Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/3AD17B4852A411F18433B2E3CE1D38B0.roa
File: 3AD17B4852A411F18433B2E3CE1D38B0.roa (raw, json)
Hash identifier: oaElfRftqLvCyVv+pEr2pAOJ1u5zOSHWd0gK4S3VFZI=
Subject key identifier: 66:EC:F1:3B:28:AC:7A:A8:D1:43:B5:B4:14:FB:9B:A2:D4:00:A0:B0
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 0465
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/3AD17B4852A411F18433B2E3CE1D38B0.roa
Signing time: Mon 18 May 2026 10:27:54 +0000
ROA not before: Mon 18 May 2026 10:27:50 +0000
ROA not after: Mon 17 May 2027 10:27:50 +0000
asID: 37613
IP address blocks: 41.242.112.0/22 maxlen: 22
2c0f:f170::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: May 18 10:27:50 2026 GMT
Not After : May 17 10:27:50 2027 GMT
Subject: CN=6a0ae9aa-6f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:94:58:74:2d:96:e0:fd:39:13:69:5f:72:
53:95:71:b7:ab:13:cc:22:f4:a3:b2:e0:4e:84:a7:
a4:8a:34:e9:ea:f2:12:32:3e:3b:58:be:d9:d2:1b:
d9:15:4f:d9:38:8d:c7:a8:24:6c:ed:ab:b2:5c:64:
a5:9e:92:bd:55:dd:fd:ea:5e:b4:af:fc:f4:4c:e1:
de:f8:5b:6f:1f:98:16:fd:32:ab:94:26:da:0b:99:
ba:c2:ca:9d:cf:a1:23:ff:16:87:2f:4a:57:fd:8e:
b5:00:e2:13:c8:8e:c8:ee:63:6e:6d:f9:66:7b:63:
66:f5:19:19:a0:a8:a0:47:c5:5b:e6:08:76:96:a4:
3f:5f:b9:2d:85:e2:08:5e:e9:08:c8:0d:ed:17:b2:
d8:72:6f:dd:0a:97:e3:e7:dc:84:02:24:06:b5:f5:
60:1d:d1:a8:68:a6:e1:fc:0b:90:dc:da:1e:5c:50:
40:a5:79:a4:26:b2:d7:6e:09:a0:98:18:f9:77:29:
33:98:14:05:66:ca:6b:7d:d2:20:b9:f7:97:0f:c3:
de:78:16:1a:dd:ad:f2:8b:29:09:ba:d4:0d:5e:44:
18:50:a8:84:d4:e0:63:15:30:af:c5:8f:da:de:80:
49:57:11:34:f9:ff:8f:e5:1c:05:03:eb:5c:4b:8a:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EC:F1:3B:28:AC:7A:A8:D1:43:B5:B4:14:FB:9B:A2:D4:00:A0:B0
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/3AD17B4852A411F18433B2E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.112.0/22
IPv6:
2c0f:f170::/32
Signature Algorithm: sha256WithRSAEncryption
c2:76:69:7a:69:74:7e:c7:0b:43:d6:48:77:bb:f0:f6:12:ab:
12:8b:94:d3:07:2d:a8:43:8e:c6:ce:a6:b7:38:c7:f0:40:d0:
9a:7c:49:88:fd:ea:48:61:f5:78:79:46:b9:79:2b:63:00:54:
6f:87:dd:55:8e:53:8d:0f:78:4d:91:f4:40:7b:00:af:b0:de:
f0:91:33:7c:ce:e3:52:c8:02:4b:c9:11:b3:b9:ba:8b:70:7d:
12:67:aa:63:2b:be:21:b8:54:12:b4:1b:e3:e4:ef:11:5c:7b:
66:b6:15:a5:7e:92:0f:a1:57:f2:95:fe:97:7b:ed:c1:0c:e4:
03:b2:de:0b:07:34:60:5d:51:ce:92:2a:83:9a:cc:9e:5a:11:
f4:f1:20:58:77:52:b8:28:9f:b1:49:61:29:30:01:69:94:83:
b3:2c:63:a0:a7:38:12:c6:f2:d5:7f:4c:d0:95:4a:a6:85:96:
aa:3b:37:de:b1:b5:66:f9:e8:44:cb:30:57:2a:d9:c8:b6:7a:
47:1c:10:4a:f4:06:f0:62:c0:81:57:b9:98:ef:2d:a1:c9:07:
42:88:15:de:da:ed:14:db:8b:ed:a6:35:2f:d6:48:50:9d:65:
4c:66:e3:03:13:2e:5b:89:7b:cf:3a:e3:e8:ae:5b:85:25:aa:
58:d4:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:41 2026 by rpki-client