Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/9B3D63248A4011F19E1D6CFDCE1D38B0.roa
File: 9B3D63248A4011F19E1D6CFDCE1D38B0.roa (raw, json)
Hash identifier: bvYS8sDyf/jLqRVSjUjEvL4gxQODnKRCXkw2SMtP3BU=
Subject key identifier: 7A:A6:25:A1:FC:A4:5F:2E:24:DE:FE:57:98:FC:A4:67:15:A6:7B:DD
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0961
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/9B3D63248A4011F19E1D6CFDCE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:55:51 +0000
ROA not before: Tue 28 Jul 2026 04:55:47 +0000
ROA not after: Wed 31 Dec 2031 04:55:47 +0000
asID: 37061
IP address blocks: 41.90.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401 (0x961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 04:55:47 2026 GMT
Not After : Dec 31 04:55:47 2031 GMT
Subject: CN=6a683657-c285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:cf:55:02:97:27:f8:e6:4c:45:cc:cb:a7:
39:6e:00:25:2d:dd:5a:63:9a:44:b2:b6:8e:88:c2:
9b:c9:b3:5a:58:d9:c7:39:c7:7f:4d:ed:25:03:62:
5f:49:f3:01:db:cd:9c:87:0c:0c:7c:c8:d7:d3:18:
d5:4f:57:61:93:64:9b:da:f0:c7:c6:be:3a:0e:78:
e3:54:9c:17:3e:79:b4:94:e3:4a:15:4f:be:d9:d3:
43:0c:59:49:b2:7c:66:7f:cb:53:f5:e2:da:ac:de:
85:45:41:48:00:30:d4:8a:19:bd:ed:97:f1:74:09:
f2:37:ff:0a:fa:be:08:4e:11:7c:2f:19:f1:11:da:
8d:84:28:49:15:39:a4:51:4a:81:00:a7:8b:bb:c6:
e7:e3:7a:12:ec:fc:38:2e:4e:89:e4:b2:b1:96:e2:
08:b9:7c:43:ef:b6:36:92:24:44:f4:31:60:60:ea:
37:92:a3:e4:2b:64:f0:5d:22:f2:48:1a:c6:68:9a:
ec:20:ad:45:3e:24:23:3b:4f:a3:e5:db:06:c8:d2:
c4:f6:7a:43:10:77:fc:68:32:f0:06:0b:87:b2:66:
cf:a6:35:3f:5c:3f:b0:8b:ea:01:80:65:97:d2:bf:
9a:1a:91:d0:ef:5b:14:cf:30:08:02:f8:b7:78:9e:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A6:25:A1:FC:A4:5F:2E:24:DE:FE:57:98:FC:A4:67:15:A6:7B:DD
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/9B3D63248A4011F19E1D6CFDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:39:51:3b:d9:35:9c:d7:1f:06:d8:96:d1:8c:6b:95:3b:31:
62:a4:a1:53:f7:5a:48:e5:44:0c:87:f2:69:e0:58:0b:fb:d6:
2d:0b:4a:7b:31:5b:67:41:55:d8:01:ae:1a:bc:cd:ca:5b:02:
f5:a8:b5:34:f1:77:50:fd:f8:81:01:e5:ff:4d:b3:05:f3:b6:
b8:f0:6d:0f:50:5f:28:5f:d6:94:91:77:be:21:59:6d:77:d6:
4a:e0:5c:7c:e1:64:66:5d:9f:11:ed:fd:77:bc:cf:97:c8:4d:
87:20:08:3f:04:9f:eb:19:77:88:18:a9:8f:36:fd:7b:27:d1:
2d:5e:cb:79:57:01:86:da:6f:f3:ac:0c:79:59:56:e0:39:04:
6a:00:af:7a:25:e3:e4:0c:d3:a0:4a:ff:34:19:2a:ec:dd:dd:
13:10:be:a2:ac:b6:a9:cf:34:a3:f8:e5:77:e0:d8:7a:b2:98:
f9:18:57:bd:3a:a7:a3:70:a2:52:04:ff:8d:e2:94:1b:17:c7:
18:b0:2a:0b:f7:12:3a:4d:f0:b4:bb:3d:99:ce:64:e2:d1:eb:
d1:65:14:da:b0:23:3b:18:91:fc:a8:4f:27:cf:72:87:b1:0f:
33:a4:6d:3f:6b:8f:de:39:b6:d3:69:9e:85:ff:fa:4b:c0:2c:
21:a7:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:14:58 2026 by rpki-client