Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/17BF2496899211F1AEEAF8D4CE1D38B0.roa
File: 17BF2496899211F1AEEAF8D4CE1D38B0.roa (raw, json)
Hash identifier: 3QEPwNqOHySqHSpYvLfuCr9CJxZy8YD9o8/9NGe9gfw=
Subject key identifier: A4:51:97:68:E7:F2:74:54:5D:8B:DA:E6:9F:74:37:33:72:82:DB:E6
Certificate issuer: /CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Certificate serial: 067E
Authority key identifier: 79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/17BF2496899211F1AEEAF8D4CE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:06:39 +0000
ROA not before: Mon 27 Jul 2026 08:06:35 +0000
ROA not after: Mon 01 Apr 2030 08:06:35 +0000
asID: 37187
IP address blocks: 41.75.112.0/20 maxlen: 24
41.190.92.0/22 maxlen: 24
41.217.216.0/22 maxlen: 24
197.211.96.0/19 maxlen: 24
2c0f:fd50::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 02:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBC36AF, serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Validity
Not Before: Jul 27 08:06:35 2026 GMT
Not After : Apr 1 08:06:35 2030 GMT
Subject: CN=6a67118e-55cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:f9:aa:d4:55:bc:67:e4:9b:d0:e7:53:a6:
d3:bf:21:2b:04:ab:3b:9e:36:d8:bb:74:12:bb:6a:
d2:6c:2b:34:76:3a:d9:1b:7f:7e:18:08:3a:9c:0c:
87:39:f7:1b:e3:98:ac:72:74:63:58:fa:d8:78:f5:
23:96:4f:20:60:c8:bb:81:e5:39:30:19:08:01:8d:
35:f0:03:00:01:c2:4d:08:9b:e6:7c:30:56:fa:d7:
20:6f:c9:69:5e:75:c1:86:be:bb:dc:0b:0d:f0:41:
3e:7b:08:e9:ff:d3:e5:63:88:6a:62:63:e5:db:c3:
be:06:8b:92:f8:2a:90:a5:cf:ae:50:fa:f8:c3:32:
11:37:cf:c1:4c:ca:8f:31:df:0a:78:b3:42:c1:67:
57:0a:02:49:c1:64:c8:c0:8f:0f:7b:27:fa:a9:50:
6a:49:15:6c:d0:1a:d0:bd:9a:8d:5e:3b:0f:19:e2:
98:2e:3a:0d:74:4f:fb:aa:ca:ec:34:1a:cb:c9:d5:
f0:fe:3c:fd:04:10:bb:77:f5:1d:2c:03:a0:90:92:
3a:02:36:aa:5b:bf:6c:e2:be:36:7a:7d:69:b3:8a:
2e:46:c3:94:0a:76:d4:9e:65:ca:08:9c:59:ad:50:
67:ed:f1:36:c5:d3:b4:e8:f5:2c:ac:64:11:d7:d7:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:51:97:68:E7:F2:74:54:5D:8B:DA:E6:9F:74:37:33:72:82:DB:E6
X509v3 Authority Key Identifier:
keyid:79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/17BF2496899211F1AEEAF8D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.75.112.0/20
41.190.92.0/22
41.217.216.0/22
197.211.96.0/19
IPv6:
2c0f:fd50::/32
Signature Algorithm: sha256WithRSAEncryption
2f:2b:45:b3:92:d8:f5:12:69:39:32:09:bf:6a:96:84:d6:a7:
7c:17:5e:60:f8:7d:b5:a1:70:f4:ed:97:c5:d2:ed:c5:42:d8:
53:08:8f:47:8e:52:50:fd:bc:38:97:a2:a5:21:4c:95:42:a2:
92:24:0d:ee:0e:f4:70:13:df:e1:bf:40:6c:fd:93:64:c0:e4:
12:f9:ad:6b:83:61:2b:1f:b4:9f:b5:62:8e:bf:69:9a:f4:94:
9f:98:ac:39:7c:2c:f7:26:6f:f5:73:15:3d:98:5e:33:3c:c1:
a1:d3:b8:68:80:9f:90:dd:84:06:76:7d:bb:45:d3:01:c7:0c:
c1:f7:ca:d7:45:8d:b0:e4:07:ff:0a:1f:a8:b1:94:04:b2:5e:
0b:7f:3c:eb:23:5d:b4:80:3e:c7:2d:21:e0:ba:95:9c:73:a8:
b9:69:7f:dc:3b:eb:52:4c:52:eb:48:b5:60:98:19:bb:e2:1f:
11:41:6f:b9:f4:e6:1e:c4:ff:a6:b0:5d:35:42:d7:4c:3b:b3:
de:df:36:08:88:90:11:59:83:a2:de:d5:49:02:b0:d6:fb:93:
9d:ce:35:5f:05:db:7e:fe:58:85:55:ba:47:82:f3:d0:17:ac:
1c:c4:0e:97:7c:ce:63:1d:ae:16:a8:9a:c1:1c:0a:f2:42:1d:
13:9f:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:22 2026 by rpki-client