Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/3ACCA9BA8B7A11F1A10EEBF4CE1D38B0.roa
File: 3ACCA9BA8B7A11F1A10EEBF4CE1D38B0.roa (raw, json)
Hash identifier: 6f2ZMAkXPfEp2IZ0QItlT3/m28j5qiCtEdR3Af+RXgQ=
Subject key identifier: CA:3B:23:E7:12:87:AD:C5:6F:FA:6A:B6:E0:54:E4:61:D6:CF:7D:94
Certificate issuer: /CN=F3668A5FAF/serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
Certificate serial: 0717
Authority key identifier: 16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/3ACCA9BA8B7A11F1A10EEBF4CE1D38B0.roa
Signing time: Wed 29 Jul 2026 18:20:52 +0000
ROA not before: Wed 29 Jul 2026 18:20:48 +0000
ROA not after: Tue 31 Dec 2030 18:20:48 +0000
asID: 37608
IP address blocks: 41.242.96.0/20 maxlen: 20
2c0f:f9f0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815 (0x717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668A5FAF, serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
Validity
Not Before: Jul 29 18:20:48 2026 GMT
Not After : Dec 31 18:20:48 2030 GMT
Subject: CN=6a6a4484-c517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:3a:33:db:2e:5d:26:24:3b:60:66:e6:f1:
a4:81:88:44:e2:7d:43:4b:d0:b4:46:a1:22:02:68:
aa:8f:9d:26:49:27:6c:96:58:26:7f:fc:08:1c:69:
97:54:54:1c:ed:93:c1:6d:dd:62:01:32:2e:04:1f:
22:65:0a:e8:9c:eb:6e:29:45:8e:96:47:cc:98:68:
a4:e7:6f:16:17:5d:b2:79:ac:d0:86:7e:66:7e:20:
0d:d3:bc:7a:ae:6c:2d:ac:de:0e:e8:82:fa:0a:a9:
98:c8:0c:e8:f7:70:10:c0:d4:af:af:3e:9e:ed:dc:
33:a5:47:db:e1:67:ec:6a:07:7c:b8:0f:e9:09:18:
96:6c:39:b5:da:af:44:63:77:b4:78:ad:40:1e:53:
76:ed:41:52:51:35:82:a2:ed:7c:15:e3:ca:a4:c7:
b6:01:e5:2b:ca:e3:e7:fc:2f:16:80:c2:2f:26:0c:
67:4d:17:28:2a:e8:3d:5b:d7:71:56:c0:54:1f:78:
03:7d:58:0e:d6:80:d9:2c:56:12:7d:43:a7:7f:2c:
16:c5:97:4c:33:a9:76:c1:1e:63:3f:b8:f0:97:86:
80:f1:a6:af:75:53:a8:4f:ad:1e:f0:95:64:4f:fd:
6a:93:51:fd:32:97:44:b9:65:d6:fa:2a:78:0a:fb:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:23:E7:12:87:AD:C5:6F:FA:6A:B6:E0:54:E4:61:D6:CF:7D:94
X509v3 Authority Key Identifier:
keyid:16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/3ACCA9BA8B7A11F1A10EEBF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.96.0/20
IPv6:
2c0f:f9f0::/32
Signature Algorithm: sha256WithRSAEncryption
47:c0:2c:60:4b:1f:ff:15:9c:77:3f:ab:9a:03:99:db:6f:a8:
db:cd:b8:f4:14:16:9e:3e:68:95:73:34:c7:54:50:f8:6a:b4:
e8:4e:f4:99:81:94:ad:80:30:36:ed:8c:ea:82:1b:90:60:aa:
7f:52:14:58:83:bc:ef:0a:4b:59:29:5a:3d:87:8d:73:1b:14:
64:20:1c:4e:2b:c4:fb:39:52:0b:21:83:91:d8:8d:20:1a:2a:
3d:28:a1:21:51:d1:b7:e5:bd:ea:ce:5f:b0:e5:28:76:93:8c:
0e:6c:5a:09:d6:5b:2a:19:b6:2b:fc:64:51:79:af:2c:29:09:
0e:f6:cc:ba:01:c9:6a:3b:93:8c:ff:f1:27:ba:76:c2:f6:ea:
1e:32:b9:5a:f1:60:41:87:d6:7b:13:9f:94:49:2c:16:4e:b4:
c4:7e:0f:23:ae:eb:b1:2f:23:da:74:78:0e:1a:b8:2b:63:07:
1e:9b:64:b9:5d:98:0c:13:c9:f9:68:23:f9:41:83:34:7c:b0:
e9:a3:f2:3b:f2:8d:a7:00:60:8c:4f:54:66:99:8f:b9:b5:5b:
96:a1:60:02:75:c6:35:37:e4:2c:e4:25:40:39:79:d7:00:10:
96:13:60:57:de:4e:2b:e6:aa:36:ab:9f:f8:8c:28:1e:2f:35:
25:9f:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:16 2026 by rpki-client