Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/F31DBFBA898411F1B4E85704CF1D38B0.roa
File: F31DBFBA898411F1B4E85704CF1D38B0.roa (raw, json)
Hash identifier: 8PMDISLlU/TEBQnSnCiE3EbThwDUph7JmIcnQ4JcjVQ=
Subject key identifier: 41:76:CA:22:E4:F8:F6:6D:DB:4C:70:16:81:A0:8F:16:CF:0F:96:A2
Certificate issuer: /CN=F361935CAF/serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Certificate serial: 0610
Authority key identifier: 19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/F31DBFBA898411F1B4E85704CF1D38B0.roa
Signing time: Mon 27 Jul 2026 06:32:34 +0000
ROA not before: Mon 27 Jul 2026 06:32:29 +0000
ROA not after: Tue 31 Dec 2030 06:32:29 +0000
asID: 327741
IP address blocks: 41.77.80.0/24 maxlen: 24
41.77.81.0/24 maxlen: 24
41.77.82.0/24 maxlen: 24
41.77.83.0/24 maxlen: 24
41.77.84.0/24 maxlen: 24
41.77.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Jul 2026 06:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552 (0x610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361935CAF, serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Validity
Not Before: Jul 27 06:32:29 2026 GMT
Not After : Dec 31 06:32:29 2030 GMT
Subject: CN=6a66fb81-35ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:8b:d6:e0:72:1d:1b:53:78:9b:b0:19:4c:
14:b6:16:23:d3:d4:8f:02:9d:4c:21:07:52:57:41:
4e:0c:7a:4a:01:36:d0:e8:1b:c3:43:56:d1:44:fc:
f0:a6:31:30:ba:d5:38:5b:e9:71:e4:56:1d:6a:16:
a0:23:23:32:9e:a0:8c:8e:1a:01:a5:12:62:0e:65:
b9:25:cb:80:31:ec:d3:d6:5b:4c:b4:2c:ce:71:ad:
5b:bf:e9:86:f6:6a:37:b3:de:59:d4:fe:0e:97:d9:
90:81:e8:42:ac:8a:14:8d:45:d8:47:24:33:11:6a:
aa:79:0c:d6:01:56:51:bb:10:e3:89:30:f3:61:bb:
ff:ca:40:51:8e:52:e3:ea:c9:e7:89:fc:37:77:f0:
7e:77:e6:54:ef:af:89:3a:e7:f1:b2:ae:ae:1d:fc:
a9:72:fd:b5:78:10:01:66:0b:d8:16:50:e6:02:be:
72:b3:1c:22:4c:ee:b1:b6:2d:81:c1:87:6d:82:43:
71:78:b9:7b:7a:ff:d1:47:88:09:3e:d9:a0:21:61:
e9:5f:04:ee:64:8d:fc:41:8a:65:e5:83:49:6b:a0:
1c:5f:ab:8e:5d:ad:11:43:3f:f7:d9:34:97:19:fe:
f1:9b:7f:2f:23:c3:4b:45:b4:1e:9f:02:0f:d0:56:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:CA:22:E4:F8:F6:6D:DB:4C:70:16:81:A0:8F:16:CF:0F:96:A2
X509v3 Authority Key Identifier:
keyid:19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/F31DBFBA898411F1B4E85704CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.77.80.0-41.77.85.255
Signature Algorithm: sha256WithRSAEncryption
5d:3f:b8:2c:0c:51:a3:a5:b0:c1:83:1c:75:9b:ac:6b:d2:a4:
40:20:f2:3f:94:8c:bd:8a:11:65:aa:1b:be:e9:d2:c3:37:10:
f0:5c:71:14:6d:95:f6:cc:04:a6:ea:b4:27:50:91:8b:da:44:
a7:10:0d:db:eb:6f:af:e4:8a:9a:55:7e:2b:f9:71:d1:8f:00:
9e:43:4a:2f:e9:49:39:a0:cf:b9:34:15:fb:e2:f7:f8:16:fa:
df:a3:66:4f:d7:15:75:13:2e:94:66:51:49:97:0d:d1:45:bd:
15:6f:c6:2d:e9:6c:cc:e0:c8:ea:c4:33:1b:07:98:a5:c6:53:
2f:cb:b2:6a:82:90:1b:c0:d1:83:a2:d0:57:d4:b3:5a:3f:95:
f1:ff:3d:8b:86:58:08:ac:fe:c1:01:9b:67:7a:2e:74:5c:46:
74:8a:7b:9f:40:3e:8a:5d:fb:28:65:4b:21:4a:f6:cd:0f:8c:
a4:5e:d8:15:56:7d:3a:86:8f:57:19:b4:67:3b:58:b2:42:f8:
c8:73:40:41:fd:f3:7e:a6:1d:e2:8d:0b:69:50:ab:a7:c5:d2:
11:0e:71:4b:71:62:a4:63:fd:de:9b:36:36:8b:7f:84:28:81:
14:3e:54:9f:e9:3b:bb:44:ee:06:68:6b:27:f4:7f:d4:95:b7:
6a:ed:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:30:56 2026 by rpki-client