Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/79D5DB248A8811F1B84394B5CE1D38B0.roa
File: 79D5DB248A8811F1B84394B5CE1D38B0.roa (raw, json)
Hash identifier: i+zFFZM3X/PUrc8I0v/ziaj271QeHF3brFfaJ6nq4yI=
Subject key identifier: 7D:C5:D8:E0:21:F9:B7:24:E4:87:75:36:C2:48:A4:58:1B:A9:B2:33
Certificate issuer: /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial: 04EF
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/79D5DB248A8811F1B84394B5CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:30:19 +0000
ROA not before: Tue 28 Jul 2026 13:30:15 +0000
ROA not after: Thu 31 Mar 2033 13:30:15 +0000
asID: 37309
IP address blocks: 41.223.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365062AAF, serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Validity
Not Before: Jul 28 13:30:15 2026 GMT
Not After : Mar 31 13:30:15 2033 GMT
Subject: CN=6a68aeeb-782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:cf:00:ac:f5:10:9c:42:39:ac:de:f4:e2:
24:02:96:71:77:f9:55:92:c0:00:e3:ea:8b:ab:af:
c9:09:58:3f:59:ae:05:3f:c7:6f:89:b2:e8:df:6c:
d7:97:42:f9:15:48:7f:4c:30:38:da:0d:c9:f6:45:
3f:ff:37:b2:fc:0a:51:dd:0f:9d:8e:e4:18:8e:b2:
b4:7d:c7:37:a6:2b:f8:be:66:8d:ad:e2:cb:ad:78:
20:8e:a6:ea:60:77:a3:85:3b:d5:36:a2:23:fe:2d:
a4:49:dc:9f:8e:45:62:13:4d:15:e9:0b:57:61:56:
ed:eb:99:33:71:77:5f:70:e9:95:03:5c:41:9d:c5:
7e:0b:27:12:b0:1b:3f:90:60:36:a3:63:22:5d:29:
b7:ab:8a:0b:60:6a:61:72:ac:27:09:9b:df:4b:8e:
56:f7:c9:40:c7:b4:cc:10:6b:c5:37:d5:d7:07:af:
4b:27:33:ea:d5:5d:fa:08:88:7d:72:18:8d:a4:18:
f2:15:9f:63:4f:3c:53:48:f8:d5:c5:26:21:cd:1b:
eb:99:c1:4d:72:c9:f2:86:c3:11:75:2c:16:07:f9:
22:56:b2:e7:9f:ea:21:3b:77:f4:1c:e2:52:d6:39:
12:3a:9f:2b:fb:9e:18:96:26:77:ae:b5:0b:f8:bb:
c4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:D8:E0:21:F9:B7:24:E4:87:75:36:C2:48:A4:58:1B:A9:B2:33
X509v3 Authority Key Identifier:
keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/79D5DB248A8811F1B84394B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.212.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:06:71:03:e7:31:0c:ac:4b:02:59:16:c5:34:a4:50:ac:f1:
62:14:e7:bd:2a:93:cf:b0:5f:9b:fc:80:d5:88:b7:13:b9:f0:
74:13:05:d3:35:3d:67:5b:cf:72:65:67:71:36:a9:7c:1b:55:
ac:11:80:bf:6e:bb:70:cc:01:cf:fd:80:eb:e2:35:97:30:15:
0b:c1:9c:59:e9:ab:1e:c5:00:71:6e:1b:c1:60:e1:bf:50:30:
ce:ac:5a:42:f4:64:ed:76:dc:9e:b8:c7:c5:f6:bb:f1:6e:5f:
ec:b7:f3:9f:1c:21:7f:03:49:f7:c3:58:21:88:15:11:f2:32:
3c:19:93:6e:56:84:d4:d5:63:55:97:60:96:0c:27:1a:3b:80:
b1:19:73:c6:3e:d6:c5:b6:f4:1b:a4:6e:f5:b4:5a:12:89:52:
1d:4f:dc:e5:60:9b:60:52:f7:cb:ed:8f:a9:69:7d:da:e3:a5:
f1:eb:3b:46:a1:37:73:c9:01:93:00:d5:7a:dc:71:e4:cc:cd:
f9:08:57:67:44:dc:ea:7e:26:36:b6:eb:94:ca:54:b9:1f:e8:
59:3b:3e:12:cf:51:5f:dd:a2:87:c8:97:bb:b8:c2:e9:26:29:
ff:48:0f:e2:72:b4:fd:ae:f0:5d:21:7b:e1:d7:fb:46:bf:5b:
fa:71:f2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:14 2026 by rpki-client