Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/F72372568A8511F19EE831A5CE1D38B0.roa
File: F72372568A8511F19EE831A5CE1D38B0.roa (raw, json)
Hash identifier: Sj2GyCXVEGFZVUcPAApgFeaomJhf8dPrNUJd6K7oshI=
Subject key identifier: 3A:54:92:9C:08:EE:7D:87:DC:C5:90:8B:F0:20:56:F3:B2:E8:64:9C
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 0637
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/F72372568A8511F19EE831A5CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:12:22 +0000
ROA not before: Tue 28 Jul 2026 13:12:14 +0000
ROA not after: Mon 28 Jul 2036 13:12:14 +0000
asID: 36913
IP address blocks: 41.222.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591 (0x637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Jul 28 13:12:14 2026 GMT
Not After : Jul 28 13:12:14 2036 GMT
Subject: CN=6a68aab6-1bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:0a:0f:39:bf:c9:1d:d7:04:32:87:e7:10:
1d:40:25:d6:2e:a4:28:36:5f:20:4f:07:3c:df:b8:
54:14:fc:73:ab:02:34:c2:61:25:66:97:42:84:60:
df:b9:4b:a2:3b:54:3a:80:66:70:ab:f7:8e:be:6a:
2e:dd:38:41:6d:45:65:b8:fd:19:4d:19:e5:d2:4a:
02:f0:44:30:5e:91:a5:17:95:5a:ad:08:87:82:0d:
bf:9d:97:e0:3f:49:5f:88:e0:37:ea:96:d1:f6:e7:
39:7c:a1:2e:ee:b2:77:f9:51:d7:3b:20:25:4e:c4:
82:8a:67:f7:9d:29:67:72:48:1e:e3:41:a8:e3:06:
79:3e:30:97:3a:b6:90:f9:fa:65:61:7f:64:5f:97:
89:2b:6f:76:99:26:f9:01:40:64:27:e8:b4:02:5e:
d7:14:34:02:72:55:3d:c2:02:31:d7:63:1f:ad:85:
6f:e7:f9:9d:ac:18:c2:2e:ca:2f:00:55:b8:57:c7:
f5:21:85:ae:1b:65:49:58:f8:d2:00:24:f3:db:ec:
45:c1:82:43:da:9c:ad:45:1e:97:40:fd:01:12:ca:
9f:e3:84:4d:43:45:39:e8:bf:4c:eb:01:8c:f1:82:
b2:1e:c8:29:68:85:f0:43:5f:63:a2:5b:82:10:f3:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:54:92:9C:08:EE:7D:87:DC:C5:90:8B:F0:20:56:F3:B2:E8:64:9C
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/F72372568A8511F19EE831A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.184.0/21
Signature Algorithm: sha256WithRSAEncryption
24:b5:a0:aa:4f:32:b4:3b:45:7a:6e:c0:e6:80:b7:c2:75:34:
d4:da:f2:0f:8c:ed:eb:80:51:27:41:e1:fb:37:58:bb:b4:82:
bd:ea:ba:a1:c4:04:65:c4:d3:a4:d1:ad:2c:cd:dc:fa:0f:8b:
eb:bd:9a:d1:3a:51:8f:8b:12:6b:5c:ed:df:c9:28:71:01:da:
f5:d1:13:9e:b9:90:c9:06:62:2a:fb:e0:2a:5c:dc:89:24:11:
43:19:c4:1a:5c:eb:33:8f:ff:aa:7f:ea:11:a6:65:f2:b0:8d:
40:dc:af:b5:cb:6a:ee:ab:cc:6c:a0:e1:43:2b:67:5e:4e:7e:
38:e6:0d:65:76:0e:35:15:c1:fb:64:9e:ce:9f:ef:bb:fc:08:
34:c7:82:28:c3:29:6d:9f:1a:6e:80:1b:04:dc:5f:e9:c1:61:
e7:5f:64:ba:bd:90:a7:f0:2c:90:ea:a9:40:9b:c1:a2:cf:23:
e6:74:e7:38:1b:57:7d:cc:50:ea:84:5b:68:c0:57:25:4f:af:
3c:e5:3a:fd:60:ab:f7:3d:db:d0:49:6d:41:39:35:35:07:3c:
c8:2c:1c:c5:5c:94:08:fe:e0:16:5c:d6:dc:13:d8:9c:6c:00:
d7:e2:88:31:f3:bb:3a:74:65:c7:25:7d:a6:d2:17:fb:83:7f:
31:37:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:38 2026 by rpki-client