Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/CDDDC3068A4E11F1BDE2BED7CE1D38B0.roa
File: CDDDC3068A4E11F1BDE2BED7CE1D38B0.roa (raw, json)
Hash identifier: /I1CiGW7sqLqxLCpz1psQMD55EuJb7Kf2dj2xcmkfIw=
Subject key identifier: 4C:7F:52:D4:63:4B:AB:FB:FA:10:51:01:6E:0F:46:B7:55:8C:35:7F
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0987
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/CDDDC3068A4E11F1BDE2BED7CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:37:29 +0000
ROA not before: Tue 28 Jul 2026 06:37:25 +0000
ROA not after: Fri 31 Jul 2043 06:37:25 +0000
asID: 198949
IP address blocks: 41.203.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2439 (0x987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 06:37:25 2026 GMT
Not After : Jul 31 06:37:25 2043 GMT
Subject: CN=6a684e29-7a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:03:e8:e7:60:ff:e3:e6:20:53:22:4a:fc:
67:e5:51:be:87:bf:5b:bc:4e:7d:f9:c6:f1:79:be:
81:41:82:61:7a:55:af:f3:fc:2d:c5:bc:af:e0:99:
d4:19:83:72:f0:11:e0:9f:f0:50:9a:c6:cf:42:05:
ef:30:28:31:67:a7:2c:5a:b3:9c:a5:1b:2b:8f:ca:
18:6f:a7:44:5b:cc:e3:2c:b7:7f:52:9d:97:9b:ed:
a1:35:53:f0:05:30:e6:79:6c:0d:e3:d8:f0:74:b1:
50:8e:a1:45:e9:6a:db:55:83:78:8d:33:37:0e:06:
b8:32:e4:74:07:aa:4f:3c:7b:f1:f7:da:f0:d6:90:
c3:ab:1f:0a:f5:b5:15:4c:46:fb:1e:5b:9a:2f:14:
6d:e4:36:41:ba:de:71:7b:6a:c5:af:c0:6c:15:45:
9e:1a:92:32:5a:b2:26:31:f7:68:9c:e8:7d:6b:31:
aa:ae:6c:28:bb:9b:ea:2c:ea:d4:54:95:68:30:a1:
90:fc:d3:95:26:70:23:69:61:5e:a1:f5:c1:db:04:
30:38:09:a7:bb:3a:a9:21:4c:ce:2a:80:32:df:4d:
5c:c3:ca:a8:4e:30:9e:bd:fa:05:07:a1:bb:31:cf:
47:c8:f6:e6:b3:b2:2b:37:be:5a:ef:72:06:0d:1f:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:52:D4:63:4B:AB:FB:FA:10:51:01:6E:0F:46:B7:55:8C:35:7F
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/CDDDC3068A4E11F1BDE2BED7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.203.208.0/20
Signature Algorithm: sha256WithRSAEncryption
34:e4:fe:9b:f8:e8:67:8d:f2:15:bc:17:12:a3:b0:76:19:d5:
78:fb:a2:d0:c0:35:30:54:a4:4d:04:be:67:31:31:bb:24:56:
62:59:f8:63:dc:ad:cc:4a:c8:ad:3b:73:9d:cb:66:c3:ab:ef:
00:94:89:9a:33:c5:d5:26:ef:13:c0:80:29:7f:6e:7e:3a:47:
fa:d6:11:b1:06:fa:eb:59:51:8f:42:cd:33:6e:65:5b:1c:96:
a8:63:e7:2f:49:04:a9:0a:85:ba:70:97:f1:80:13:07:8c:c1:
1c:4d:34:41:9f:ac:a5:35:2b:0e:bb:83:f3:cb:8b:f0:a5:f9:
f2:71:10:77:3b:43:b3:fc:aa:ee:f6:dd:ee:b2:fa:b0:ff:a1:
f9:7b:3c:43:af:49:61:15:4c:96:81:57:10:69:50:00:51:36:
70:3d:72:17:8e:33:3e:00:cf:1f:12:00:ff:8c:c8:ac:a1:89:
b7:50:64:87:ed:14:e1:2f:36:c8:e2:82:0f:80:2b:2a:86:1e:
36:47:d2:13:b9:3f:8a:0f:a5:7f:d3:5d:b6:4d:b9:fa:ad:0a:
6f:da:09:46:51:21:16:27:b5:0c:81:0c:38:b1:10:e2:e3:a4:
ef:e5:e7:df:96:3a:e1:98:69:dc:10:83:3d:cd:1e:5d:c8:60:
1d:85:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:47:47 2026 by rpki-client