Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/DEAA31D852A411F19BAFC4E7CE1D38B0.roa
File: DEAA31D852A411F19BAFC4E7CE1D38B0.roa (raw, json)
Hash identifier: NlGJ9Fu2KD7bBdpzwrMNS3dq9S7KYOxVJin74O+cf6Q=
Subject key identifier: 77:AE:6D:95:97:40:5E:05:23:FE:A3:FD:58:9D:05:54:42:EA:D2:76
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 0469
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/DEAA31D852A411F19BAFC4E7CE1D38B0.roa
Signing time: Mon 18 May 2026 10:32:29 +0000
ROA not before: Mon 18 May 2026 10:32:25 +0000
ROA not after: Tue 18 May 2027 10:32:25 +0000
asID: 37613
IP address blocks: 41.242.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: May 18 10:32:25 2026 GMT
Not After : May 18 10:32:25 2027 GMT
Subject: CN=6a0aeabd-df19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:29:64:0b:08:c4:1e:d7:2b:ee:a5:b8:b9:
14:03:14:9f:24:10:d2:78:d8:1b:60:50:2f:11:d2:
cd:26:9e:66:9e:6e:49:96:3c:2a:de:16:ea:ca:16:
90:2d:9c:90:4b:77:ab:e6:ab:30:f0:3b:64:15:57:
9e:b4:cd:53:f8:68:ff:b3:53:3d:0c:52:2c:dc:45:
88:30:87:1d:0d:8f:d0:74:b8:19:ab:d9:13:1f:9b:
1b:52:d6:52:28:5f:63:cf:da:d1:c8:b4:d7:16:ea:
9f:4c:03:8f:09:d4:7d:3b:a9:aa:4e:00:25:35:82:
62:76:ff:76:cf:77:e5:61:ad:f8:dd:42:8f:c1:ea:
2a:ae:d6:16:f4:32:4d:bd:27:1d:db:0a:b2:49:65:
68:57:00:0f:04:d4:b6:44:6c:44:06:9b:32:83:71:
52:69:4f:9e:b5:99:24:b4:21:8b:3e:d4:d8:96:77:
4a:55:7a:79:7d:4e:77:99:70:99:4a:90:40:5d:41:
2f:02:cb:a2:42:33:d3:4e:12:c8:89:3b:6c:19:c7:
34:70:8c:eb:6d:9b:ed:97:1b:66:44:90:dc:cb:a9:
5f:f1:de:0b:45:9e:f6:63:fc:26:bd:88:c1:79:c4:
c2:9f:6d:9b:0d:d9:cf:e7:23:e7:6b:7f:66:cb:55:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AE:6D:95:97:40:5E:05:23:FE:A3:FD:58:9D:05:54:42:EA:D2:76
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/DEAA31D852A411F19BAFC4E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.113.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1b:47:99:05:db:b4:41:9e:a6:de:9c:3f:a0:9b:22:16:5c:
6f:34:7a:30:99:b8:e6:c7:26:d7:f3:2a:a0:aa:dd:d1:81:53:
03:5a:15:62:86:14:85:5b:6d:d3:2d:2d:09:2c:2c:0c:c2:2a:
79:2b:eb:95:ea:28:94:ac:93:e1:2d:57:af:3f:bd:42:8e:86:
be:06:bd:4e:91:4b:c8:6b:e5:d3:a7:ab:bd:bf:15:f9:3a:6b:
d0:08:aa:e4:81:3b:87:cf:7a:60:ce:76:fa:c6:09:de:9c:41:
09:08:27:20:99:b7:c6:ef:ba:7a:cd:5c:3a:e2:38:67:18:1a:
c0:e5:05:3f:e0:24:b2:9d:8b:72:04:a2:8f:ba:03:87:66:ec:
90:58:df:f1:6c:fa:09:dd:00:c0:20:6e:3e:f8:c1:4d:bd:f7:
0c:ab:a9:af:d6:1b:54:15:18:25:b8:08:45:7f:01:85:c9:31:
39:3e:2d:29:2d:f9:83:75:73:46:e6:42:70:5e:b2:29:2d:16:
f2:b8:18:f8:a1:ef:25:be:67:25:1f:91:c5:f5:59:9a:96:78:
3a:48:b9:52:9b:5e:94:ec:86:26:5b:df:4d:98:df:a9:a5:12:
36:62:b7:36:97:f2:21:5f:fb:cf:05:83:01:c2:2d:a9:b2:d6:
97:91:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:09 2026 by rpki-client