Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/606BFC868C0911F1AC7180E7CE1D38B0.roa
File: 606BFC868C0911F1AC7180E7CE1D38B0.roa (raw, json)
Hash identifier: CdaWPkfsHNEFk15V9H918ZavMnTus1bE/y1dfE+F8vc=
Subject key identifier: 64:E3:0D:50:38:FB:2C:42:3F:3E:5D:FF:22:01:EB:17:F0:1F:45:23
Certificate issuer: /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial: 0860
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/606BFC868C0911F1AC7180E7CE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:25:33 +0000
ROA not before: Thu 30 Jul 2026 11:25:29 +0000
ROA not after: Sun 24 Sep 2028 11:25:29 +0000
asID: 37228
IP address blocks: 41.74.160.0/22 maxlen: 22
41.74.163.0/24 maxlen: 24
41.74.164.0/22 maxlen: 22
41.74.166.0/24 maxlen: 24
41.74.167.0/24 maxlen: 24
41.74.168.0/22 maxlen: 22
41.74.168.0/23 maxlen: 23
41.74.168.0/24 maxlen: 24
41.74.170.0/23 maxlen: 23
41.74.172.0/22 maxlen: 22
41.74.172.0/23 maxlen: 23
41.74.172.0/24 maxlen: 24
41.74.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363ADF7AF, serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Validity
Not Before: Jul 30 11:25:29 2026 GMT
Not After : Sep 24 11:25:29 2028 GMT
Subject: CN=6a6b34ad-3f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:f5:cc:dd:40:e0:21:4c:c7:18:6e:7b:c0:
a0:03:63:51:5e:c6:da:c6:02:5a:e5:07:31:d4:ad:
fc:f7:93:c5:3d:05:c0:d7:b9:c4:66:6e:bd:44:e0:
80:55:5d:be:b2:9f:38:c3:6a:f2:74:3b:e0:60:4d:
7c:15:8a:a7:3d:54:15:3c:6b:ac:08:dd:f9:1d:a5:
7e:ff:fe:f5:41:de:ab:c8:06:f4:80:d4:10:f8:6d:
d1:32:81:af:27:01:d7:4f:e1:a8:9b:ed:d4:ca:55:
a1:ab:01:a0:79:86:15:5d:d2:52:cb:8d:46:12:69:
a3:4e:e2:06:a7:a3:27:cc:d0:e3:06:76:2a:89:f2:
1c:ff:be:c1:c0:5e:d9:d2:2f:23:38:37:d1:99:bb:
72:53:b7:c5:05:72:b8:b7:10:dc:3b:26:17:9f:f1:
d9:74:c5:c6:96:03:c7:b7:28:7e:ef:1a:76:2e:62:
1e:d3:ee:58:8f:68:2c:c6:84:61:d0:70:a4:b9:d2:
ed:81:8e:14:bc:39:44:e9:a0:3a:77:14:df:db:37:
a7:f8:f6:ec:e7:d5:e1:49:a9:5e:cb:5f:61:3d:22:
9f:e3:a0:78:be:bf:0f:ee:5a:5a:4a:d1:9b:8e:f5:
f0:9c:b6:4b:d8:b1:05:cb:d0:aa:1e:a5:94:22:28:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E3:0D:50:38:FB:2C:42:3F:3E:5D:FF:22:01:EB:17:F0:1F:45:23
X509v3 Authority Key Identifier:
keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/606BFC868C0911F1AC7180E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.74.160.0/20
Signature Algorithm: sha256WithRSAEncryption
70:ba:27:f8:cd:e3:d5:96:b2:1d:3b:fc:34:14:01:b1:8c:5a:
b1:10:a5:e7:ab:19:21:69:be:3b:51:a9:25:e7:98:b3:92:43:
2f:57:7d:46:32:f7:a4:f9:ca:8c:c6:6d:1f:60:d5:9d:22:f8:
4e:70:7c:24:47:07:5f:53:5f:5b:60:c0:8a:7c:b0:f6:f3:02:
fa:d1:8f:e3:0d:9a:f3:d6:14:3b:3a:87:c5:c9:49:75:ee:fb:
be:16:c2:6f:43:89:91:c3:01:57:d6:56:94:10:93:fd:ab:36:
e2:78:58:0e:77:0b:b2:24:eb:a8:9a:92:86:9c:df:10:55:55:
17:47:2b:41:fb:64:96:f2:28:1e:9b:ec:16:be:03:6a:7e:3a:
83:5d:75:26:c1:22:2a:80:9a:26:1a:46:22:d2:57:bd:09:b5:
ff:ec:5d:1e:c0:65:42:ca:99:df:d1:59:c1:3f:bf:ba:ec:15:
47:a7:3e:37:9c:18:2f:fb:7a:33:63:2b:98:b1:39:ce:13:bf:
d8:29:e6:48:38:74:ff:7e:86:db:75:b1:85:52:bd:e7:55:21:
bf:aa:03:b1:f4:ab:66:ca:55:8f:3b:c0:15:d5:f7:9d:35:fb:
2a:09:d2:a5:b4:c0:1f:a6:69:e1:b6:e6:a0:1a:7d:0b:3f:fb:
a8:1d:c2:7a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0FERjdBRjExMC8GA1UEBRMoRTczRDMwMUY5MTBENTZFQkFCN0ExMTEwM0JFOEJF
Mjc1Mzg4QjcyQjAeFw0yNjA3MzAxMTI1MjlaFw0yODA5MjQxMTI1MjlaMBgxFjAU
BgNVBAMTDTZhNmIzNGFkLTNmN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDn2/XM3UDgIUzHGG57wKADY1FextrGAlrlBzHUrfz3k8U9BcDXucRmbr1E
4IBVXb6ynzjDavJ0O+BgTXwViqc9VBU8a6wI3fkdpX7//vVB3qvIBvSA1BD4bdEy
ga8nAddP4aib7dTKVaGrAaB5hhVd0lLLjUYSaaNO4ganoyfM0OMGdiqJ8hz/vsHA
XtnSLyM4N9GZu3JTt8UFcri3ENw7Jhef8dl0xcaWA8e3KH7vGnYuYh7T7liPaCzG
hGHQcKS50u2BjhS8OUTpoDp3FN/bN6f49uzn1eFJqV7LX2E9Ip/joHi+vw/uWlpK
0ZuO9fCctkvYsQXL0KoepZQiKCH7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZOMN
UDj7LEI/Pl3/IgHrF/AfRSMwHwYDVR0jBBgwFoAU5z0wH5ENVuurehEQO+i+J1OI
tyswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNBREY3L0IzMTIzRjkwM0JCQTExRUJBOTRFOUIxRkY4QUVBMjI4LzV6MHdI
NUVOVnV1cmVoRVFPLWktSjFPSXR5cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzV6MHdINUVOVnV1cmVoRVFPLWktSjFPSXR5cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNBREY3L0IzMTIzRjkwM0JCQTExRUJBOTRFOUIxRkY4
QUVBMjI4LzYwNkJGQzg2OEMwOTExRjFBQzcxODBFN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQpSqAwDQYJKoZIhvcNAQEL
BQADggEBAHC6J/jN49WWsh07/DQUAbGMWrEQpeerGSFpvjtRqSXnmLOSQy9XfUYy
96T5yozGbR9g1Z0i+E5wfCRHB19TX1tgwIp8sPbzAvrRj+MNmvPWFDs6h8XJSXXu
+74Wwm9DiZHDAVfWVpQQk/2rNuJ4WA53C7Ik66iakoac3xBVVRdHK0H7ZJbyKB6b
7Ba+A2p+OoNddSbBIiqAmiYaRiLSV70Jtf/sXR7AZULKmd/RWcE/v7rsFUenPjec
GC/7ejNjK5ixOc4Tv9gp5kg4dP9+htt1sYVSvedVIb+qA7H0q2bKVY87wBXV9501
+yoJ0qW0wB+maeG25qAafQs/+6gdwno=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:20 2026 by rpki-client