Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/9CA81DC2164511F1A1815FE7DAE4EC9C.roa
File: 9CA81DC2164511F1A1815FE7DAE4EC9C.roa (raw, json)
Hash identifier: Sb/v0PBhIkOqNzHtr0zcsQuWwyO6uld2vdtueV+uHWo=
Subject key identifier: 59:42:1D:84:91:DD:9E:E2:E2:7E:04:48:98:EA:39:11:56:2E:43:9D
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 04AE
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/9CA81DC2164511F1A1815FE7DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 14:39:26 +0000
ROA not before: Mon 02 Mar 2026 14:39:22 +0000
ROA not after: Sat 02 Mar 2030 14:39:22 +0000
asID: 33763
IP address blocks: 41.218.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 14:39:22 2026 GMT
Not After : Mar 2 14:39:22 2030 GMT
Subject: CN=69a5a11e-aff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:67:4f:6f:a4:31:02:07:32:3b:8f:76:d4:
ab:12:68:47:b1:8a:15:3b:00:d5:66:9c:95:a6:75:
58:a8:9a:46:4c:2a:e7:63:39:95:07:d3:1a:ac:35:
d3:08:b4:cf:5e:2c:9c:f3:0b:d2:05:28:43:57:5c:
48:e5:c5:21:a5:9d:79:7d:e3:69:ca:b5:f6:56:a4:
50:fb:d8:06:a3:cf:a2:83:75:17:e1:e8:40:30:84:
4c:9e:52:e9:b8:02:c3:a9:a2:19:c1:75:a1:8a:0b:
5d:47:ca:a3:2a:b7:41:bf:a2:8b:87:47:43:23:9d:
5c:38:4b:53:5c:20:ce:ca:ee:7a:12:3a:5b:ff:cf:
22:2d:a2:31:3f:bd:e8:58:87:85:c0:b7:e1:1d:7e:
cc:ec:06:c6:af:66:bb:78:de:b7:5b:18:af:cb:46:
50:4e:e8:f0:10:dd:3f:5b:d9:fa:7c:3b:c8:b0:be:
b6:b5:40:93:b6:6b:c8:28:26:92:fe:95:f1:71:95:
22:98:ed:1a:00:3c:a0:98:df:2e:4d:62:ba:7e:7b:
a9:ce:e1:8f:17:7a:69:e2:11:90:24:7d:34:50:04:
c0:b0:22:63:19:72:6d:47:d2:21:d9:66:c3:58:12:
22:58:ae:2d:76:e2:ee:d0:ab:44:8a:94:eb:4b:64:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:1D:84:91:DD:9E:E2:E2:7E:04:48:98:EA:39:11:56:2E:43:9D
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/9CA81DC2164511F1A1815FE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.218.64.0/19
Signature Algorithm: sha256WithRSAEncryption
33:64:00:7a:58:06:d9:4f:55:a6:39:3e:df:8d:03:78:79:30:
47:68:43:51:de:34:37:ff:ae:fa:90:2f:26:1a:94:31:52:1e:
33:e2:fa:bd:42:19:a2:c1:20:49:94:47:da:0e:6c:49:7b:5b:
b9:db:d4:78:75:7f:41:66:41:80:96:3d:05:c2:19:4b:e0:b5:
a9:c4:ae:1a:a0:83:7c:07:51:5f:98:a3:66:39:f9:68:90:6b:
49:ef:30:17:c4:01:02:f5:28:70:b6:f2:d2:81:97:89:75:6e:
74:52:91:42:a2:78:c5:66:b2:e6:e3:55:fe:5f:e6:c4:8c:7e:
3b:e8:4f:ae:82:88:17:2b:6d:bd:91:87:f6:1a:1d:37:54:ee:
ee:6e:cf:14:76:b2:0b:05:75:2a:a7:39:90:ca:df:3a:31:83:
ff:bf:05:77:f8:a1:8f:a2:fd:71:00:e1:90:0d:c3:ac:bd:fb:
d0:cc:0b:6f:46:f9:89:49:b2:65:3c:62:9a:0c:34:96:e2:b8:
89:c4:37:7f:85:bb:fa:d8:ca:3d:df:df:f8:d7:69:ac:db:9a:
0a:16:d6:c6:4b:87:59:82:d8:4c:df:4f:91:e0:76:e3:89:41:
47:45:f2:77:87:ba:88:e7:0e:58:d3:38:78:0f:6b:d1:35:ba:
a3:e0:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:49:21 2026 by rpki-client