Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/6B8C1F5C1CFF11F1AEC2C7DBDAE4EC9C.roa
File: 6B8C1F5C1CFF11F1AEC2C7DBDAE4EC9C.roa (raw, json)
Hash identifier: vVsoBzOgmQJsVgZ4eiWG42vtCjrBwkXB68PKgcK7ZzA=
Subject key identifier: F5:B4:56:E0:95:07:AB:6C:CD:B9:82:D6:28:33:6B:14:60:39:86:C7
Certificate issuer: /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial: 065F
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/6B8C1F5C1CFF11F1AEC2C7DBDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 04:04:37 +0000
ROA not before: Wed 11 Mar 2026 04:04:32 +0000
ROA not after: Wed 01 Dec 2049 04:04:32 +0000
asID: 327979
IP address blocks: 41.222.32.0/21 maxlen: 24
41.222.32.0/24 maxlen: 24
41.222.33.0/24 maxlen: 24
41.222.34.0/24 maxlen: 24
41.222.35.0/24 maxlen: 24
41.222.36.0/24 maxlen: 24
41.222.37.0/24 maxlen: 24
41.222.38.0/24 maxlen: 24
41.222.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 22 Mar 2026 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Validity
Not Before: Mar 11 04:04:32 2026 GMT
Not After : Dec 1 04:04:32 2049 GMT
Subject: CN=69b0e9d5-bf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:48:a7:c9:16:b8:8a:e2:df:4e:13:2d:4b:
4e:c4:7c:08:b6:17:99:29:8b:91:51:c1:33:e4:92:
8c:ee:6e:b9:17:23:e0:ab:37:88:bc:64:cc:f9:90:
9e:ab:ed:ca:43:4b:e0:19:13:5d:85:3f:db:09:4f:
28:e1:16:3f:30:f6:9a:ff:a7:66:c2:3d:76:0a:72:
8d:16:b3:66:4e:13:25:00:bd:b7:0d:bb:17:fc:24:
8f:3c:4a:44:d2:c7:4c:6f:6b:9b:13:70:75:30:c9:
0b:f5:19:9b:0f:81:b3:81:0f:36:55:23:52:3d:2f:
8b:75:9c:2c:64:ae:d1:85:6c:f4:8e:e1:53:f8:9b:
99:fb:14:91:1e:5a:61:7c:e0:b8:7b:26:02:ee:e8:
ac:07:f3:fa:26:17:08:90:5f:c8:5d:ab:98:04:ef:
17:55:21:c7:c1:4d:69:d6:c6:6a:90:f5:ad:25:87:
0f:bb:7e:b5:ae:63:6a:1b:63:52:bc:64:29:e3:92:
00:d4:d0:96:72:f9:53:4b:5a:d8:fe:68:a9:03:86:
86:7c:28:63:0a:ac:31:aa:d3:0e:5c:54:58:97:83:
21:b1:04:87:b3:ea:ef:1e:66:16:56:ba:ea:7b:11:
6b:04:36:9c:04:c3:36:31:3d:31:08:cb:59:85:f9:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:56:E0:95:07:AB:6C:CD:B9:82:D6:28:33:6B:14:60:39:86:C7
X509v3 Authority Key Identifier:
keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/6B8C1F5C1CFF11F1AEC2C7DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.32.0/21
Signature Algorithm: sha256WithRSAEncryption
d8:a7:1b:9d:fb:10:70:ec:a4:aa:c1:da:20:88:d1:31:53:1e:
90:72:10:16:79:aa:07:29:c6:d0:75:56:c5:65:3f:8a:24:69:
07:8a:18:61:87:b1:24:54:55:c6:c3:8b:2b:d3:41:06:f9:43:
52:9a:6c:40:28:28:54:74:ec:08:46:18:cb:1f:f9:38:19:da:
7a:5b:df:0f:95:8b:08:49:da:e7:19:6a:c0:17:31:b6:49:df:
93:2e:36:99:e9:c0:2b:ec:98:68:b2:58:1b:5b:56:81:cb:9c:
a7:60:ac:ef:9d:dd:17:79:23:7c:80:df:4e:a0:3b:6f:06:bc:
0d:e7:41:e7:39:88:8c:7f:43:c2:2e:34:be:85:63:48:6a:38:
41:88:e6:ef:22:b7:32:4a:e3:34:84:ee:c9:d2:d4:12:20:a3:
11:fa:f9:08:ec:15:3b:8e:56:f5:82:2f:a7:90:ea:24:65:9d:
7f:31:ce:4b:92:f5:fb:28:46:64:51:6d:7d:a4:70:ab:5b:61:
39:e8:e1:ce:8b:4f:a2:c0:f8:a3:b8:13:36:0f:b5:9c:ab:52:
14:87:10:23:5b:29:f0:5c:8b:98:03:86:5d:cc:9f:a2:73:d1:
61:ca:86:25:46:99:f4:9c:f0:2c:49:f4:2b:82:52:9c:8c:dd:
95:a6:38:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 23:35:25 2026 by rpki-client