Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/3A76263A1C6211F1ADDFF9C3DAE4EC9C.roa
File: 3A76263A1C6211F1ADDFF9C3DAE4EC9C.roa (raw, json)
Hash identifier: REuAOlE2BNzgo7YoEU2hdXZQivK8fOJn7CrtB/+yhKw=
Subject key identifier: AF:20:24:E0:07:AD:6E:4E:83:7C:8F:5B:67:37:CD:0A:4D:BD:02:2E
Certificate issuer: /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial: 0657
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/3A76263A1C6211F1ADDFF9C3DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 09:19:25 +0000
ROA not before: Tue 10 Mar 2026 09:19:19 +0000
ROA not after: Wed 01 Dec 2049 09:19:19 +0000
asID: 327979
IP address blocks: 41.76.104.0/21 maxlen: 24
41.76.104.0/24 maxlen: 24
41.76.105.0/24 maxlen: 24
41.76.106.0/24 maxlen: 24
41.76.107.0/24 maxlen: 24
41.76.108.0/24 maxlen: 24
41.76.109.0/24 maxlen: 24
41.76.110.0/24 maxlen: 24
41.76.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 22 Mar 2026 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Validity
Not Before: Mar 10 09:19:19 2026 GMT
Not After : Dec 1 09:19:19 2049 GMT
Subject: CN=69afe21d-6902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:5d:4e:0e:c6:d1:c1:49:18:22:d8:a8:15:
36:d0:03:61:62:34:8a:1f:06:11:42:ac:49:be:a4:
4b:29:e2:16:ba:af:5b:6f:3a:a0:1a:7c:15:f7:a0:
09:ed:ff:fb:b6:63:a6:12:08:c6:2f:82:18:34:8b:
b8:52:21:bd:31:7c:00:a2:2a:38:cc:b7:fc:37:69:
11:a4:2e:c5:dc:c7:3e:f2:53:d9:0d:f9:46:16:9c:
d1:af:8b:29:d1:79:dd:61:47:46:10:b4:99:9d:07:
df:60:aa:8f:81:09:0f:32:ae:ea:3a:1e:63:54:41:
23:30:f6:ce:0f:15:ee:17:d2:d1:81:a9:f4:7c:b2:
39:f8:97:b3:08:74:58:6b:73:f4:23:5d:cf:7c:6a:
1c:bd:32:5f:5b:51:92:75:6e:40:2b:ca:48:84:eb:
75:62:8c:6d:9c:a1:aa:aa:cc:97:1a:f1:06:59:65:
79:3d:f4:37:8d:1a:bc:5d:64:ee:9c:02:bf:37:61:
f9:ac:8e:e7:da:6f:78:d9:bc:cd:e0:22:fa:2f:e5:
7e:74:df:2b:a2:5c:2f:fb:b1:65:b3:b6:0a:34:05:
73:d8:97:81:8d:ac:3e:fc:d5:04:d6:d3:3b:09:17:
1e:b9:11:87:e4:e9:dd:46:05:13:c0:32:08:b1:0f:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:20:24:E0:07:AD:6E:4E:83:7C:8F:5B:67:37:CD:0A:4D:BD:02:2E
X509v3 Authority Key Identifier:
keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/3A76263A1C6211F1ADDFF9C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.104.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:5b:10:cf:1c:4b:fc:16:7d:e8:6f:56:b8:76:7a:a3:31:ef:
85:53:13:32:e2:69:7e:1b:d0:04:ce:e9:90:1b:43:e4:f9:44:
20:fb:12:08:76:30:22:d8:40:2b:fa:4f:97:88:6a:5b:a9:11:
ae:24:3b:4a:24:fc:7f:14:50:85:31:e1:9a:ed:4e:7c:77:20:
65:6d:21:71:f1:95:52:51:74:18:42:52:b9:9d:bb:c0:0b:ea:
bb:2b:ee:f2:74:93:d3:8d:fb:b0:cb:d0:5e:df:30:0d:45:d8:
82:26:c4:a8:26:f9:f0:44:d7:0c:a6:e1:9d:a7:07:6a:f4:a7:
d2:bc:83:44:11:cc:5d:cf:f2:ef:4c:da:1d:c5:6f:55:5c:b7:
b0:80:b6:a3:88:1e:d3:24:29:0b:37:83:1c:cd:f8:bb:21:25:
a4:20:d3:39:e2:d7:17:b3:84:97:43:a4:c8:03:6d:a8:cf:18:
27:46:1a:5d:8e:11:d2:29:e5:82:11:c7:5c:72:14:0c:91:d5:
20:7e:1b:60:09:84:5c:97:db:26:17:e4:d5:6d:06:80:b1:a4:
7b:34:97:c8:e9:dd:b9:a3:a7:00:b3:38:ff:97:35:32:ed:9d:
c0:ce:71:8e:86:0a:da:c2:88:b1:74:35:12:ce:ef:d5:9b:02:
23:6a:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 23:36:06 2026 by rpki-client