Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/34264AD8164711F1B352B4F1DAE4EC9C.roa
File: 34264AD8164711F1B352B4F1DAE4EC9C.roa (raw, json)
Hash identifier: klCDYvFVBjZ3oiEdBt07KN4j6VYueC0votUF9VvFxWo=
Subject key identifier: ED:F7:23:05:DC:ED:35:7A:D3:C9:C5:4A:00:B4:80:60:5F:B5:D0:9B
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 04B4
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/34264AD8164711F1B352B4F1DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:50:50 +0000
ROA not before: Mon 02 Mar 2026 14:50:46 +0000
ROA not after: Sat 02 Mar 2030 14:50:46 +0000
asID: 33763
IP address blocks: 41.218.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 14:50:46 2026 GMT
Not After : Mar 2 14:50:46 2030 GMT
Subject: CN=69a5a3ca-02aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:c2:fe:18:f8:e7:f5:bc:d7:f2:48:c0:d6:
1f:53:ea:24:bb:ec:ad:41:ec:29:f7:57:f9:ed:9a:
2e:88:73:9e:e7:e1:a9:30:01:d7:83:bf:f9:6b:ac:
fa:05:bb:24:5e:c8:c7:b1:90:7d:32:c7:8f:48:ed:
3f:b4:58:c9:75:f5:0b:a5:11:97:e9:51:64:e0:3e:
4e:2a:04:e4:b3:74:33:f4:fd:82:aa:44:03:41:8e:
b8:03:98:6f:1b:77:e0:d3:db:44:0a:dc:90:e0:13:
43:96:85:e3:9e:d2:c0:0b:cc:75:e3:8d:9b:46:03:
ca:eb:7f:48:e5:c8:3c:a5:a5:8f:c4:e7:04:b4:47:
15:33:8c:36:3e:cf:a7:74:32:ab:97:d6:31:bc:79:
4a:70:00:d2:74:6a:2e:9e:61:ce:45:34:c7:38:9c:
18:43:0c:93:99:3b:bf:12:46:62:96:cd:cd:dd:ce:
79:d6:16:ed:47:14:58:ed:bd:f8:13:64:d2:f2:e0:
ac:f6:58:0c:bb:16:d5:3f:05:a7:cb:29:16:07:78:
41:35:3b:33:7a:06:20:ea:9d:0d:72:10:a8:fa:c2:
16:3e:4b:3a:f3:0f:a9:9c:5d:dc:8e:37:24:39:15:
d1:07:43:76:35:8d:ac:cc:21:ee:c3:9c:12:b9:e5:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:23:05:DC:ED:35:7A:D3:C9:C5:4A:00:B4:80:60:5F:B5:D0:9B
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/34264AD8164711F1B352B4F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.218.112.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:bc:f3:a9:c0:ae:b1:65:f3:4a:bd:6e:cc:88:71:74:f0:4d:
2a:da:b3:1e:a1:45:93:76:1a:e3:c2:df:8f:4f:68:43:23:e2:
dc:42:b3:33:bb:13:ee:a5:41:96:4e:3d:16:32:fa:88:b1:cf:
62:5e:c1:fc:54:73:c7:bf:72:bf:94:39:2b:fc:54:8b:3b:2a:
da:15:67:05:8c:6f:7c:01:a2:31:36:86:dc:01:47:7e:0c:64:
8d:9e:8c:3c:41:15:cc:15:36:50:5a:d1:a3:f7:9d:7b:88:62:
7a:62:1b:f6:b3:c0:d9:8f:40:7b:2a:c3:ae:66:be:6b:ff:5c:
4a:57:38:b5:82:e8:60:0a:58:2b:7e:51:3c:ee:06:75:59:cf:
6a:e0:87:32:a4:bf:de:40:e9:2d:14:d0:17:be:b1:a1:e5:94:
47:81:80:97:fa:b1:75:c3:35:82:22:c0:b4:47:49:74:bf:1b:
5b:fb:83:89:5a:6a:4b:5d:2c:1a:ae:c7:37:d8:a6:04:dc:56:
de:2c:b0:45:1e:bd:ac:88:a8:4d:54:03:ec:1a:65:8d:83:64:
dd:37:e2:85:f2:3c:b2:58:46:ea:aa:74:3f:4f:e4:51:e7:c7:
bf:87:c6:bd:36:17:f2:f3:01:c9:bd:48:b9:b2:10:e7:81:a5:
b5:87:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:50:01 2026 by rpki-client