Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/56517DE68A8511F1A425C9A0CE1D38B0.roa
File: 56517DE68A8511F1A425C9A0CE1D38B0.roa (raw, json)
Hash identifier: x4/A0cOgEYz9UndmhI0YJkTiRJBKIEjyt8dqU/caCzI=
Subject key identifier: 42:FF:C2:26:70:B4:91:9F:10:9F:46:EC:F7:EA:EF:79:EB:68:2C:8A
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 0633
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/56517DE68A8511F1A425C9A0CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:07:51 +0000
ROA not before: Tue 28 Jul 2026 13:07:47 +0000
ROA not after: Mon 28 Jul 2036 13:07:47 +0000
asID: 37294
IP address blocks: 41.78.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1587 (0x633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Jul 28 13:07:47 2026 GMT
Not After : Jul 28 13:07:47 2036 GMT
Subject: CN=6a68a9a7-8741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:5e:8d:8f:2a:a2:d4:b2:e8:c1:56:11:56:
03:93:98:24:f4:d7:ce:2e:ec:ca:9c:9f:5e:36:cd:
c6:29:4d:e1:6e:01:7a:88:54:43:cc:4d:6f:9b:e7:
97:53:20:68:7d:13:46:c8:04:05:49:d2:ba:a2:07:
8b:ab:dd:8d:b1:b0:91:71:34:11:9c:83:c7:fe:34:
9f:e0:06:51:64:73:0b:c5:c9:ef:db:e0:9a:3a:3d:
87:2f:f6:42:d0:db:38:bf:97:a4:a0:ec:7d:bc:70:
94:17:e3:3a:ea:14:4b:e4:e4:c0:47:11:fc:2d:27:
ab:73:cc:f4:3c:90:4e:6b:55:f6:fb:b9:1e:f6:02:
cc:2b:2a:cf:36:30:24:be:0a:31:96:63:41:96:b6:
9c:59:94:2f:75:06:42:68:9c:4e:d2:42:c6:ee:37:
8f:7c:6e:f0:82:3e:aa:46:e3:56:83:cb:79:3f:e5:
5d:07:ca:2a:4f:b5:b3:2e:2f:66:ce:f9:cd:8b:ca:
ac:58:ea:82:47:34:48:fd:95:97:f0:fb:45:1a:dc:
97:0a:34:07:ed:2e:bc:6b:bf:1e:2a:07:df:b6:96:
a0:5d:f0:b6:3a:6d:d1:26:f1:4c:ba:3b:00:2f:04:
01:67:5f:3a:7c:23:91:fd:ae:22:65:2b:41:7c:d3:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FF:C2:26:70:B4:91:9F:10:9F:46:EC:F7:EA:EF:79:EB:68:2C:8A
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/56517DE68A8511F1A425C9A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.248.0/22
Signature Algorithm: sha256WithRSAEncryption
34:f4:99:59:48:75:76:5f:32:62:39:63:3a:25:78:ed:93:79:
aa:16:7a:02:b5:a2:0b:d8:be:ee:9f:24:fd:c6:9f:9d:83:92:
71:ba:96:cc:84:7f:64:27:b5:41:d9:e5:11:99:ab:92:36:c6:
3e:5a:a1:ab:6d:9f:d2:aa:5d:00:9b:92:2f:7f:b7:b4:df:9e:
8e:db:be:96:4c:e4:f3:fc:95:03:eb:3a:78:63:b6:d2:72:7a:
17:f7:5b:b0:34:0d:ac:32:04:0c:80:4a:4d:ae:0e:55:57:84:
74:1c:57:63:d8:58:ff:b7:85:b9:7c:75:3b:66:56:91:de:ea:
01:26:f0:da:47:40:04:c0:67:6f:ea:40:3a:49:fa:6b:b4:66:
d0:da:ed:e9:72:a1:42:63:be:4a:3a:ff:04:8a:01:5b:8e:01:
38:f1:12:9c:c2:4b:e1:99:03:46:d8:a7:03:de:c0:08:3e:c2:
6e:3f:40:ef:7b:b3:ba:57:9a:fa:5e:6f:f3:7c:2a:75:d4:01:
5a:23:07:0c:19:9a:b8:9e:75:b6:1b:7c:83:03:02:55:30:ff:
ab:dd:49:3d:f1:2d:98:32:9e:f7:4d:23:82:0e:69:a8:36:e1:
ee:93:1a:60:65:36:ab:7f:3d:bd:26:ac:2d:0d:ed:18:0c:be:
55:7d:28:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:00:00 2026 by rpki-client