Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/FB5B5E368A4611F18D08BEA9CE1D38B0.roa
File: FB5B5E368A4611F18D08BEA9CE1D38B0.roa (raw, json)
Hash identifier: IdnrnbxLYMGAupUWenScYIJS1+LHtvTrZ8RfUxIlT+4=
Subject key identifier: 72:02:E7:71:58:D0:8E:77:E7:01:2E:36:CB:2C:93:71:EC:97:5A:AC
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0983
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/FB5B5E368A4611F18D08BEA9CE1D38B0.roa
Signing time: Tue 28 Jul 2026 05:41:30 +0000
ROA not before: Tue 28 Jul 2026 05:41:25 +0000
ROA not after: Fri 31 Jul 2043 05:41:25 +0000
asID: 198949
IP address blocks: 41.90.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435 (0x983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:41:25 2026 GMT
Not After : Jul 31 05:41:25 2043 GMT
Subject: CN=6a68410a-8fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:5b:90:d5:16:e5:ea:17:cc:eb:7a:a0:b3:
f3:60:71:f3:59:37:0b:1f:69:15:28:67:1a:eb:0a:
29:44:9a:f7:f7:7f:54:c0:02:24:28:29:74:21:86:
c0:53:de:07:91:b9:f2:4a:d2:ab:07:6a:ee:9d:a0:
3b:5f:6c:90:7d:e4:0a:6d:9b:5f:d0:1f:2e:4a:55:
ad:3b:09:c7:51:d9:cb:47:91:a6:0c:42:3a:9f:9d:
09:65:76:3c:47:dc:41:a5:3a:80:94:f6:49:9f:fa:
24:af:c2:e2:fd:bd:fd:66:22:da:64:d5:bd:ce:4b:
33:b0:b0:cd:70:00:87:72:49:eb:18:7d:fa:1d:c4:
d1:72:cf:7d:63:c1:f5:92:3c:e6:78:63:0f:f6:36:
c0:80:19:53:4e:6e:52:0c:c7:b1:cb:5c:af:30:a4:
11:ac:47:45:6d:04:f9:aa:12:3f:83:5f:54:36:b7:
89:82:bd:b1:0b:08:82:53:3e:2b:d6:7a:1a:90:6c:
3a:c4:14:df:ac:50:a1:ba:8e:73:42:82:ed:4c:05:
6c:5d:9b:10:11:83:f3:fd:10:40:69:34:53:8f:2d:
80:d8:ef:d9:c0:e5:a4:dd:3e:e8:b8:80:4f:7b:c0:
90:ae:b0:f5:47:41:72:15:ab:27:57:89:e0:c1:58:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:02:E7:71:58:D0:8E:77:E7:01:2E:36:CB:2C:93:71:EC:97:5A:AC
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/FB5B5E368A4611F18D08BEA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:ba:3a:46:a9:c5:0e:06:d7:0b:38:50:c1:c2:5c:7b:ca:27:
23:46:f2:8f:76:31:cd:ea:d2:1f:cf:c3:15:7d:f4:cd:de:b8:
18:66:e3:58:7d:c8:fb:6c:8d:c8:0e:b9:46:ba:65:fa:38:a3:
9f:9d:76:46:b3:f4:ce:e5:df:08:16:d5:b7:bc:b5:44:0b:6d:
15:e7:bc:76:a8:88:bd:35:b1:82:6d:a1:61:01:57:be:e2:91:
1d:d7:4a:b1:7b:5f:e4:bd:9b:ca:01:7c:3d:87:6d:fc:59:a8:
f7:00:59:87:93:14:b4:58:b6:be:48:94:8b:30:72:66:26:3e:
1c:8e:db:7c:aa:16:f5:55:3f:e7:49:39:da:07:46:46:6f:4b:
01:79:4b:30:47:d0:aa:d7:61:5e:25:2c:12:cd:9c:ea:93:75:
60:c3:28:2b:33:88:f0:e7:17:04:61:60:45:65:d1:52:f1:32:
4e:13:20:3f:a5:7b:df:47:87:15:c3:1d:04:05:fa:c0:53:09:
09:9f:7d:67:78:c0:b0:ca:fd:d3:b3:b0:3a:2b:31:3c:3d:9e:
55:1e:c0:cc:bb:0f:92:60:b7:54:1d:52:7b:82:be:b7:51:58:
f9:20:f4:d8:cb:ac:72:f5:82:69:43:32:01:4a:bf:82:87:d5:
93:56:53:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:07:00 2026 by rpki-client