Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/B4993864538311F1B53AEFAECE1D38B0.roa
File: B4993864538311F1B53AEFAECE1D38B0.roa (raw, json)
Hash identifier: 3z7Pymhab8EkuTX9K5wP76vuUvu1ud/Qr+5REcwgL4I=
Subject key identifier: 93:33:F4:F3:DA:F6:52:E3:10:8C:25:39:99:CB:53:F1:98:FD:5A:ED
Certificate issuer: /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial: 0452
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/B4993864538311F1B53AEFAECE1D38B0.roa
Signing time: Tue 19 May 2026 13:07:42 +0000
ROA not before: Tue 19 May 2026 13:07:30 +0000
ROA not after: Mon 19 May 2036 13:07:30 +0000
asID: 36963
IP address blocks: 41.74.48.0/20 maxlen: 24
41.77.88.0/21 maxlen: 24
41.138.72.0/21 maxlen: 24
41.190.244.0/22 maxlen: 24
105.235.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106 (0x452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Validity
Not Before: May 19 13:07:30 2026 GMT
Not After : May 19 13:07:30 2036 GMT
Subject: CN=6a0c609d-31a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:5b:7d:91:7f:db:dc:6a:99:fb:3f:d4:27:
0c:a2:ab:e8:7f:9b:3e:45:0f:b2:ac:95:79:de:a7:
73:27:04:5c:f3:ab:f0:71:6e:2a:82:a7:f8:33:50:
0b:0b:5f:77:21:2e:35:f6:aa:64:59:6c:cf:d1:4d:
7e:20:36:c5:f1:f5:1b:7d:e9:93:f3:4f:18:78:03:
10:a9:09:17:63:a6:55:25:5f:84:2d:21:4c:a4:7d:
97:36:2b:25:c7:6e:e1:ec:37:5e:df:d6:8f:a2:9e:
46:fa:12:b9:6e:59:c9:8d:03:3d:f9:7b:23:e4:a2:
dc:32:38:91:cd:32:f8:2a:89:bd:fd:93:6b:d6:8a:
ba:0b:6a:f9:62:b7:51:a9:6e:d1:7c:76:f2:7b:0e:
39:bc:b8:57:9c:1e:b7:1a:75:fc:6e:f6:c7:bb:db:
da:4a:48:e9:2a:93:6a:37:a6:9a:b3:7e:89:64:a9:
9c:7f:ac:66:2b:63:13:c6:ef:de:8e:c6:03:30:47:
69:d0:00:7b:e6:9e:77:23:6a:1a:5a:8b:29:4f:47:
ce:e4:2f:e5:27:bf:13:cb:54:ab:61:2d:21:41:a0:
cf:d0:68:ef:f6:d3:1a:ca:e3:34:c2:c7:fa:0d:c4:
5a:3f:fa:dc:33:a7:bc:d9:99:2d:7e:fa:0b:ad:09:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:F4:F3:DA:F6:52:E3:10:8C:25:39:99:CB:53:F1:98:FD:5A:ED
X509v3 Authority Key Identifier:
keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/B4993864538311F1B53AEFAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.74.48.0/20
41.77.88.0/21
41.138.72.0/21
41.190.244.0/22
105.235.240.0/20
Signature Algorithm: sha256WithRSAEncryption
49:dd:18:e6:6b:69:f2:1b:02:4f:bb:68:d2:db:ee:e4:22:23:
83:2c:23:6b:cd:e5:14:69:16:28:a6:6e:cd:70:d7:05:a4:cb:
0e:10:1c:9d:a9:d9:f0:5b:4b:d0:93:77:4d:4d:33:96:2f:83:
ec:59:67:57:7d:4d:6b:c6:94:62:87:eb:60:60:1b:80:aa:71:
0d:2e:f0:c0:16:4a:e9:ed:d6:79:bd:77:74:3c:39:ca:78:5d:
f8:62:fa:0e:ca:04:65:8d:ea:e1:1d:5b:b7:df:99:94:fa:ab:
21:ac:51:28:3f:77:77:d1:da:1e:b3:2d:f2:29:03:52:cf:08:
ed:8e:d9:88:4a:b2:94:a1:43:dc:e7:88:7d:59:bd:74:c4:d8:
c0:48:a8:81:98:47:f9:3d:bc:45:71:07:c0:1b:b0:4d:43:f6:
af:90:b3:1d:08:2d:dd:b5:1a:aa:89:d9:cf:c1:51:4d:d7:3f:
00:b6:c2:09:86:c9:02:ea:b9:7f:d6:99:b0:7f:47:a0:6e:e4:
e4:de:c9:3f:82:e6:65:7e:fa:fe:f5:b3:67:89:9e:ca:b8:59:
86:60:60:f2:d0:be:9c:94:b7:5a:33:02:01:fc:99:d9:6f:88:
7b:3b:fc:b3:37:aa:ac:1f:c7:d4:e9:2c:d8:d8:6d:5c:9a:32:
52:83:5a:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:35 2026 by rpki-client