Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/8ACB3F388A4611F19B154EA5CE1D38B0.roa
File: 8ACB3F388A4611F19B154EA5CE1D38B0.roa (raw, json)
Hash identifier: Or5JdewyBtD5G+RUQL6fWR9lIWKjItl4UD71JHXPcW4=
Subject key identifier: 3B:81:81:65:D9:60:1D:85:CA:3B:55:80:15:09:F1:F6:3D:64:75:34
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0981
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/8ACB3F388A4611F19B154EA5CE1D38B0.roa
Signing time: Tue 28 Jul 2026 05:38:21 +0000
ROA not before: Tue 28 Jul 2026 05:38:17 +0000
ROA not after: Fri 31 Jul 2043 05:38:17 +0000
asID: 198949
IP address blocks: 41.80.0.0/15 maxlen: 24
2c0f:fe38::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:38:17 2026 GMT
Not After : Jul 31 05:38:17 2043 GMT
Subject: CN=6a68404d-8a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:45:91:b0:e5:98:17:c1:7e:76:7a:f0:23:
03:e3:cd:dd:f1:0c:25:b2:6b:95:50:e2:a5:c0:70:
7b:90:4f:49:c0:df:40:ea:18:27:31:ee:8d:a1:2d:
a5:44:f1:98:0f:c9:eb:70:88:6a:d3:54:a4:74:9b:
24:72:ed:20:c5:aa:7e:28:b6:b7:be:ff:bf:ed:40:
ec:92:00:18:61:0e:a8:08:a9:00:cf:09:f8:7b:50:
47:15:41:04:ce:cc:93:43:34:8b:46:e8:ad:ff:e0:
aa:1c:cd:b5:21:a3:64:f5:a8:db:98:d7:b3:7c:70:
84:3a:3d:33:73:b4:0c:8b:be:c2:e7:d3:91:68:a3:
0e:6c:ad:ef:1e:60:a3:fc:61:da:2f:66:28:b9:56:
21:ac:50:5a:52:e3:14:90:42:14:3f:36:44:b6:97:
da:05:cb:07:ed:e4:53:65:9b:ef:f3:75:2f:89:43:
72:67:37:db:28:5e:20:a4:79:1a:31:b3:f0:8c:14:
f6:fd:86:2f:19:d5:e8:6a:60:b9:bc:66:e4:21:d1:
81:62:0b:c4:44:d6:ad:35:49:af:21:1c:01:45:28:
ea:ec:12:d2:f9:2b:01:df:a3:fd:2a:96:a9:6c:f3:
bd:e4:10:bd:e1:6c:0e:c6:b6:7b:ee:d3:94:9d:d2:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:81:65:D9:60:1D:85:CA:3B:55:80:15:09:F1:F6:3D:64:75:34
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/8ACB3F388A4611F19B154EA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.80.0.0/15
IPv6:
2c0f:fe38::/32
Signature Algorithm: sha256WithRSAEncryption
9a:2c:f2:84:ab:32:0f:38:4d:79:d3:c9:d3:0b:99:df:e0:83:
bd:7c:58:90:76:3f:e3:13:7e:2c:0e:7c:b9:f8:3a:5e:dc:3a:
58:0d:19:f5:21:33:6d:73:a2:17:05:e9:ff:c1:f6:1a:64:c7:
b8:c7:58:25:d0:6f:fa:bf:93:ab:3e:df:fa:63:4e:c2:f5:8d:
84:d4:ec:7f:11:d0:57:68:88:29:59:03:20:73:4c:c3:3c:a5:
af:d4:ab:13:29:a7:2c:17:d7:17:6a:33:7b:a6:cd:89:45:e9:
bf:6a:0d:5f:4b:8e:20:f5:15:05:af:92:b0:34:eb:1b:f8:5d:
09:e9:50:01:2c:e3:95:e8:f4:ec:85:ef:2b:f2:ab:26:d3:e6:
14:aa:f5:95:39:58:26:6e:bb:6e:6f:10:e8:4f:0c:6a:cc:b5:
d8:05:f7:48:d7:95:88:f2:79:2b:8e:b3:15:ec:6e:38:06:28:
e7:51:36:8a:fa:9f:3e:8a:8a:c1:fc:60:71:94:75:eb:9a:cd:
69:3b:dd:c1:2a:b8:14:10:01:cc:7a:78:14:69:ef:cf:c9:ea:
4d:b0:a8:15:bd:0d:53:27:7c:6a:43:10:94:3f:2e:8d:cc:94:
ef:df:d4:b2:4d:f2:ce:c1:72:31:fc:61:8b:f5:78:9c:c4:7b:
da:6c:66:02
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODIxMDRBRjExMC8GA1UEBRMoOEIxMDI2OTUzRUNGN0M0Q0UxMzlGRTlBNTlCREQ3
MjI4QTE1MzU0NDAeFw0yNjA3MjgwNTM4MTdaFw00MzA3MzEwNTM4MTdaMBgxFjAU
BgNVBAMTDTZhNjg0MDRkLThhODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDS+UWRsOWYF8F+dnrwIwPjzd3xDCWya5VQ4qXAcHuQT0nA30DqGCcx7o2h
LaVE8ZgPyetwiGrTVKR0myRy7SDFqn4otre+/7/tQOySABhhDqgIqQDPCfh7UEcV
QQTOzJNDNItG6K3/4KoczbUho2T1qNuY17N8cIQ6PTNztAyLvsLn05Foow5sre8e
YKP8YdovZii5ViGsUFpS4xSQQhQ/NkS2l9oFywft5FNlm+/zdS+JQ3JnN9soXiCk
eRoxs/CMFPb9hi8Z1ehqYLm8ZuQh0YFiC8RE1q01Sa8hHAFFKOrsEtL5KwHfo/0q
lqls873kEL3hbA7Gtnvu05Sd0t4DAgMBAAGjggKzMIICrzAdBgNVHQ4EFgQUO4GB
ZdlgHYXKO1WAFQnx9j1kdTQwHwYDVR0jBBgwFoAUixAmlT7PfEzhOf6aWb3XIooV
NUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4QUVBMjI4L2l4QW1s
VDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2l4QW1sVDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4
QUVBMjI4LzhBQ0IzRjM4OEE0NjExRjE5QjE1NEVBNUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLQYIKwYBBQUHAQcBAf8EHjAcMAsEAgABMAUDAwEpUDANBAIAAjAHAwUALA/+
ODANBgkqhkiG9w0BAQsFAAOCAQEAmizyhKsyDzhNedPJ0wuZ3+CDvXxYkHY/4xN+
LA58ufg6Xtw6WA0Z9SEzbXOiFwXp/8H2GmTHuMdYJdBv+r+Tqz7f+mNOwvWNhNTs
fxHQV2iIKVkDIHNMwzylr9SrEymnLBfXF2oze6bNiUXpv2oNX0uOIPUVBa+SsDTr
G/hdCelQASzjlej07IXvK/KrJtPmFKr1lTlYJm67bm8Q6E8Masy12AX3SNeViPJ5
K46zFexuOAYo51E2ivqfPoqKwfxgcZR165rNaTvdwSq4FBABzHp4FGnvz8nqTbCo
Fb0NUyd8akMQlD8ujcyU79/Usk3yzsFyMfxhi/V4nMR72mxmAg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:12 2026 by rpki-client