Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/21C1E2568A6B11F1AA1ECD02CF1D38B0.roa
File: 21C1E2568A6B11F1AA1ECD02CF1D38B0.roa (raw, json)
Hash identifier: 3IW2hG4U1ExpcZubWiJJn8Gv7hZRkdjDAkFy5BeMkGs=
Subject key identifier: EA:DE:0B:EC:E5:C4:42:19:22:51:EF:DA:2B:B9:97:58:87:6E:D0:CC
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 09C7
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/21C1E2568A6B11F1AA1ECD02CF1D38B0.roa
Signing time: Tue 28 Jul 2026 10:00:16 +0000
ROA not before: Tue 28 Jul 2026 10:00:12 +0000
ROA not after: Tue 31 Jul 2040 10:00:12 +0000
asID: 7262
IP address blocks: 41.221.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2503 (0x9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Jul 28 10:00:12 2026 GMT
Not After : Jul 31 10:00:12 2040 GMT
Subject: CN=6a687db0-7db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3b:a7:97:e7:d3:06:b5:c0:a9:e3:93:78:74:
1a:5e:e5:8f:ec:bb:1f:57:33:d4:bd:7f:8f:80:aa:
2a:12:01:f5:2a:d8:14:f0:df:0d:dd:31:b0:a1:ba:
a6:90:6e:dd:6b:6f:43:a3:d6:1e:0e:e2:bd:a4:31:
0f:e8:24:4c:69:38:16:4d:34:86:e5:a8:85:4f:d7:
40:4d:76:d3:ff:d6:00:cd:b3:5d:24:e2:7f:da:20:
c3:c2:bd:2a:4d:d2:c4:c4:8f:8c:49:38:6e:c6:00:
96:80:65:63:a7:6d:22:b9:4d:aa:c3:21:a2:de:f5:
ed:64:0f:b0:e9:61:6f:fc:68:94:7b:de:bd:2c:c6:
c7:2c:a0:18:8f:be:b2:93:e1:0c:f2:93:ff:8d:98:
53:4d:5e:af:77:d4:76:84:58:e5:83:7b:57:4d:62:
ac:d3:f3:43:5f:1f:de:45:77:fe:d6:de:ae:90:43:
dd:8c:4d:b5:6f:31:a7:4d:7e:e5:90:0f:41:42:75:
90:c1:37:83:4b:0f:45:18:aa:2a:57:ef:a2:a3:98:
82:c5:b3:dc:b9:ef:0c:90:bd:59:82:4d:71:cd:c1:
68:94:e1:43:61:11:c4:b7:56:64:50:a8:43:6a:68:
a1:4b:52:85:5f:f8:39:8d:b2:ab:f0:d6:2b:00:92:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DE:0B:EC:E5:C4:42:19:22:51:EF:DA:2B:B9:97:58:87:6E:D0:CC
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/21C1E2568A6B11F1AA1ECD02CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.214.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2c:f0:5e:36:f4:19:1a:69:1c:f1:b4:69:70:9e:71:b9:22:
78:45:f1:99:1f:a2:be:7e:00:02:45:ab:0a:ed:a5:52:a9:dc:
81:01:ee:97:a1:7d:e0:28:95:28:a1:09:80:4c:6b:8e:ab:b1:
a5:3e:03:77:76:c3:1c:7e:24:e3:d9:95:45:47:f5:4f:66:44:
99:9f:6b:15:e6:8c:fa:e2:56:40:81:55:a6:8b:16:d5:ac:c8:
af:3d:8b:17:7f:03:17:45:a2:19:e8:7d:a8:15:9b:ce:ba:fa:
6b:fb:24:40:f9:2d:90:4b:42:26:64:21:a0:fd:9b:08:3c:eb:
6b:06:58:2c:48:d3:af:a2:bd:85:92:8a:f4:90:53:32:86:ae:
08:e1:23:41:67:cf:ef:28:c1:14:02:02:e9:0c:41:2e:36:63:
d6:d1:ea:7f:6a:fa:42:03:59:b0:ee:69:70:1f:dc:de:6d:b3:
f0:34:a2:f7:86:89:31:5d:40:db:ca:55:a1:a0:ea:ff:a2:2a:
ca:53:22:76:0e:b3:66:7e:d4:38:a6:75:34:41:d2:ee:b5:e5:
6e:07:82:75:81:92:83:7d:0c:03:dc:19:72:ee:59:41:a8:f8:
f3:dc:54:53:ab:5a:cc:cc:85:5f:e0:3d:ce:99:a2:8c:bb:d8:
63:50:6d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:26:20 2026 by rpki-client