Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/A621E03860AD11F184B819D2CE1D38B0.roa
File: A621E03860AD11F184B819D2CE1D38B0.roa (raw, json)
Hash identifier: Jmq4unja5DzvfSBmhbdnQaMaFOiJ/5epzprsOMlWzMo=
Subject key identifier: 4E:8B:DD:8A:09:FF:D6:8E:CB:3B:F0:B0:92:36:26:B5:8E:A9:31:78
Certificate issuer: /CN=F3617560AF/serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
Certificate serial: 05DA
Authority key identifier: 55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/A621E03860AD11F184B819D2CE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:10:36 +0000
ROA not before: Fri 05 Jun 2026 07:10:22 +0000
ROA not after: Wed 31 Dec 2042 07:10:22 +0000
asID: 6453
IP address blocks: 41.136.0.0/16 maxlen: 24
41.212.128.0/17 maxlen: 24
196.27.64.0/19 maxlen: 24
196.192.96.0/20 maxlen: 24
197.224.0.0/14 maxlen: 24
2001:4290::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AF, serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
Validity
Not Before: Jun 5 07:10:22 2026 GMT
Not After : Dec 31 07:10:22 2042 GMT
Subject: CN=6a22766c-7ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:ea:71:dc:1b:e3:01:a3:8e:f1:4a:ec:42:
40:70:ca:6a:07:fa:b4:33:04:4b:c3:17:b3:e7:b7:
21:8a:58:6d:a2:0f:ed:42:6e:f8:45:69:c2:53:b8:
d2:1e:55:82:2e:2e:12:44:b3:94:d1:d5:96:10:ed:
e9:61:1e:a6:2e:ea:91:14:17:e3:30:2e:2c:e9:c2:
b3:9c:b0:64:a1:70:6a:ef:18:97:3f:9a:b2:cd:81:
a9:13:6f:79:b1:15:b8:72:83:d6:d1:2e:4c:19:10:
71:54:97:aa:c8:47:70:07:87:36:e6:b7:58:83:de:
dd:26:a7:a2:65:f7:1e:7d:44:cf:2a:c5:a2:e2:e8:
f3:4e:b9:1c:dd:55:fe:9e:7b:68:17:7a:20:f9:76:
67:81:6a:26:3d:8a:4c:87:3f:b2:2e:5b:65:16:0c:
98:86:85:0e:09:62:59:97:93:86:b6:68:b7:17:b9:
8b:38:a6:3c:b4:5c:c4:2d:2d:50:50:50:ca:90:73:
ff:2c:41:dc:fa:86:32:12:00:1c:ff:c3:e5:50:ce:
71:53:41:1e:8c:d5:ce:28:b4:e5:71:10:a1:22:54:
76:dd:81:0c:82:bc:7e:43:98:a1:d6:7d:37:75:8d:
6b:da:6c:94:4c:68:3f:af:74:ba:03:48:fb:9d:84:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8B:DD:8A:09:FF:D6:8E:CB:3B:F0:B0:92:36:26:B5:8E:A9:31:78
X509v3 Authority Key Identifier:
keyid:55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/A621E03860AD11F184B819D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.136.0.0/16
41.212.128.0/17
196.27.64.0/19
196.192.96.0/20
197.224.0.0/14
IPv6:
2001:4290::/32
Signature Algorithm: sha256WithRSAEncryption
1f:60:57:9d:9a:ac:f1:7e:ba:69:4d:40:b8:fb:c0:f9:c9:db:
6c:f6:bc:c8:60:94:03:e5:fb:16:92:b3:3a:d3:01:cf:59:f1:
6c:79:09:a8:47:1d:86:46:f4:9a:97:2a:fb:e7:f7:a7:18:d6:
54:66:c1:d6:0a:7b:02:f6:88:84:1d:29:23:b2:45:d3:d0:8c:
01:4a:5c:61:ad:10:c7:01:99:a5:81:a6:99:75:8c:8f:92:83:
a5:e8:5a:cf:4b:e0:be:85:7f:8e:a7:b6:c8:1d:e0:f6:d9:a8:
29:87:31:55:b4:cb:25:d9:78:99:25:1b:69:a7:81:18:92:86:
c3:0b:5b:e0:ce:86:49:2d:a5:9d:ad:4a:a3:13:af:85:f7:8d:
9f:4b:af:94:39:8b:31:d7:6a:56:21:57:1a:61:0a:29:d2:6b:
7a:fd:1c:5f:9f:b1:51:e3:91:0f:73:54:6c:1d:16:8a:09:66:
1c:61:8f:7d:04:3b:bd:6b:fe:5b:10:6c:8d:1d:3a:ce:67:68:
ba:29:cd:46:3d:77:b9:2b:06:6e:48:e3:28:df:46:b8:9d:87:
d4:8d:04:0d:2a:ad:77:20:3b:80:9c:c3:e7:df:4e:79:c5:8e:
a9:1e:e1:5d:d6:f3:be:1f:2b:a3:58:7c:49:af:03:21:10:ae:
d4:ec:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:33:40 2026 by rpki-client