:99:66:2c:51:c3:d1:97:fd:86:cc:9d:d5:db:2d:61:0c:
a3:36:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:13:44 2026 by rpki-client