Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/FD1FC4E28A4511F1B3DF9AA2CE1D38B0.roa
File: FD1FC4E28A4511F1B3DF9AA2CE1D38B0.roa (raw, json)
Hash identifier: qb6gHGUgXuVKr5ZhHivPalyPRVNxfgUbZGkYrEhffk0=
Subject key identifier: 86:FE:74:EE:21:5A:2B:AE:67:08:FD:23:2B:0A:4E:B7:77:1E:95:D3
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 097F
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/FD1FC4E28A4511F1B3DF9AA2CE1D38B0.roa
Signing time: Tue 28 Jul 2026 05:34:23 +0000
ROA not before: Tue 28 Jul 2026 05:34:19 +0000
ROA not after: Fri 31 Jul 2043 05:34:19 +0000
asID: 198949
IP address blocks: 197.176.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:34:19 2026 GMT
Not After : Jul 31 05:34:19 2043 GMT
Subject: CN=6a683f5f-946e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:9f:6c:b1:03:d7:27:8a:ae:4e:22:1e:c2:
aa:ba:26:c4:a1:67:81:b9:3d:4f:ae:a9:73:b1:24:
84:62:47:a1:6f:dc:91:bc:65:1a:7e:4b:7d:20:b0:
48:2d:1a:34:c8:6d:d5:24:75:4c:c7:20:6c:19:c4:
65:5f:2b:9d:50:68:1c:ee:57:14:ee:47:7b:17:af:
4d:88:a9:ac:b0:c3:51:c7:10:1d:90:1f:c5:1f:9f:
47:07:89:05:2f:2d:f2:ba:f3:cc:db:0a:56:76:2b:
ce:00:db:83:08:45:65:82:03:ff:3b:cc:3f:78:b2:
4f:bb:5f:7e:f0:31:ef:f4:56:12:80:ee:91:9c:d3:
3b:34:50:03:f8:d2:2a:31:2a:aa:e8:6a:6e:1d:b9:
45:41:61:c7:69:c5:5b:12:98:df:1f:11:00:fd:21:
28:e7:b9:e7:45:67:8d:52:c1:f0:a1:41:a6:a8:f9:
2e:df:55:5f:e0:af:77:33:4f:9d:3b:bb:3f:7e:5b:
dd:d2:49:83:45:9c:e2:65:78:c8:95:c2:7e:8d:4c:
96:bc:93:34:a1:5e:0f:39:5f:aa:9b:84:df:cb:41:
6e:8d:86:10:15:b9:a0:f3:85:eb:bd:27:de:60:2e:
53:83:13:4c:05:ef:2d:7c:50:0d:75:8a:45:21:14:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FE:74:EE:21:5A:2B:AE:67:08:FD:23:2B:0A:4E:B7:77:1E:95:D3
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/FD1FC4E28A4511F1B3DF9AA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.176.0.0/13
Signature Algorithm: sha256WithRSAEncryption
7b:f1:8b:66:64:ef:39:f9:c4:9e:09:7b:ce:41:84:e8:d6:8f:
82:4d:0b:7c:c4:09:81:45:44:ee:f6:e3:01:06:f7:96:ef:4a:
2e:a3:3a:ff:6a:f3:f3:2b:ec:3e:1d:8c:62:17:2c:50:96:ba:
96:c2:37:c4:a7:d6:df:9b:d9:8a:66:0e:ce:ee:39:e9:18:db:
28:6d:e5:4d:e6:80:a5:e7:61:74:6f:34:90:ad:29:e2:13:9a:
d5:a2:1e:0b:ce:cd:eb:3f:b4:4d:59:a5:49:44:a9:09:c6:aa:
8d:99:98:80:bd:5c:07:8c:0d:50:b9:70:a3:31:51:4c:99:0a:
d6:bf:ef:21:38:0f:d2:8a:3c:9f:94:a8:5a:81:fb:7f:05:f1:
d1:53:63:ab:ef:2a:66:c5:ad:a3:fa:d2:8d:a7:cc:83:2f:7c:
2d:2d:95:42:c9:9e:02:e5:d1:fe:1c:cc:44:ba:62:3b:c8:94:
2c:18:c4:f8:0d:10:3d:21:ce:4a:02:df:93:05:00:2d:d4:15:
bb:3f:20:32:be:42:a6:e8:1c:51:7b:41:d7:87:90:8e:0e:c9:
4a:94:69:9e:99:2a:30:0a:f8:89:79:e9:b2:73:cf:68:47:7f:
16:ba:db:94:80:74:fb:13:63:d6:50:90:e6:54:8b:c5:50:36:
2a:fe:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:42 2026 by rpki-client