Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/3CD2137A52A511F188ADFFE9CE1D38B0.roa
File: 3CD2137A52A511F188ADFFE9CE1D38B0.roa (raw, json)
Hash identifier: evhWeXQLaV4zwXSsmlcLuOv+UAoeBUgww23rfwSfng4=
Subject key identifier: B4:B9:0D:9D:0C:6C:D4:E7:DF:9B:DA:AD:9E:8A:36:25:F1:7D:C4:F1
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 046D
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/3CD2137A52A511F188ADFFE9CE1D38B0.roa
Signing time: Mon 18 May 2026 10:35:07 +0000
ROA not before: Mon 18 May 2026 10:35:02 +0000
ROA not after: Tue 18 May 2027 10:35:02 +0000
asID: 37613
IP address blocks: 41.242.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: May 18 10:35:02 2026 GMT
Not After : May 18 10:35:02 2027 GMT
Subject: CN=6a0aeb5b-a6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:e5:0a:95:5c:af:d8:fc:6f:63:96:5c:b8:
ae:54:b8:9b:9a:ee:ba:86:69:2c:6a:61:5f:0e:f3:
ee:80:c4:42:9a:e7:d8:ac:2f:81:69:0e:c2:8f:d0:
fd:cc:bb:46:8c:bc:02:d3:7e:c8:c5:10:fe:7e:57:
97:96:8d:87:4b:28:3b:83:0d:e9:78:9e:70:bf:fa:
65:1c:d2:c5:42:65:80:c8:09:a3:15:ce:c0:df:fd:
fd:33:2c:1c:0b:a0:85:66:56:38:cd:ed:f2:95:43:
ab:d8:1c:a2:ef:c5:a1:b2:be:e6:27:58:e2:1f:63:
c6:f9:c7:ef:89:a3:96:60:09:9a:86:b5:9a:9c:1b:
9c:ef:ec:84:34:55:28:0a:5d:6c:55:2f:87:ad:3c:
88:3b:ed:33:50:e5:d1:5f:cd:14:e7:22:67:a5:d4:
7a:ad:f2:a0:88:50:8e:8f:ce:7e:49:ea:1b:04:ff:
67:b7:88:9e:7e:99:c0:6a:63:c3:ab:88:30:95:71:
a3:a8:b8:2a:10:7e:d8:92:08:8e:9a:6b:60:77:ea:
75:a2:41:f8:43:ed:c6:5d:66:3f:c1:f4:7f:e6:d6:
29:ab:6a:7e:c9:f6:d8:32:2d:52:9b:41:98:44:6f:
96:87:ed:f9:a7:88:99:e0:c1:57:bb:16:e0:00:fb:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:0D:9D:0C:6C:D4:E7:DF:9B:DA:AD:9E:8A:36:25:F1:7D:C4:F1
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/3CD2137A52A511F188ADFFE9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:16:29:a2:d9:6f:e5:d7:7e:31:5f:75:cc:2c:d3:36:f5:87:
a3:1f:15:64:c0:fe:a8:8e:ee:77:54:7a:2f:75:e6:83:d6:cb:
4b:ee:64:7f:ca:40:d3:89:ad:b6:7b:4a:15:2c:b2:c8:bb:9c:
db:4d:f6:8e:29:fa:24:97:c3:27:f4:bf:75:77:4d:7f:86:20:
a8:e8:66:58:a6:2e:6a:1a:2b:a8:40:ad:ac:87:48:96:b2:1b:
81:ac:31:08:ef:9c:6e:09:ac:b8:ce:39:39:3c:25:de:c3:20:
c8:e9:f5:b1:8b:62:78:1d:46:64:cf:1d:d4:0c:dc:6c:76:1a:
34:02:ea:da:f5:03:5e:be:51:b2:12:a9:1c:8f:48:68:b7:d3:
74:17:aa:ef:83:49:37:84:18:a3:2a:34:1d:e3:b3:12:0d:e7:
5d:68:38:c0:3f:f1:c3:14:19:16:77:9c:39:df:02:14:fd:3c:
72:c4:ea:40:4c:29:96:fd:39:c9:71:93:98:d1:91:94:de:f4:
ed:05:73:d4:6b:16:ce:90:d5:55:d6:3c:f6:f3:71:9a:e0:13:
b8:45:af:2f:a7:17:67:1d:e4:41:e8:d5:62:8f:c7:34:26:f7:
c7:7d:17:79:7e:ca:1c:c8:fb:06:b4:23:ed:c2:28:f9:ec:df:
67:66:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:46 2026 by rpki-client