Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C99671D48A3611F19A63F8BCCE1D38B0.roa
File: C99671D48A3611F19A63F8BCCE1D38B0.roa (raw, json)
Hash identifier: 20rqXiNXwP9ZrCk7a7jz+QCg33veM/nJCRRgTgLu9Yo=
Subject key identifier: 4F:D4:30:25:BE:49:FE:4B:A1:A1:5C:81:3A:A1:08:E9:34:7A:39:BD
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09E6
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C99671D48A3611F19A63F8BCCE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:45:34 +0000
ROA not before: Tue 28 Jul 2026 03:45:30 +0000
ROA not after: Wed 31 Aug 2033 03:45:30 +0000
asID: 20011
IP address blocks: 41.135.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534 (0x9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 03:45:30 2026 GMT
Not After : Aug 31 03:45:30 2033 GMT
Subject: CN=6a6825de-86c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:87:86:84:90:49:22:71:26:5b:e3:2d:ff:
5b:14:b2:c1:e4:16:d2:46:0a:64:8f:3c:08:3a:64:
e9:a4:87:00:b3:54:99:18:75:8d:9d:3b:86:f0:f4:
7f:eb:ae:af:67:a5:b4:f4:52:8c:08:44:95:0b:1e:
1f:f4:03:c8:58:26:1c:45:7e:be:2f:07:71:d1:ab:
2c:8d:ad:94:9c:0b:7a:2f:48:83:2d:8e:8f:96:3c:
9d:88:0a:ba:6f:df:44:c5:1c:17:32:f2:ec:7c:b1:
36:bb:8f:7f:07:54:57:90:98:f2:ba:1e:ac:7b:a9:
59:95:b3:c4:b9:5a:ad:8a:84:8e:2c:da:46:55:f6:
2f:01:e6:84:e0:dc:82:f0:8a:76:d5:e4:91:f5:1b:
5c:3d:91:0b:c9:d3:ae:29:3d:9f:25:f1:47:84:57:
3c:53:b6:10:2b:12:37:0a:4f:0e:f2:be:d9:07:35:
d7:04:f2:b8:b5:c1:4d:2a:9f:d3:f9:3a:b3:88:e1:
89:5a:7f:f1:90:b7:5b:7a:2d:67:d2:d6:05:e9:51:
d8:75:b3:e5:37:93:b1:62:04:61:fd:e8:61:bb:05:
b6:79:0f:bc:76:f9:3d:04:ed:85:71:05:1d:01:42:
11:42:33:04:ed:ab:ec:c7:b4:08:0d:3e:f5:b4:78:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D4:30:25:BE:49:FE:4B:A1:A1:5C:81:3A:A1:08:E9:34:7A:39:BD
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C99671D48A3611F19A63F8BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.135.0.0/18
Signature Algorithm: sha256WithRSAEncryption
c6:e1:a6:98:88:c7:bf:4b:a3:3b:3c:57:a7:06:95:d7:d6:5f:
f0:74:05:86:1a:31:b2:8c:6e:23:49:d7:30:b1:35:75:11:e9:
ad:f0:f8:7f:36:cf:df:cd:1f:ad:bf:c2:4c:ee:ad:10:8e:8e:
1d:6c:32:8d:6f:c5:5d:82:bb:94:5d:bf:c9:ca:13:7b:e7:78:
70:33:ef:25:2f:04:81:ce:5e:fa:90:75:7c:81:70:60:35:34:
ff:1d:cb:4e:ad:b6:82:67:4c:e9:53:11:ea:89:6f:52:26:c3:
f0:a9:4f:e7:05:2b:d2:a3:50:32:a1:14:ed:dd:ee:5d:77:82:
66:d2:35:43:ff:8f:49:1d:ac:32:9f:b4:65:b8:f2:32:1c:6d:
1b:d8:11:2c:c4:75:bb:bb:a5:d8:e7:02:45:aa:2f:35:cf:fc:
da:26:c8:e3:0d:26:a6:06:fe:f3:46:07:16:48:c6:6a:90:b1:
d9:74:9e:53:c1:10:c3:50:d5:13:35:c5:b4:dc:2b:57:f4:03:
48:73:9c:05:71:57:fb:1d:22:c5:63:c4:2e:3d:96:af:7d:5e:
fb:66:92:d4:a1:7f:e8:6b:0b:12:48:e9:c9:d7:b4:76:a2:3f:
e8:09:3a:bf:42:a9:bc:21:d3:04:ef:28:4b:b8:f7:60:36:78:
97:39:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:24 2026 by rpki-client