Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/3A47BBAA8A7211F1B70D4BAFCE1D38B0.roa
File: 3A47BBAA8A7211F1B70D4BAFCE1D38B0.roa (raw, json)
Hash identifier: 9YxCC6XFigvI59ReTL1/gq9EKcFYu9AFVIy5WOLkals=
Subject key identifier: E3:80:5C:4C:87:E5:15:9B:25:C6:B5:F9:87:72:49:48:C6:08:78:5C
Certificate issuer: /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial: 0614
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/3A47BBAA8A7211F1B70D4BAFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 10:51:04 +0000
ROA not before: Tue 28 Jul 2026 10:51:00 +0000
ROA not after: Wed 29 Jan 2042 10:51:00 +0000
asID: 37035
IP address blocks: 41.73.192.0/19 maxlen: 24
41.204.128.0/19 maxlen: 24
197.221.192.0/19 maxlen: 24
2c0f:f0c0::/31 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1556 (0x614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Validity
Not Before: Jul 28 10:51:00 2026 GMT
Not After : Jan 29 10:51:00 2042 GMT
Subject: CN=6a688998-27fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:01:0b:aa:d0:38:ec:ed:61:88:d3:46:1a:
7e:af:b5:4f:2c:e0:02:2a:52:2a:3e:99:d2:b4:3e:
05:5d:7a:86:2d:a2:46:9d:06:31:67:14:4a:4a:41:
ac:7a:0c:b8:dc:25:82:1a:4f:c1:66:6e:c0:74:c9:
59:76:fb:d0:6a:58:99:ba:bd:9f:0b:ff:72:d3:8e:
03:6b:55:a4:95:82:f5:57:b1:29:12:e2:a4:f7:5f:
98:99:c9:0f:90:5d:76:83:a0:d4:02:c3:7d:b2:44:
22:f0:65:cb:03:4c:4d:f9:95:f3:a1:36:ec:36:b9:
43:98:01:d6:d0:2c:53:8b:55:a2:f6:ae:5c:a8:01:
c8:60:4b:99:70:92:23:0f:bc:a0:1a:2d:a3:6f:51:
c6:32:28:e4:b4:f0:30:6f:f8:0e:1d:cc:d6:5c:50:
50:17:73:ca:89:50:a6:d9:e3:27:5d:4d:c6:52:5c:
09:e6:ce:a5:f1:fc:72:de:90:a3:e7:bc:e2:0e:18:
15:7b:1d:b3:0a:de:03:77:33:83:99:d3:70:f2:52:
85:af:46:77:01:c5:68:5f:d2:38:4a:62:51:8f:73:
84:22:d3:3d:31:cd:d8:2f:cf:b5:b8:41:4f:af:e7:
11:c9:80:15:6a:e2:fd:4f:06:37:64:11:2b:7f:27:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:80:5C:4C:87:E5:15:9B:25:C6:B5:F9:87:72:49:48:C6:08:78:5C
X509v3 Authority Key Identifier:
keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/3A47BBAA8A7211F1B70D4BAFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.192.0/19
41.204.128.0/19
197.221.192.0/19
IPv6:
2c0f:f0c0::/31
Signature Algorithm: sha256WithRSAEncryption
07:c7:e2:11:e4:19:aa:49:f5:be:35:49:52:a3:ab:75:24:04:
dc:8e:ce:c2:33:b9:6e:62:41:11:7f:28:a2:8a:91:fa:39:8c:
ed:38:a6:79:11:79:f1:df:b9:50:32:41:c8:f5:06:3c:18:8c:
8e:b7:46:c4:3c:26:40:d1:27:73:70:57:48:b4:aa:16:e2:52:
5d:9f:a6:df:94:e9:ad:67:02:e6:08:b0:03:09:dd:b6:0d:f8:
64:54:0a:21:68:7e:d8:a9:8f:b9:3d:ee:03:77:7b:47:11:ee:
e8:89:9c:05:b7:b9:58:89:ac:c0:48:bd:d0:75:40:1f:ed:22:
aa:05:6a:26:74:8f:dd:43:8e:ba:1b:23:23:9d:37:d1:24:a3:
53:7d:67:81:22:94:4f:d0:71:84:f6:15:9d:ae:9f:01:d1:63:
12:b5:70:de:0f:ab:1f:75:16:2c:22:b9:6f:f1:81:10:24:10:
08:7d:e9:86:0e:ef:8e:a2:1e:0b:d2:2e:e9:de:45:2b:de:67:
cc:06:2b:0c:5d:6a:e1:dc:aa:c6:90:3d:c2:29:c9:d3:72:a2:
dd:a3:ab:eb:bb:9b:77:6a:fd:56:3c:01:6b:bc:d9:d3:a4:72:
8e:0a:91:4f:b5:dc:64:4f:d4:3b:0a:29:0e:63:67:3b:f6:20:
b1:49:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:28 2026 by rpki-client