Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/7BD4733608DD11F1B4C68D8BDAE4EC9C.roa
File: 7BD4733608DD11F1B4C68D8BDAE4EC9C.roa (raw, json)
Hash identifier: VaWtLFO8gF8tTVqYTrmDCxhKxdVDZKRkXcmlPSJiI4M=
Subject key identifier: 4E:E1:0E:9F:BB:BA:71:2C:E0:3C:E9:71:F9:CB:3B:D2:A9:E7:82:BF
Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial: 037E
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/7BD4733608DD11F1B4C68D8BDAE4EC9C.roa
Signing time: Fri 13 Feb 2026 13:11:19 +0000
ROA not before: Fri 13 Feb 2026 13:11:14 +0000
ROA not after: Wed 31 Dec 2031 13:11:14 +0000
asID: 36912
IP address blocks: 41.202.192.0/19 maxlen: 24
102.244.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Validity
Not Before: Feb 13 13:11:14 2026 GMT
Not After : Dec 31 13:11:14 2031 GMT
Subject: CN=698f22f7-2614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:d0:a8:4e:e2:0c:23:e9:e8:95:c3:fe:b9:
b4:f9:11:08:05:1e:01:cf:b8:3a:b5:9b:d1:91:f0:
d1:a8:48:42:be:5f:9f:1f:08:5a:38:c3:5d:5f:ac:
aa:df:51:e6:20:f3:16:57:5d:21:7b:73:3a:a7:7a:
60:bc:50:2f:b2:11:5a:44:2f:71:83:39:1b:79:11:
c4:de:80:73:7b:b1:2b:37:f6:c3:a7:bd:b1:6e:44:
e6:13:09:f4:0f:ea:d9:5b:17:5d:13:64:5e:67:b4:
46:27:45:5a:2e:d5:15:85:e5:b4:2c:26:aa:43:48:
48:6e:91:52:01:97:a7:52:04:eb:c5:1a:e0:a4:e1:
d1:06:14:b5:c4:42:d8:3e:6f:d2:fa:86:84:60:89:
b0:bb:53:e4:80:ee:71:79:94:1d:98:2d:1b:6f:df:
a7:dd:9c:c6:9e:7a:8d:30:06:15:58:7b:38:67:7d:
49:e9:a4:c3:03:09:7b:27:66:6f:96:1d:b8:5c:ba:
d9:44:19:af:0a:43:d3:cf:69:0e:f4:d4:dc:12:be:
0e:0b:1b:bd:9e:88:a5:d6:95:7a:7b:71:92:07:56:
1b:c8:0e:18:33:e7:47:b9:67:74:a9:df:45:10:28:
73:94:8b:07:af:4d:ca:a8:cf:d0:67:cf:2d:a2:4d:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E1:0E:9F:BB:BA:71:2C:E0:3C:E9:71:F9:CB:3B:D2:A9:E7:82:BF
X509v3 Authority Key Identifier:
keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/7BD4733608DD11F1B4C68D8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.202.192.0/19
102.244.0.0/14
Signature Algorithm: sha256WithRSAEncryption
5a:a2:34:8c:de:a7:f8:28:a6:3a:93:ec:51:88:52:de:e1:01:
ec:82:19:f8:a4:6a:f0:d4:09:bd:9e:8b:4a:4f:92:c6:fc:7b:
e7:2d:d8:65:0f:6c:7d:1e:d3:a0:ba:e9:b8:76:24:84:b8:85:
4f:c1:f9:4c:0e:b5:77:09:ae:ab:3d:63:d0:17:de:b6:2f:b4:
e8:af:64:8c:a8:8c:6e:84:bc:f5:5a:c0:60:fa:2c:17:bd:81:
40:72:17:62:c0:52:ec:d4:df:a6:2e:0b:67:38:d9:61:69:e5:
43:8a:d8:78:c8:6c:01:cc:ac:15:a7:fa:a2:c3:2d:4f:b4:81:
08:10:a1:8c:14:a3:47:08:18:0d:1c:90:25:90:00:46:5d:e8:
3c:52:d3:34:83:5d:e3:8e:1f:67:a0:6e:52:0b:cc:50:5a:a5:
d8:19:1c:ca:8b:29:d5:12:87:6d:c0:c8:af:86:67:92:4b:7e:
90:05:99:2f:9f:df:1f:a9:64:73:13:65:12:1e:fc:cc:df:56:
a3:d7:0e:19:e7:1d:d7:1b:35:5c:a2:a2:ff:a5:e0:7f:a5:b4:
48:f9:8d:e8:5d:48:5b:4c:61:d1:6f:56:24:1d:07:8f:f6:99:
54:bf:03:b8:6e:66:03:56:c0:f6:fc:bd:37:f9:0b:13:39:9f:
ff:2d:49:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:53:09 2026 by rpki-client