Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/41D985C68B7411F1BD3440D0CE1D38B0.roa
File: 41D985C68B7411F1BD3440D0CE1D38B0.roa (raw, json)
Hash identifier: rGO0c48isc5Si/SYwjoBZ3hjaJtrFfGbwrBlXDL+d3k=
Subject key identifier: 49:56:0F:21:8F:7B:38:E0:25:E2:D0:83:A3:B9:7B:CF:77:F4:34:AC
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: 04F6
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/41D985C68B7411F1BD3440D0CE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:38:06 +0000
ROA not before: Wed 29 Jul 2026 17:38:03 +0000
ROA not after: Tue 06 Dec 2033 17:38:03 +0000
asID: 19711
IP address blocks: 2001:4338::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.mft
rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF, serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Validity
Not Before: Jul 29 17:38:03 2026 GMT
Not After : Dec 6 17:38:03 2033 GMT
Subject: CN=6a6a3a7e-7f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:c2:1a:e8:17:b7:17:ae:22:61:6d:ee:c5:
a7:5a:98:db:94:a4:d9:9a:cc:c2:50:7c:11:6a:1f:
50:49:71:e5:8a:dc:4e:81:fb:87:08:62:ef:ad:b8:
78:9a:18:88:b7:0c:43:62:e2:cf:a0:72:6f:2a:a2:
09:98:97:72:2d:6b:6d:a0:f3:62:9e:bf:68:27:a3:
06:d6:a1:d4:a1:0b:0d:94:49:48:28:e2:6b:cc:07:
5d:a7:80:5d:22:de:1e:43:22:f2:f9:e1:ad:7a:db:
96:74:79:01:ed:c8:8c:9a:32:6a:97:90:b3:af:b9:
7d:99:90:c5:bd:bd:55:51:9f:a5:e9:22:4c:c0:bc:
6c:a7:4e:45:e3:3b:5c:b7:ad:1b:9c:d4:47:7d:7c:
0b:d7:96:36:bd:d0:f9:66:15:ab:e4:47:8a:c7:18:
89:3f:b8:59:63:8f:48:d5:91:27:08:31:66:31:09:
bb:8b:de:d9:19:c7:58:13:d8:14:21:99:fc:6d:c1:
04:90:aa:b1:51:1d:81:9b:24:40:f9:a7:b5:0d:0a:
ca:61:e5:f6:53:cc:4d:07:f8:ad:67:ba:18:72:af:
c5:75:36:37:01:c8:04:b0:cf:f6:2f:33:e4:e3:49:
19:7a:95:a1:8c:c3:fa:4e:d4:95:0f:5b:19:38:f0:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:0F:21:8F:7B:38:E0:25:E2:D0:83:A3:B9:7B:CF:77:F4:34:AC
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/41D985C68B7411F1BD3440D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4338::/64
Signature Algorithm: sha256WithRSAEncryption
ba:88:89:1b:d8:31:ef:4e:86:cb:db:ac:59:29:47:41:4d:c4:
a4:e9:65:a4:43:59:b3:6d:7c:fd:10:0e:ee:9f:97:5f:e4:26:
81:72:41:7f:65:51:9b:fb:c0:75:0d:05:9f:f4:cf:f4:e4:b9:
12:7d:93:82:5a:98:ea:ec:ba:11:0f:84:6d:ab:83:c4:19:aa:
e1:1b:09:8f:bc:00:72:cd:09:36:b9:45:9a:99:9a:6c:12:b8:
d8:43:93:6e:62:1a:f2:ca:fb:fc:58:4b:fa:ed:96:e5:df:c6:
d3:cb:ae:52:17:d4:4a:1a:2f:05:db:9e:c2:79:a3:0b:55:66:
63:90:39:19:17:aa:b9:97:b4:f0:4f:eb:4a:92:e7:8a:ac:f6:
f0:52:b4:7b:af:42:0d:7f:7c:00:5c:bc:60:76:b7:ab:e3:e0:
7a:00:82:73:0f:55:7e:1c:62:b0:de:78:23:32:f7:4b:54:5d:
92:6b:32:13:fb:3c:32:9e:8d:63:1b:b6:1c:8f:c6:c1:84:1b:
ae:0c:f8:d9:80:41:2a:ff:a4:80:b6:36:a2:ad:be:96:71:a1:
07:cd:be:0e:9e:a5:99:f8:20:50:1b:cb:5b:2f:df:7d:0e:de:
e4:70:77:f1:24:43:5b:99:fe:89:3c:01:e0:51:e2:d8:14:a8:
5c:18:83:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:31 2026 by rpki-client