Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/64891BAA8A6A11F1A43E61FECE1D38B0.roa
File: 64891BAA8A6A11F1A43E61FECE1D38B0.roa (raw, json)
Hash identifier: rtbCFtRZtdrpknNXXJ3IqfDjnT/xuEJp0qcs+D+8s8A=
Subject key identifier: 4D:82:85:CD:94:98:56:2A:A6:70:48:46:77:4F:44:0E:22:B0:5A:D8
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 0802
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/64891BAA8A6A11F1A43E61FECE1D38B0.roa
Signing time: Tue 28 Jul 2026 09:54:59 +0000
ROA not before: Tue 28 Jul 2026 09:54:54 +0000
ROA not after: Wed 31 Dec 2036 09:54:54 +0000
asID: 36994
IP address blocks: 41.21.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 28 09:54:54 2026 GMT
Not After : Dec 31 09:54:54 2036 GMT
Subject: CN=6a687c72-c977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:2e:ef:5e:ce:51:82:0c:b4:0e:cd:30:5e:
55:e7:c4:ee:f8:e3:ce:4b:7f:fd:23:a1:f1:66:f0:
a2:c3:ae:72:d7:17:4e:d3:be:ba:08:9c:de:cc:8c:
1c:45:1f:89:b0:a1:69:79:2a:e4:9d:6c:31:d4:07:
f9:ed:f4:99:4b:25:51:c9:35:f7:b7:6c:1e:dc:f2:
ac:e2:bc:5d:ea:1f:49:29:71:e3:30:56:83:26:6c:
e5:10:30:a0:b4:50:af:02:43:2f:4b:65:b3:4c:41:
c1:ab:a4:d3:cc:c4:a4:f5:cc:2b:2f:1a:9c:f7:3b:
65:36:4b:2b:ba:b5:1e:4d:e9:b8:27:22:ae:4e:e8:
aa:00:98:62:7d:9f:44:38:81:3b:40:56:6e:37:0e:
b0:66:da:3e:0d:18:04:f3:c5:e6:ec:51:a0:78:e3:
6b:a8:bb:4d:d2:8a:77:c6:77:f6:5f:71:db:d7:16:
d7:0e:5b:bc:b6:12:44:90:3d:10:a9:7e:18:da:b3:
63:e4:8e:26:f1:83:9c:9b:26:f2:f0:ec:87:21:39:
11:ee:02:48:4d:0b:d4:2d:dd:a6:80:b2:02:19:ba:
ee:df:a2:9e:5b:63:a4:08:2d:c3:10:4b:14:54:cb:
8f:22:bf:af:ad:b3:c2:51:c3:a2:a7:b5:ce:13:a6:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:85:CD:94:98:56:2A:A6:70:48:46:77:4F:44:0E:22:B0:5A:D8
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/64891BAA8A6A11F1A43E61FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.21.128.0/17
Signature Algorithm: sha256WithRSAEncryption
38:08:1f:cc:93:e3:98:68:89:f1:8a:59:a5:b8:90:c2:59:94:
44:19:63:f7:9f:35:43:0d:3d:02:54:71:e1:a3:f3:2b:38:f3:
73:ed:0a:3e:fa:c9:61:a0:5b:12:b9:4f:1f:4d:29:fc:3c:d3:
15:54:48:be:03:2e:64:a0:09:96:a9:42:23:10:8b:03:04:c2:
b5:47:71:ae:66:b8:c6:0a:d1:ef:93:63:ca:ac:6e:4d:49:16:
81:16:a8:09:06:28:12:56:98:4b:b9:c5:dc:3a:38:44:0c:3e:
93:2f:f0:74:80:1f:7f:9d:b2:27:c9:dc:bf:bd:da:2f:64:5a:
69:0c:d9:d8:13:42:b4:88:36:08:6c:79:02:d5:75:45:33:80:
c6:19:04:a5:9e:31:06:22:bb:6f:94:70:52:95:b8:b5:41:49:
4d:7b:a3:b5:8b:34:69:74:af:35:0f:db:c0:8d:15:85:1c:05:
e5:0e:2f:fe:a5:0c:c1:e4:00:36:bd:70:0d:c9:19:e8:7f:cb:
a1:20:ed:b4:c5:d6:d5:94:47:0d:81:5f:7b:7a:55:b5:05:2f:
14:cd:e9:5d:a6:d1:6d:3e:70:ce:93:85:4a:a9:ba:8e:9d:a8:
05:81:b5:ab:fb:b8:83:5c:80:ea:c6:fe:71:57:a4:8e:23:19:
cf:17:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:02:50 2026 by rpki-client