Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/B416D1808A8811F19276B6B5CE1D38B0.roa
File: B416D1808A8811F19276B6B5CE1D38B0.roa (raw, json)
Hash identifier: JqKNVi9sDF1Z+WHUQyqHM6n1mTv2PxK9bP8CLP/bWwk=
Subject key identifier: 4B:96:20:92:05:B9:88:F9:77:B9:82:58:17:EA:9F:F2:D1:F4:F1:27
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 063B
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/B416D1808A8811F19276B6B5CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:31:57 +0000
ROA not before: Tue 28 Jul 2026 13:31:53 +0000
ROA not after: Mon 28 Jul 2036 13:31:53 +0000
asID: 37294
IP address blocks: 41.222.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Jul 28 13:31:53 2026 GMT
Not After : Jul 28 13:31:53 2036 GMT
Subject: CN=6a68af4d-c73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5a:11:9a:ce:fd:b5:e4:1f:f6:01:37:22:f5:
98:9f:10:27:61:d8:57:b5:43:5d:15:73:9a:63:a5:
f9:31:1f:3b:de:71:9d:3c:c3:5e:89:c7:6d:ba:58:
1d:d3:89:8d:f7:99:06:cc:70:c5:a6:29:3f:04:86:
a4:75:ba:f9:11:78:ad:af:30:b7:8d:7b:75:fa:3c:
e4:ae:95:15:bc:8d:f5:b7:0e:fd:ac:25:70:77:67:
a4:04:9a:19:3f:09:50:6c:d0:84:66:20:73:7d:fe:
45:39:82:3c:11:2f:74:e3:64:9b:f1:e2:de:af:27:
8b:5b:2c:fc:70:2d:c7:59:69:5d:ae:e6:95:0b:89:
dd:db:c7:fb:42:95:33:d2:85:0d:23:dd:2d:fd:a1:
f9:a1:16:ea:cc:53:d1:34:8e:60:5f:03:9c:9b:4f:
b8:2f:0e:fd:8e:bd:a4:d1:c0:67:92:1a:b6:53:e4:
fc:5c:65:d8:25:a2:a6:01:f0:0f:69:9c:54:a0:14:
96:c5:e1:98:7d:63:b1:55:1b:63:d8:9c:89:38:4e:
91:9d:1f:1a:ac:dd:df:4a:92:73:0c:13:1d:f9:de:
6a:5b:e3:66:9a:08:e6:96:64:84:de:db:96:4e:97:
b6:18:59:40:ea:d5:d3:bd:44:9d:99:6e:db:53:41:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:20:92:05:B9:88:F9:77:B9:82:58:17:EA:9F:F2:D1:F4:F1:27
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/B416D1808A8811F19276B6B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.184.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:03:3f:b2:e1:16:3b:15:06:97:96:f1:a5:6a:43:23:e3:e7:
95:04:7c:d9:63:24:72:10:c9:cf:26:3b:5e:70:90:64:bd:25:
70:5e:0b:ad:6b:c8:c4:56:f4:1c:92:a3:56:73:57:63:2e:cb:
1d:d9:a0:09:f0:04:27:89:de:e2:d8:48:bd:9a:b8:be:18:4b:
86:ac:ec:9c:15:50:18:64:df:88:71:b0:99:27:8d:1b:06:af:
85:c1:c5:04:5d:a3:90:a2:ad:e7:71:37:56:72:56:f1:fa:58:
67:36:21:43:ed:0b:bb:22:f5:50:c4:45:de:c1:08:e9:5a:81:
92:e8:fa:cb:8c:99:e8:e4:20:c6:81:ed:8f:f4:1c:6a:0e:d3:
d6:13:7e:30:48:cd:a6:c6:48:98:7a:d7:4a:11:9b:2e:31:d8:
65:8c:09:4e:06:f8:42:4e:56:fe:b5:e1:9c:97:09:9f:4f:15:
06:19:73:93:ad:1f:0d:7e:85:50:b0:0c:ee:7c:04:e9:c9:ee:
f0:c0:69:f8:3d:b8:7e:c1:64:aa:b3:d1:72:bb:74:36:00:a2:
90:b4:94:8c:c9:68:e6:e5:3b:fd:72:8b:57:80:cd:f4:59:b1:
87:32:f4:bc:b4:57:c1:39:ae:ae:93:e7:50:ee:2c:d9:ed:ec:
01:34:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:25:53 2026 by rpki-client