Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/363906AE8A6D11F1A73E2E0FCF1D38B0.roa
File: 363906AE8A6D11F1A73E2E0FCF1D38B0.roa (raw, json)
Hash identifier: HuoTVuH2wLkOrx2U374b3Tje/aCCSu66XS48cTDH4ro=
Subject key identifier: 19:41:B2:31:D9:6B:EA:7F:4E:0F:76:E9:F4:FF:B9:C3:38:F6:2E:FF
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 09CD
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/363906AE8A6D11F1A73E2E0FCF1D38B0.roa
Signing time: Tue 28 Jul 2026 10:15:09 +0000
ROA not before: Tue 28 Jul 2026 10:15:05 +0000
ROA not after: Tue 31 Jul 2040 10:15:05 +0000
asID: 7262
IP address blocks: 41.221.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2509 (0x9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Jul 28 10:15:05 2026 GMT
Not After : Jul 31 10:15:05 2040 GMT
Subject: CN=6a68812d-ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:95:dc:32:c3:a1:ab:2e:d4:c8:d5:22:bc:
cc:8a:12:9e:ba:3a:a0:df:39:c3:a3:06:e0:a5:6a:
fb:f9:c4:70:74:a9:12:50:07:6c:9c:fe:da:79:6a:
be:26:d4:78:70:b4:5b:65:21:a2:74:45:7a:53:3e:
d3:d5:89:4a:08:ec:ef:7e:3c:bb:e1:a3:e7:26:6b:
f6:81:95:65:91:e3:d7:90:c2:91:d8:ed:9e:de:cb:
c8:19:9e:06:db:7e:df:6b:fa:e0:d5:1d:9a:9b:0d:
f8:b2:b3:06:5a:e3:3c:b3:84:b7:be:b2:50:d3:6c:
2d:b5:4c:ac:18:75:ef:ae:d6:d0:0c:b0:ad:fd:27:
66:04:a5:86:13:38:91:5e:dc:cf:6f:7b:b2:0f:30:
8e:b3:b3:a1:05:22:d2:9b:65:bd:c0:7b:c1:d9:f9:
b4:2b:bb:d8:3e:38:ae:a6:cd:ed:38:85:3d:dd:20:
08:5f:94:e9:b3:70:83:47:dc:1b:e3:fa:a3:a5:22:
1e:91:b7:21:88:9c:0c:52:4a:4b:98:bd:35:90:31:
96:bb:c0:fa:01:6d:ff:42:f2:2c:68:60:4d:c1:4b:
14:22:75:f2:91:81:13:f7:99:02:1d:ad:52:27:81:
65:0b:1e:dc:7b:f4:04:a1:0e:7f:87:c1:b9:08:38:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:41:B2:31:D9:6B:EA:7F:4E:0F:76:E9:F4:FF:B9:C3:38:F6:2E:FF
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/363906AE8A6D11F1A73E2E0FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.215.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ca:5e:27:a2:ef:a9:00:2b:f7:e5:3d:d4:c5:62:b0:ab:03:
93:32:eb:8e:16:9d:8a:df:f2:09:95:49:ae:8d:db:a1:cf:6f:
c7:b1:d7:15:eb:94:e7:39:f4:4e:e6:9c:01:03:3d:fe:78:f2:
18:2c:1c:92:26:d1:d3:7a:37:3a:cf:c7:44:8e:f3:3d:22:02:
03:95:3e:28:91:63:53:6a:e2:46:1f:64:db:03:57:cf:2f:6a:
1b:3f:a3:8b:9e:57:8f:77:04:97:2e:89:be:01:b9:62:6d:04:
f7:7e:53:41:fc:3a:d7:76:60:3b:29:6f:cb:0b:e7:27:60:5b:
aa:98:40:2c:e3:dd:cb:e9:04:bc:53:71:69:e4:a6:f6:5f:49:
6c:a1:c6:47:c7:09:bc:64:4d:b8:e8:ec:57:f1:9b:0f:e3:fc:
36:bb:df:1b:39:1c:d4:70:fc:b3:9b:40:a7:a5:0f:40:f5:0c:
37:aa:c3:62:96:02:e1:f3:fa:da:5f:2d:39:7e:bd:db:ad:80:
f3:06:b8:87:18:13:d8:10:66:40:d7:e0:1d:09:96:8d:09:49:
29:f4:68:90:f2:57:46:dd:43:be:44:d6:43:35:13:f5:6f:c9:
86:b7:a8:8c:bc:19:60:9f:63:a0:3a:ed:dc:4b:3c:87:60:6e:
57:7d:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:45:20 2026 by rpki-client