Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/69D8501C8A7E11F18852F6F4CE1D38B0.roa
File: 69D8501C8A7E11F18852F6F4CE1D38B0.roa (raw, json)
Hash identifier: IcaGaoujxGgkNe1Mv/ecD9++237M3+OQM+9p4KWts24=
Subject key identifier: 9D:74:D2:2D:8E:0C:1C:3C:99:52:D4:43:58:B6:CB:6F:48:C8:21:A8
Certificate issuer: /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial: 052F
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/69D8501C8A7E11F18852F6F4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 12:18:17 +0000
ROA not before: Tue 28 Jul 2026 12:18:13 +0000
ROA not after: Tue 14 Nov 2028 12:18:13 +0000
asID: 37148
IP address blocks: 41.203.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 12:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1327 (0x52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Validity
Not Before: Jul 28 12:18:13 2026 GMT
Not After : Nov 14 12:18:13 2028 GMT
Subject: CN=6a689e09-c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:3b:8f:2f:12:c0:2e:7e:5f:cc:26:cd:ac:
84:98:b8:91:66:f1:e4:b2:97:8f:03:17:2b:f7:47:
81:23:10:a6:bc:73:fb:ae:8f:2f:66:7f:a8:89:ad:
f7:2a:b3:6b:92:bb:c3:bc:63:55:0e:9a:ed:7e:2b:
5d:79:89:19:5a:ff:2f:35:97:a2:2a:03:a9:84:c7:
36:20:9f:d7:65:7b:d3:3e:81:1d:5d:f0:1c:07:98:
13:14:0a:17:ab:b4:66:43:eb:7b:43:6f:8a:55:8a:
48:02:90:2f:ed:33:ce:2b:b8:31:b1:6e:c1:27:fe:
e5:cd:f7:7a:b9:6c:9e:55:ef:0a:50:e0:33:6c:5c:
e9:57:e1:09:49:55:da:3f:38:82:6f:96:fa:33:75:
93:1d:b2:d2:c8:7a:b0:41:71:cd:cb:bf:0a:91:3a:
67:21:fb:f5:0c:e9:64:e2:4f:4f:6a:39:d4:cc:cd:
df:b1:7b:f0:68:b7:60:31:3f:ad:3f:17:ef:28:03:
f4:59:d2:11:bb:58:07:89:8a:3b:a1:78:85:dd:e9:
c2:65:8c:fb:52:58:3d:33:72:8b:20:7d:a5:a1:5f:
80:af:a6:88:8c:2f:31:7d:bb:7b:42:a1:18:83:9a:
23:57:9f:f7:c4:28:7e:f5:1a:9e:b1:84:1a:8a:94:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:D2:2D:8E:0C:1C:3C:99:52:D4:43:58:B6:CB:6F:48:C8:21:A8
X509v3 Authority Key Identifier:
keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/69D8501C8A7E11F18852F6F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.203.64.0/19
Signature Algorithm: sha256WithRSAEncryption
29:1b:ae:ce:cf:d7:09:bb:92:57:43:a6:7c:35:14:b0:d7:90:
61:4d:a0:c4:3b:fd:9d:47:23:8c:12:4b:bb:07:a4:77:85:6f:
a5:f7:b9:58:ae:78:60:8b:08:d3:0b:27:e5:ef:21:36:38:45:
f7:f5:f4:8c:70:47:04:4c:a5:7d:73:c7:6d:5a:06:fe:ba:7d:
57:9b:28:54:1b:fc:9d:f4:f6:17:fe:11:36:21:96:cc:ae:c8:
07:c6:6a:a8:d6:5d:3d:7f:9d:0f:f0:60:68:b3:bb:0a:41:f5:
5f:6d:77:be:03:d8:ed:57:f8:42:5d:65:69:7e:5c:ab:34:ab:
30:f5:6d:49:99:37:d2:35:1d:cd:46:52:37:5d:b8:01:09:1f:
c3:b3:58:2a:48:8d:05:9c:e9:d1:96:a7:cd:b3:58:06:af:33:
0a:7d:bb:1e:2f:8b:d2:ba:2f:4b:e2:f0:67:07:ac:03:6d:7f:
3c:c9:2d:cc:cd:85:ee:72:c9:3d:7a:00:09:04:c1:63:3b:85:
76:0f:c8:5e:58:30:01:db:67:f1:69:78:5a:9b:c5:e8:29:14:
29:3e:01:3f:d9:b1:cc:d9:02:e2:b6:78:61:98:57:c9:f2:83:
fa:a2:7c:18:ca:94:ec:cb:ee:74:3d:2e:d0:59:bf:98:40:3b:
ef:69:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:54:10 2026 by rpki-client