Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/31612164538311F182AFB0ACCE1D38B0.roa
File: 31612164538311F182AFB0ACCE1D38B0.roa (raw, json)
Hash identifier: ymWXf0yxlrh1Y4pYFCcg1REPoB+gKEIeP6+qgKhj12k=
Subject key identifier: 42:5A:B3:D3:89:41:AF:D8:70:0D:CC:63:91:62:8F:3B:D0:EE:CC:1F
Certificate issuer: /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial: 0450
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/31612164538311F182AFB0ACCE1D38B0.roa
Signing time: Tue 19 May 2026 13:03:58 +0000
ROA not before: Tue 19 May 2026 13:03:36 +0000
ROA not after: Mon 19 May 2036 13:03:36 +0000
asID: 36963
IP address blocks: 41.223.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Validity
Not Before: May 19 13:03:36 2026 GMT
Not After : May 19 13:03:36 2036 GMT
Subject: CN=6a0c5fbe-a285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:3c:0d:d9:4c:46:54:6d:24:e1:16:31:8c:
9b:43:4b:f4:47:79:92:8b:05:38:bd:93:97:e2:26:
85:f2:01:a5:cd:b3:22:df:35:6c:c4:ec:34:88:56:
c2:cd:a8:16:a4:04:41:67:13:d2:9a:ba:e8:bf:2c:
c8:3c:c2:3b:5a:22:ee:56:b7:31:24:06:44:fe:94:
e0:d6:87:40:d6:9e:dd:e9:a8:4f:d8:2c:88:8e:92:
aa:e5:08:bd:04:39:14:77:e3:65:d8:cc:b9:75:ac:
94:b5:72:38:b1:09:78:e9:e6:2b:2d:0a:69:bd:9d:
77:ba:33:52:19:2c:21:1a:ba:d3:d4:30:cb:ca:37:
05:99:8a:08:d0:29:95:a1:d1:7b:b2:5e:bd:8e:91:
8b:5b:f8:87:9e:57:f7:86:4f:4f:f0:89:1d:6e:86:
d1:f4:50:c1:92:0b:67:a9:be:56:0b:00:99:f1:ad:
31:17:ff:00:7b:ff:a8:49:c3:ab:97:b8:d2:a9:51:
f9:e8:aa:ac:d5:bd:1a:d2:ed:1e:8f:80:3b:09:c7:
81:1e:8d:6a:cb:34:96:5c:7e:a0:c1:9d:e4:ea:87:
19:41:ef:5a:61:21:74:8f:09:a1:e4:b7:4d:1a:0e:
7b:0f:2c:c1:f2:b3:66:9b:bd:35:be:95:42:7f:b0:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5A:B3:D3:89:41:AF:D8:70:0D:CC:63:91:62:8F:3B:D0:EE:CC:1F
X509v3 Authority Key Identifier:
keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/31612164538311F182AFB0ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:7b:a2:33:0c:88:c6:e7:66:da:b8:e5:5e:15:38:6b:65:84:
57:64:6a:50:4d:06:78:62:bb:05:a0:fc:3d:b5:b3:02:3a:d9:
c3:04:cf:d3:9f:58:80:de:5a:56:ad:f8:43:06:5e:cc:64:d0:
9e:60:34:50:83:70:c0:f3:dc:63:69:52:0b:84:e1:86:58:e5:
50:4f:4a:e4:1f:5e:ab:65:b9:7e:13:ff:f5:21:c9:eb:f6:a0:
36:dc:94:fc:db:5f:20:81:fa:4b:8c:c4:4a:8f:80:6a:e8:79:
ff:d0:17:14:07:c0:60:f9:72:49:91:4f:17:6d:52:ee:fb:47:
3e:a2:cc:af:a1:08:b7:ee:f1:4e:77:9a:98:a6:e8:b2:3e:84:
c5:8c:79:c0:90:32:e2:ec:f5:ed:f1:7b:b5:94:0e:c0:39:e1:
25:b3:7d:49:09:48:eb:9f:85:8a:9c:5c:06:f5:1a:a8:c7:66:
db:d0:be:51:24:09:e3:f0:2f:76:c3:07:5e:18:06:ca:bc:6a:
1a:f9:3d:e4:85:0e:84:97:c5:07:ac:44:c0:50:c5:91:cf:53:
f0:cb:ce:75:46:22:69:60:23:c6:39:4d:39:f7:98:38:2d:20:
26:14:02:2c:d2:12:09:5f:c6:9e:94:9f:81:d4:d7:b6:bb:f7:
8f:37:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:18 2026 by rpki-client