Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/47B929708A6A11F19AE386FCCE1D38B0.roa
File: 47B929708A6A11F19AE386FCCE1D38B0.roa (raw, json)
Hash identifier: +PURW9h8fC6QCQjo5DYWqsOQMj1WuGyTtah+FIejrAc=
Subject key identifier: 5F:35:E6:06:89:13:95:D5:26:20:0B:71:87:3A:71:EF:03:7F:B8:C9
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 09C4
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/47B929708A6A11F19AE386FCCE1D38B0.roa
Signing time: Tue 28 Jul 2026 09:54:10 +0000
ROA not before: Tue 28 Jul 2026 09:54:06 +0000
ROA not after: Tue 12 Oct 2032 09:54:06 +0000
asID: 40123
IP address blocks: 41.221.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Jul 28 09:54:06 2026 GMT
Not After : Oct 12 09:54:06 2032 GMT
Subject: CN=6a687c42-9076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2b:8d:9c:08:9b:20:9a:34:97:16:dd:28:4a:
3f:04:06:68:33:a1:c2:f2:6b:f1:b5:79:47:a5:1a:
4c:b1:45:73:a5:34:02:30:67:33:39:ef:89:d5:62:
06:a8:48:2e:e4:be:04:d2:e3:55:02:08:c2:de:7c:
aa:d3:3e:22:32:c7:ec:3f:cf:03:11:58:40:b6:31:
7e:be:65:d8:d1:51:41:44:bf:22:90:9a:55:79:d4:
8d:3f:53:58:c1:38:7b:39:7d:6b:52:96:df:08:0b:
73:ee:b0:79:81:7e:db:c5:05:7e:17:94:58:7b:6b:
98:8f:f9:b1:93:65:9a:e8:87:04:46:bf:7a:28:8f:
e0:22:16:12:61:99:53:a8:4e:30:74:96:f1:df:f7:
31:01:1e:ab:22:7a:d9:cc:32:e8:c9:b1:49:9e:df:
3b:6d:b8:26:64:50:a0:c7:59:6f:8f:81:7e:5f:3d:
b9:e4:99:b8:b7:3f:58:6f:24:30:c4:3d:5f:3c:0f:
a8:16:a6:4e:eb:17:48:90:a4:62:89:c2:2e:fe:76:
a6:72:ef:ee:b2:06:76:17:60:8b:06:04:8b:46:0b:
4e:87:be:4b:a4:a6:b0:3b:fb:d6:a9:68:cc:c4:0a:
ea:15:3e:16:c7:0e:24:08:e0:11:2c:c7:ca:af:87:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:35:E6:06:89:13:95:D5:26:20:0B:71:87:3A:71:EF:03:7F:B8:C9
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/47B929708A6A11F19AE386FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.210.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cf:17:14:f4:63:ea:98:f5:1b:00:04:ac:2c:63:8b:2a:62:
1b:96:61:38:a3:bb:4b:2c:e3:be:e4:ff:3d:bd:e3:0d:94:3f:
ec:41:a6:87:04:8c:dd:a0:7d:63:fd:88:e4:bc:93:d6:26:04:
e1:e4:16:1c:b8:12:f4:db:b5:96:4c:1e:57:9e:0d:53:14:32:
e0:d1:48:0d:a9:1a:f8:ae:45:23:e2:fd:8c:03:b8:6e:10:a0:
e9:bc:22:5b:b3:22:93:fa:ca:b8:5c:c9:2e:0b:bd:4c:49:6f:
f9:b0:97:4f:16:21:ce:d6:e0:b1:70:68:f6:fe:ac:0d:68:ca:
86:5e:21:7d:33:b3:c1:08:38:58:20:88:a3:54:e9:0f:93:4c:
12:dc:35:d4:52:75:ec:de:33:4e:d3:95:1b:96:50:40:dd:62:
d7:1d:52:24:4c:4e:84:65:db:a6:b5:23:85:c1:6f:f9:56:50:
53:9a:71:63:f7:a6:09:8b:78:69:02:73:b6:9b:79:3a:f5:83:
bb:82:0f:62:05:f9:d6:55:b8:ac:37:29:90:04:a4:ff:9b:9c:
ea:b5:a6:9f:ce:ae:6d:4c:3e:df:93:5a:34:41:6c:0c:e7:ff:
27:8f:7b:76:d1:24:c6:0e:49:47:77:f1:1c:7b:f8:74:89:48:
40:a5:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:45:40 2026 by rpki-client