Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/49293CEC8C1711F1B40012BDCE1D38B0.roa
File: 49293CEC8C1711F1B40012BDCE1D38B0.roa (raw, json)
Hash identifier: UGIZ11vI+AloPkuFQufQtNgRRaZ7czAPvHXq/fiHA+E=
Subject key identifier: 91:BB:22:6E:A9:29:8C:AA:6A:4A:02:F7:3E:0E:4A:89:B9:1F:3F:C4
Certificate issuer: /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial: 058E
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/49293CEC8C1711F1B40012BDCE1D38B0.roa
Signing time: Thu 30 Jul 2026 13:05:07 +0000
ROA not before: Thu 30 Jul 2026 13:05:03 +0000
ROA not after: Fri 31 Dec 2049 13:05:03 +0000
asID: 37282
IP address blocks: 196.60.58.0/24 maxlen: 24
2001:43f8:11f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Validity
Not Before: Jul 30 13:05:03 2026 GMT
Not After : Dec 31 13:05:03 2049 GMT
Subject: CN=6a6b4c03-fa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:84:ea:67:9a:25:4c:08:c2:83:c6:f7:33:
37:50:b1:1d:39:48:4e:7a:96:3b:1d:b7:74:f1:e9:
4f:2f:d1:cc:f3:b2:9e:12:25:25:c5:c2:ef:c0:4a:
f7:21:bd:1b:00:8c:32:48:2b:78:b2:a2:d9:1f:aa:
3f:71:90:85:53:5d:72:61:3f:45:da:50:75:42:ad:
87:df:03:57:b8:76:a5:9b:75:31:54:1c:44:1c:20:
f3:55:3f:8f:f1:df:78:a1:6d:f0:36:7e:86:db:2a:
be:ae:87:3b:b0:91:c5:f5:fd:63:56:60:f2:d2:f3:
37:84:4e:52:40:3b:4d:0b:07:3d:03:cc:ee:41:a8:
db:b0:c7:26:b3:f2:eb:0e:cc:ec:24:7e:de:47:ef:
29:39:5a:5e:09:0b:52:c7:b6:c8:4d:29:2a:6a:d7:
ef:94:fd:81:51:67:13:44:ef:0b:a2:d6:3b:db:bc:
be:8d:66:45:8f:83:ba:d5:fa:f6:90:eb:c7:0a:1d:
32:19:04:ab:86:6b:84:41:4f:81:1c:be:11:0a:90:
4f:c9:a3:d3:cf:b2:16:f1:76:fe:9d:16:c4:33:a2:
23:f9:f6:35:b2:fc:1b:76:95:c4:96:c6:bb:10:68:
fa:bf:ba:31:ea:26:34:f0:ee:5c:c8:1b:f5:7f:72:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:22:6E:A9:29:8C:AA:6A:4A:02:F7:3E:0E:4A:89:B9:1F:3F:C4
X509v3 Authority Key Identifier:
keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/49293CEC8C1711F1B40012BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.58.0/24
IPv6:
2001:43f8:11f0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:0b:f2:ad:98:da:04:d6:a4:9c:05:28:f0:a2:c8:26:10:08:
f5:b4:b4:5c:93:fb:ee:7a:16:df:66:e5:4e:d2:50:9c:1c:17:
e6:0b:52:ba:49:27:44:63:9c:9a:1b:6c:a8:ce:e0:22:c5:39:
aa:78:c7:86:81:78:6c:8f:05:96:80:cf:73:db:d2:05:89:b2:
50:a9:a5:ec:90:30:e4:1b:a5:0f:5b:7b:3f:db:96:1a:fc:66:
bc:d9:ac:48:e9:a0:41:5c:df:e0:3c:75:c3:e1:ce:9e:92:fd:
c5:65:b8:6a:5b:48:2c:ed:63:85:d9:ef:d5:04:88:5c:c8:9f:
5f:76:19:7a:69:23:57:82:9b:34:b5:a2:02:a8:72:3d:69:8a:
a7:5a:e0:d6:1e:54:7f:41:18:bd:0d:26:bd:3b:52:02:20:cb:
52:58:29:a2:3d:92:d5:c9:87:76:bf:a6:b4:89:ed:48:f8:7e:
fa:ce:f2:98:e6:58:eb:a3:c2:c7:6c:60:b4:6e:b7:e8:0c:1a:
db:ef:f4:aa:f3:96:fc:70:f9:51:12:06:ac:f0:a0:d8:b4:ac:
4f:6d:1c:7a:01:f2:d2:58:59:fe:d3:0c:df:2d:84:19:b9:ba:
62:e9:2a:4c:90:20:19:c0:b8:05:87:07:e8:6d:ea:b4:9e:14:
9e:23:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:24 2026 by rpki-client