Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/2D333D645BF511F1974E2DA2CE1D38B0.roa
File: 2D333D645BF511F1974E2DA2CE1D38B0.roa (raw, json)
Hash identifier: 6v1eUj/bBe7igfHdYJsT89YRkmmz6+22RdK5qlS8qXk=
Subject key identifier: 06:E8:BC:67:A0:AE:49:DF:33:C7:24:27:02:45:57:53:97:77:FE:C3
Certificate issuer: /CN=F36BB12FAF/serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
Certificate serial: 0243
Authority key identifier: 17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/2D333D645BF511F1974E2DA2CE1D38B0.roa
Signing time: Sat 30 May 2026 07:00:01 +0000
ROA not before: Sat 30 May 2026 06:59:56 +0000
ROA not after: Sat 31 May 2036 06:59:56 +0000
asID: 37012
IP address blocks: 41.222.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 04:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BB12FAF, serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
Validity
Not Before: May 30 06:59:56 2026 GMT
Not After : May 31 06:59:56 2036 GMT
Subject: CN=6a1a8af1-0488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:6d:92:da:54:a9:35:6e:06:64:63:0c:3f:
4c:b5:a5:75:78:b5:5d:fc:e7:44:0e:f3:85:f5:84:
83:c8:3b:90:4b:1c:8e:eb:70:39:0f:a6:1c:2f:6a:
89:e3:ab:b5:c3:e1:a4:bc:d4:a8:03:28:50:e3:21:
43:12:96:18:d7:81:cc:3b:6e:73:ed:d1:5d:ad:c0:
53:22:15:e1:cb:f8:fb:5a:a3:85:ee:85:5d:1c:5d:
c5:3a:35:09:5c:3d:e2:8e:f0:7c:39:e6:96:e8:d0:
f3:32:aa:3c:36:7e:be:9a:21:b9:19:98:03:7e:67:
6c:65:bb:f9:08:15:6f:38:19:b0:c6:92:1b:84:0c:
54:13:be:1e:17:29:da:d9:b5:48:89:f6:e7:25:a3:
04:d8:f5:03:3c:99:e7:3e:54:b6:2b:43:93:d6:0b:
c2:d1:c4:5b:4d:a0:37:a5:b2:6a:16:5f:96:fa:67:
c3:a7:e8:83:2f:de:25:ad:86:a9:70:91:37:fa:53:
c4:c2:27:b9:72:8b:d9:69:09:cd:70:15:a1:67:37:
49:cc:54:3f:1a:44:69:03:1a:59:13:0f:ee:73:ae:
5f:83:ec:aa:42:33:35:2b:94:7c:2f:ee:0c:07:95:
ed:49:20:b5:f0:62:5a:27:62:01:36:05:08:8e:2f:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:BC:67:A0:AE:49:DF:33:C7:24:27:02:45:57:53:97:77:FE:C3
X509v3 Authority Key Identifier:
keyid:17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/2D333D645BF511F1974E2DA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.232.0/22
Signature Algorithm: sha256WithRSAEncryption
22:0b:a5:39:85:ce:97:ab:73:f5:3e:43:3f:82:5c:12:17:8d:
28:80:c1:db:04:0d:d6:35:e0:d5:9c:45:ef:67:f7:0b:90:52:
d1:88:21:44:c8:1c:c1:a0:98:dc:2d:18:e3:a2:cc:09:45:5e:
79:fa:da:91:5b:d7:e5:56:c7:44:ed:a2:b9:7f:3a:c5:d0:f4:
5d:e9:38:97:ca:44:b7:9c:69:bb:b2:ee:d4:29:d8:8b:4c:6c:
b5:d5:79:92:da:8a:29:db:c5:c9:95:10:79:2d:87:85:6e:b1:
a2:77:65:f0:fd:5a:b7:6b:97:50:36:c0:e6:f9:8b:7a:cd:6c:
a6:aa:38:55:51:ff:b8:99:08:fb:20:a7:b3:23:e6:e8:b3:9a:
61:e8:74:23:f2:c1:71:9b:77:d7:4d:e6:e1:e5:d1:24:b6:07:
1c:e0:a7:bf:5a:8a:df:9b:55:2a:5a:dd:3f:c0:0e:af:c2:2b:
34:3b:ef:b0:a4:c2:7b:b6:8b:4a:02:52:95:d5:54:fd:41:db:
56:3a:bf:31:b6:45:e6:86:5b:25:b4:17:ac:10:26:fe:22:4b:
ee:1a:a2:90:66:a7:88:21:6d:bf:78:d1:da:e7:53:e2:12:dc:
b1:bb:72:82:bf:e8:a0:39:eb:c5:44:b9:22:8d:ba:e6:8d:fc:
54:67:9b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:03 2026 by rpki-client