Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/0C01B516164611F185CEA9E9DAE4EC9C.roa
File: 0C01B516164611F185CEA9E9DAE4EC9C.roa (raw, json)
Hash identifier: MmsGyXA8xUkCHxnXraWAox4Zhvs8Iq+PCNsjK9YBGY8=
Subject key identifier: 1B:15:15:2B:8B:89:62:B9:62:42:68:C4:B9:EA:E2:24:5A:B7:C3:C7
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 04B2
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/0C01B516164611F185CEA9E9DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:42:33 +0000
ROA not before: Mon 02 Mar 2026 14:42:29 +0000
ROA not after: Sat 02 Mar 2030 14:42:29 +0000
asID: 33763
IP address blocks: 41.218.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1202 (0x4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 14:42:29 2026 GMT
Not After : Mar 2 14:42:29 2030 GMT
Subject: CN=69a5a1d9-e9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:6b:cb:81:25:68:6b:da:ff:04:07:a8:cc:
6b:99:56:54:8b:e4:c4:5a:23:cf:16:cf:53:33:02:
cb:43:ee:da:1d:9e:52:8e:dc:92:71:9a:96:5e:7e:
ba:1c:a9:09:07:9f:07:72:19:38:17:f6:46:9a:9d:
23:7a:22:a3:29:ff:eb:9e:37:b6:d8:34:be:85:e4:
7e:29:4f:ff:81:f5:33:6e:e8:31:0c:1b:bf:ce:2f:
97:13:d6:73:61:9d:80:f5:5b:99:0b:0d:8d:e1:d8:
20:49:cb:5e:07:e1:20:76:b2:19:a6:1e:38:00:09:
54:56:b8:95:c4:68:6e:e6:f7:19:c5:25:ee:7c:bd:
1d:47:6d:19:23:a7:1b:95:1b:a6:23:f1:0a:c0:33:
01:44:8f:55:8e:48:96:a5:3a:f3:5b:83:1a:33:ca:
06:ba:a8:a9:8b:bb:b9:7d:f1:af:67:e1:13:cd:b2:
79:95:d3:8f:c8:c4:ce:28:52:62:06:a6:35:64:db:
b5:fa:a7:37:c4:e3:aa:ae:41:ac:da:e9:b8:fc:62:
f3:8b:5c:d8:bb:d9:0a:72:98:89:4e:6f:72:e4:51:
e7:35:9d:bb:99:a0:80:b6:af:5e:24:76:f3:d4:74:
1f:a5:de:55:1f:03:43:47:24:d1:2d:0d:6c:91:74:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:15:2B:8B:89:62:B9:62:42:68:C4:B9:EA:E2:24:5A:B7:C3:C7
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/0C01B516164611F185CEA9E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.218.112.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:b8:af:6e:4b:50:65:a0:56:fc:d8:94:67:0f:c2:5c:dc:89:
32:03:c8:58:4c:d0:74:90:ff:6d:5b:dd:5f:a4:31:bd:18:e9:
9d:df:08:2d:a1:2d:bc:1d:8a:eb:fd:c4:32:83:8e:54:ec:b3:
bb:e0:9d:bb:0c:c1:14:21:c3:e1:b9:df:4d:3b:aa:59:0d:da:
0c:dd:d3:ef:07:3e:85:be:54:97:b9:87:b7:f9:c5:ba:ff:03:
d0:e0:b0:70:7e:2d:b3:67:b2:3e:88:73:4a:f1:36:3b:3f:1a:
cd:d8:7f:31:1d:91:67:6d:30:b4:f3:b1:5d:c0:51:a3:18:6a:
32:4c:99:78:c8:ac:47:6d:c1:ff:25:70:2c:5c:43:68:38:e3:
07:83:6e:4e:50:97:cf:dc:e2:63:72:28:c9:25:6c:1a:d1:21:
55:1a:ce:5c:d2:58:5d:af:86:b5:d6:64:06:2f:02:0b:20:11:
ae:b3:b5:d8:be:e8:f7:f1:27:d5:e9:db:84:8f:c9:92:c3:ee:
c5:24:d1:28:40:3a:3d:f4:c5:ae:51:53:e0:97:c5:b6:9b:c0:
42:38:76:af:d3:07:20:b8:09:54:19:f7:fb:e8:6c:bb:e6:2f:
b0:2e:91:74:9a:8c:ac:71:12:84:91:f0:c4:42:60:96:9a:d2:
91:05:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:23 2026 by rpki-client