Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/DEAEE6708D8611F1ADB24903CF1D38B0.roa
File: DEAEE6708D8611F1ADB24903CF1D38B0.roa (raw, json)
Hash identifier: xEhpgK8WpYB9KamuSCLRAETU2oMp2zJ+vScsaBIsWrY=
Subject key identifier: 7C:E8:3B:38:F0:43:2C:4A:78:63:18:70:F0:7C:DD:4D:D8:3A:74:6D
Certificate issuer: /CN=F363BB47AF/serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
Certificate serial: 0553
Authority key identifier: 9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/DEAEE6708D8611F1ADB24903CF1D38B0.roa
Signing time: Sat 01 Aug 2026 08:56:23 +0000
ROA not before: Sat 01 Aug 2026 08:56:19 +0000
ROA not after: Tue 21 Dec 2032 08:56:19 +0000
asID: 37412
IP address blocks: 41.79.180.0/22 maxlen: 24
2c0f:fb30::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BB47AF, serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
Validity
Not Before: Aug 1 08:56:19 2026 GMT
Not After : Dec 21 08:56:19 2032 GMT
Subject: CN=6a6db4b7-7a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:cf:b3:f6:f6:9a:1b:53:e6:36:88:f2:63:
c2:ab:52:0c:6a:38:d7:83:02:dd:74:ac:6f:5c:14:
e2:5a:e5:2f:61:cd:b0:98:2a:13:b3:ff:cc:9a:e8:
ba:d2:8f:85:ac:f6:52:3f:c1:7e:a3:20:8a:8b:8c:
6f:d1:bf:22:45:8f:1f:4f:6e:b5:24:ec:ee:5d:2f:
67:34:b5:37:30:34:cc:57:84:47:60:59:7b:dd:0f:
4c:7a:4d:7e:38:f6:df:f3:68:7c:77:55:4a:78:43:
4e:58:41:ad:2f:ca:6a:dc:f3:ab:75:f9:d7:2d:49:
0f:12:ad:74:61:bf:b1:1d:de:ee:5a:40:d1:77:eb:
8c:bb:b6:0c:69:6d:1c:55:f2:93:ab:d4:1c:be:62:
88:69:95:c2:24:a8:9b:d0:b2:28:02:04:f2:5d:cc:
5f:dd:ab:b7:6e:3b:01:32:d1:66:6b:69:74:b5:95:
20:b7:6c:c9:7d:9d:77:cd:d9:ec:f8:71:d4:ba:7c:
ee:55:d0:3b:6b:b3:c1:75:1c:5c:16:3a:d0:e2:49:
d8:be:b3:aa:78:a5:44:08:1b:26:1b:df:f2:c9:e5:
28:e5:be:62:fb:ee:e6:78:fb:e9:b1:75:83:47:d7:
3c:d7:85:36:c6:06:28:4c:23:43:b1:91:cf:75:bc:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E8:3B:38:F0:43:2C:4A:78:63:18:70:F0:7C:DD:4D:D8:3A:74:6D
X509v3 Authority Key Identifier:
keyid:9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/DEAEE6708D8611F1ADB24903CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.180.0/22
IPv6:
2c0f:fb30::/32
Signature Algorithm: sha256WithRSAEncryption
11:61:08:17:48:33:9a:33:a4:06:ac:5b:e2:5f:05:a0:0c:31:
79:b3:09:4a:4b:af:d8:24:76:99:bc:75:8d:9d:07:0e:a2:ef:
01:01:79:c0:1b:78:d2:12:ca:85:f7:72:04:09:b4:af:82:ea:
d9:69:78:0e:08:bf:be:67:60:b1:10:8b:df:3d:2b:23:ee:71:
14:44:22:6c:43:9d:c5:ea:89:13:92:a0:16:0d:aa:76:26:a3:
e8:a9:1f:d8:66:0d:f8:03:76:75:d1:cd:5e:94:65:c5:bc:15:
36:6a:bb:59:7d:48:84:0e:ba:f8:94:f3:73:7e:75:30:53:65:
14:fc:71:06:38:8f:da:e9:a2:95:c3:55:a1:d6:43:9b:21:e9:
4a:7c:d7:24:07:98:98:5d:dd:8a:fd:af:4b:e9:84:a7:d7:ed:
bf:e9:0f:36:c7:6e:e6:72:9b:b7:53:2d:c4:85:69:4a:90:fc:
73:bf:bf:c2:0b:7a:43:b6:14:09:4a:4e:d5:96:14:cd:e1:b2:
87:db:b2:69:5d:03:08:19:4c:0b:1a:99:e1:7e:f6:53:a8:d4:
24:18:0d:1e:ed:6e:5f:f1:e6:81:e0:68:11:cf:2c:42:90:24:
af:4f:26:87:dd:f8:39:84:c5:54:49:fa:9b:6a:7f:40:fe:22:
2b:55:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:36:15 2026 by rpki-client