Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/E20EF7DC897C11F1AC00E2D5CE1D38B0.roa
File: E20EF7DC897C11F1AC00E2D5CE1D38B0.roa (raw, json)
Hash identifier: ohBLTRzbp9O9wrakw6aPhVPvIHpEhKPcAMJ8K/f6vL4=
Subject key identifier: 59:E7:C9:45:1E:73:ED:78:2E:6F:6E:E8:13:2E:20:EB:20:FD:C6:71
Certificate issuer: /CN=F369EC27AF/serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
Certificate serial: 04D0
Authority key identifier: 15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/E20EF7DC897C11F1AC00E2D5CE1D38B0.roa
Signing time: Mon 27 Jul 2026 05:34:49 +0000
ROA not before: Mon 27 Jul 2026 05:34:45 +0000
ROA not after: Sat 30 Apr 2033 05:34:45 +0000
asID: 0
IP address blocks: 196.49.90.0/24 maxlen: 24
2001:43f8:1690::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl
rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 03:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1232 (0x4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369EC27AF, serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
Validity
Not Before: Jul 27 05:34:45 2026 GMT
Not After : Apr 30 05:34:45 2033 GMT
Subject: CN=6a66edf9-2443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:a9:a3:3a:bc:82:60:ec:60:e8:8a:2e:4b:
49:a6:05:21:98:9a:6d:17:4b:ed:0e:06:70:19:6f:
0c:bf:c1:5f:e1:0d:0a:e1:dc:5a:92:b4:31:b7:ad:
f2:14:07:33:5e:f9:39:ab:b8:43:60:05:2c:6b:26:
39:f9:0d:6b:97:bc:7c:c4:ca:bb:97:cd:23:aa:af:
6e:63:bd:cf:8e:aa:57:92:f9:7c:b0:fb:69:13:dc:
6b:3b:6e:ef:8b:ba:b9:3b:63:c1:1c:e3:92:d3:90:
ac:22:04:8f:38:72:7d:d7:bd:a4:b1:14:b5:0c:5d:
77:3b:40:0a:2a:d2:e0:82:a3:61:98:00:d6:58:65:
a8:13:73:19:86:f7:d3:02:ec:ba:43:8b:38:fa:ba:
eb:3b:2b:cf:4f:f2:21:fb:09:81:81:94:d0:9c:ec:
a8:45:a9:97:bf:4f:46:73:eb:8d:51:fe:9c:ed:cd:
c2:5d:1e:ad:28:f9:31:27:e5:01:28:22:4e:2c:fc:
1c:7e:44:25:4e:47:50:ba:74:85:b1:9f:38:ba:9b:
89:d0:78:a6:c2:ba:e1:5e:fa:27:83:d4:8e:6d:7c:
2d:d3:37:0c:cc:b8:a1:08:f1:7c:12:5d:77:98:11:
e5:54:d0:66:a1:a9:85:e2:1c:ff:49:7c:a7:2e:f2:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:C9:45:1E:73:ED:78:2E:6F:6E:E8:13:2E:20:EB:20:FD:C6:71
X509v3 Authority Key Identifier:
keyid:15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/E20EF7DC897C11F1AC00E2D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.90.0/24
IPv6:
2001:43f8:1690::/48
Signature Algorithm: sha256WithRSAEncryption
a8:5b:f1:62:97:78:01:81:7b:77:0b:e6:4b:c2:c8:b4:f4:3f:
df:99:27:41:33:b3:7f:db:71:82:8b:f4:4b:63:d3:a6:b5:a3:
d7:b3:76:d4:ba:1e:94:3a:ce:23:a5:a3:d8:ec:ea:06:ff:a4:
ad:61:19:33:6e:27:57:a4:9d:c8:d7:ff:7c:b1:dd:4a:76:95:
e5:88:aa:49:4b:ba:d4:3a:90:dc:7d:b1:cd:85:b3:57:19:52:
cb:29:e8:ac:4a:4d:c4:82:33:58:65:3f:67:9b:d1:42:e2:e6:
0a:81:7c:fb:60:2d:0c:0c:ce:2d:c0:9e:b0:e5:4f:01:40:cd:
45:06:4c:e6:88:6a:5d:61:95:ea:8b:02:16:7b:f2:5a:e5:57:
61:11:cb:c3:18:e6:cd:c2:dc:51:87:a6:32:bc:de:b9:48:23:
89:3a:a3:ca:0e:87:4f:7a:1e:c6:b2:29:d3:18:94:57:c3:e9:
43:3f:3b:95:dc:ea:05:68:c6:3c:91:c2:f3:9c:92:b5:4a:b5:
ba:66:41:06:3e:f2:be:e1:0f:a7:1b:51:85:f6:62:5a:58:dc:
cf:12:9b:9f:a9:21:21:94:9a:2c:ee:32:5c:9e:ce:94:67:ce:
c0:d1:ed:9c:24:0b:17:69:34:5a:a7:75:1c:be:e7:15:59:42:
33:fa:72:e9
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUVDMjdBRjExMC8GA1UEBRMoMTVFNzEzRkQ3QjYyMENFM0M5OTM1NEEwN0QzN0JB
ODM3MTMyOUI0NzAeFw0yNjA3MjcwNTM0NDVaFw0zMzA0MzAwNTM0NDVaMBgxFjAU
BgNVBAMTDTZhNjZlZGY5LTI0NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAfKmjOryCYOxg6IouS0mmBSGYmm0XS+0OBnAZbwy/wV/hDQrh3FqStDG3
rfIUBzNe+TmruENgBSxrJjn5DWuXvHzEyruXzSOqr25jvc+OqleS+Xyw+2kT3Gs7
bu+Lurk7Y8Ec45LTkKwiBI84cn3XvaSxFLUMXXc7QAoq0uCCo2GYANZYZagTcxmG
99MC7LpDizj6uus7K89P8iH7CYGBlNCc7KhFqZe/T0Zz641R/pztzcJdHq0o+TEn
5QEoIk4s/Bx+RCVOR1C6dIWxnzi6m4nQeKbCuuFe+ieD1I5tfC3TNwzMuKEI8XwS
XXeYEeVU0GahqYXiHP9JfKcu8uSxAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUWefJ
RR5z7Xgub27oEy4g6yD9xnEwHwYDVR0jBBgwFoAUFecT/XtiDOPJk1SgfTe6g3Ey
m0cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFQzI3L0Y4MDRBMUFBREQxQzExRUQ5RDdDRURDRDJGNkQ4QzFEL0ZlY1Rf
WHRpRE9QSmsxU2dmVGU2ZzNFeW0wYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZlY1RfWHRpRE9QSmsxU2dmVGU2ZzNFeW0wYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlFQzI3L0Y4MDRBMUFBREQxQzExRUQ5RDdDRURDRDJG
NkQ4QzFEL0UyMEVGN0RDODk3QzExRjFBQzAwRTJENUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADEMVowDwQCAAIwCQMHACAB
Q/gWkDANBgkqhkiG9w0BAQsFAAOCAQEAqFvxYpd4AYF7dwvmS8LItPQ/35knQTOz
f9txgov0S2PTprWj17N21LoelDrOI6Wj2OzqBv+krWEZM24nV6SdyNf/fLHdSnaV
5YiqSUu61DqQ3H2xzYWzVxlSyynorEpNxIIzWGU/Z5vRQuLmCoF8+2AtDAzOLcCe
sOVPAUDNRQZM5ohqXWGV6osCFnvyWuVXYRHLwxjmzcLcUYemMrzeuUgjiTqjyg6H
T3oexrIp0xiUV8PpQz87ldzqBWjGPJHC85yStUq1umZBBj7yvuEPpxtRhfZiWljc
zxKbn6khIZSaLO4yXJ7OlGfOwNHtnCQLF2k0Wqd1HL7nFVlCM/py6Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:24 2026 by rpki-client