Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/8FC2BDBE057A11F18F7783C4DAE4EC9C.roa
File: 8FC2BDBE057A11F18F7783C4DAE4EC9C.roa (raw, json)
Hash identifier: AQrOFPjFaqguMhUl4BS2Zhq/YyRQNkfhZPPG0wTy2FY=
Subject key identifier: F1:78:54:CC:15:9B:4D:2E:DB:68:C9:E6:33:CF:B7:8F:BE:1D:A8:6B
Certificate issuer: /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial: 027B
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/8FC2BDBE057A11F18F7783C4DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 05:45:39 +0000
ROA not before: Mon 09 Feb 2026 05:45:33 +0000
ROA not after: Fri 29 Feb 2036 05:45:33 +0000
asID: 37183
IP address blocks: 41.85.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Validity
Not Before: Feb 9 05:45:33 2026 GMT
Not After : Feb 29 05:45:33 2036 GMT
Subject: CN=69897482-9bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:6f:ee:1e:c3:23:79:5e:af:80:34:02:97:
42:50:ad:5d:25:56:d9:d7:57:4f:85:8d:82:fc:d2:
e0:a5:91:e3:44:f5:db:a0:d8:cd:c3:fb:bf:a0:bb:
6f:77:98:e3:87:62:aa:59:8e:b9:25:a6:fc:d6:77:
c6:7d:cc:4c:6f:0a:b2:77:ac:42:8e:65:1a:61:fa:
1d:43:e6:59:ad:84:d4:00:b6:71:7c:fa:cb:ae:5d:
55:87:19:a5:fa:00:04:81:26:e9:6e:ed:46:f7:85:
47:2f:d4:9d:26:f9:9e:66:b2:98:77:40:33:24:15:
e8:8d:11:5e:da:7b:12:3b:6a:d4:22:a4:7d:8f:6c:
ea:d9:0d:41:7d:74:69:d6:2c:62:1f:bc:16:10:dc:
de:30:0a:58:08:04:ef:c1:83:50:2d:05:01:f2:6a:
84:17:b0:6b:f9:3c:c9:55:db:1b:6c:e4:dd:b1:6e:
63:7e:28:62:83:52:40:ed:2f:a9:56:31:5d:a0:cd:
5f:a2:3c:94:98:64:33:d8:b9:02:18:da:72:01:da:
6e:17:d6:79:63:7e:c1:6c:3d:ed:cf:f7:d1:24:fa:
4e:8f:bc:82:79:29:b9:4e:e8:72:d0:72:38:b6:eb:
24:eb:64:d4:a2:74:bc:86:f2:35:43:2b:df:c5:1e:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:54:CC:15:9B:4D:2E:DB:68:C9:E6:33:CF:B7:8F:BE:1D:A8:6B
X509v3 Authority Key Identifier:
keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/8FC2BDBE057A11F18F7783C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.192.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:a8:bf:eb:6d:28:dd:09:31:e2:2f:8a:46:1e:e7:fb:3d:51:
50:73:ea:84:1a:33:1f:69:f8:0c:13:71:8f:5a:27:45:29:df:
70:77:20:41:e7:19:ef:03:e2:54:9f:72:e3:bf:af:15:0b:83:
2c:48:7c:fa:98:59:dd:d4:2b:48:77:2b:6a:bb:b0:7a:d5:9c:
5b:60:fe:b9:18:69:4d:10:6f:ea:cd:03:41:ae:69:6e:d7:a2:
91:49:3e:6c:ab:43:67:0d:6a:f5:eb:0e:65:a4:7f:74:6c:d0:
09:76:87:cb:55:02:c2:8f:a3:49:e5:37:f1:16:e1:2c:fc:34:
a3:71:48:4a:7e:56:9e:49:f1:ea:82:c5:53:6e:8c:ba:bb:bd:
23:67:6d:49:b3:a9:f4:87:1b:4d:a7:64:7b:7e:1b:5a:ae:6a:
a7:55:31:ba:e0:d8:c3:36:14:e0:81:e6:df:32:3f:2a:77:5f:
a7:95:e5:00:8e:f7:ca:a0:73:d7:ee:73:ea:ad:c2:0d:ab:06:
1e:16:c0:40:37:7c:f8:78:77:df:75:93:fd:3d:73:1c:b0:0f:
61:16:d0:60:63:5f:3e:98:98:e6:05:63:c9:fc:59:2e:34:28:
2f:9e:85:21:ca:b1:87:47:94:67:14:23:d0:92:eb:e5:dd:1a:
8b:a2:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:09:24 2026 by rpki-client