Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/0394C7BE8C0811F193C445DFCE1D38B0.roa
File: 0394C7BE8C0811F193C445DFCE1D38B0.roa (raw, json)
Hash identifier: wdURzVK1a/KpzEXG1RiX/4RwWa6X60ZGsVDf1L8Z7G0=
Subject key identifier: 8E:5B:AE:D7:1F:0C:43:5D:D6:51:A6:23:93:CB:8F:29:EE:0A:06:FF
Certificate issuer: /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial: 085C
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/0394C7BE8C0811F193C445DFCE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:15:48 +0000
ROA not before: Thu 30 Jul 2026 11:15:44 +0000
ROA not after: Sat 03 Aug 2030 11:15:44 +0000
asID: 37619
IP address blocks: 41.197.0.0/20 maxlen: 20
41.197.16.0/20 maxlen: 20
41.197.96.0/20 maxlen: 20
41.197.128.0/20 maxlen: 20
41.197.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363ADF7AF, serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Validity
Not Before: Jul 30 11:15:44 2026 GMT
Not After : Aug 3 11:15:44 2030 GMT
Subject: CN=6a6b3263-a252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:e0:6a:89:f3:a3:4c:cf:53:49:54:57:34:
97:68:46:ab:3d:47:eb:8d:1d:f3:b4:e2:1f:7f:3a:
1d:4f:dc:87:37:2f:25:02:58:58:58:b8:d6:b6:a9:
b9:fc:94:d7:cb:60:c9:4b:98:55:0d:29:32:64:11:
ca:d6:51:b1:03:bc:65:6b:cc:1c:c0:30:e6:fd:6d:
f8:98:17:b3:16:10:32:d4:ac:93:bc:24:21:3d:35:
2f:3d:3e:73:90:5c:f4:1f:46:5e:6e:ee:9b:ed:29:
ba:9c:cc:5b:c4:45:1c:c3:88:0b:6d:b5:7d:a6:d3:
95:67:3b:48:50:c2:73:c9:ac:d9:96:b4:74:40:2e:
d9:99:ae:a9:36:eb:65:6f:fb:cf:87:d8:ff:b6:2e:
3f:de:ac:fc:9d:84:72:f3:33:78:9a:84:e2:5d:bd:
1b:81:2d:6b:28:2f:d5:ec:9e:09:5b:c0:69:d3:3e:
91:a0:bc:23:a7:0f:d5:fe:d1:2a:c9:ab:09:3d:aa:
aa:a7:ac:e8:18:92:9f:3a:ab:0f:9d:b5:07:c2:ff:
75:7a:37:60:dd:70:be:f3:85:98:4e:32:8f:41:df:
e4:14:b2:89:5a:12:94:87:81:a3:6a:7e:f6:19:0d:
48:3a:2e:89:45:0d:60:7d:7f:6e:b8:c7:6b:5c:89:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:AE:D7:1F:0C:43:5D:D6:51:A6:23:93:CB:8F:29:EE:0A:06:FF
X509v3 Authority Key Identifier:
keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/0394C7BE8C0811F193C445DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.197.0.0/19
41.197.96.0/20
41.197.128.0/20
41.197.240.0/21
Signature Algorithm: sha256WithRSAEncryption
26:1f:6a:ab:a6:23:97:48:24:98:97:a0:0f:8a:88:5c:f2:3a:
6c:ac:25:2b:15:22:71:c6:14:9a:01:3c:fe:d6:8d:1f:55:1d:
3e:26:80:90:0d:31:f6:5d:70:db:b4:91:ee:a8:d3:17:89:ab:
4b:3f:d2:03:c3:2a:a1:26:3b:28:ff:54:92:14:f6:95:4c:8d:
d3:77:b2:54:7f:86:7b:cb:a3:cd:f1:d5:34:b1:17:11:96:ca:
be:4e:19:32:c7:54:f5:b0:30:ff:d7:ff:f1:a2:b4:b5:e7:01:
a4:d0:99:db:b5:02:4f:77:02:cf:c6:10:0e:96:52:e6:aa:4b:
4a:d5:2b:87:40:7b:8f:b0:3d:fe:ac:8f:98:28:45:7b:7e:bf:
d0:94:51:43:b9:a3:10:24:a3:2b:87:1f:30:7c:65:85:58:1d:
4e:2c:5c:94:ec:8e:8a:a4:b8:68:ff:41:3c:45:87:62:a4:3f:
1c:19:c2:93:d8:99:cc:3f:fb:b8:0c:0d:7d:eb:b6:05:52:81:
c9:41:03:a9:e2:72:16:94:e8:9e:7a:c6:72:f0:39:ae:2a:d2:
f9:c7:3c:5f:21:c9:f2:48:95:cf:31:7f:ee:62:72:3f:39:ff:
ee:ab:12:00:08:27:cb:6f:e1:d4:be:4b:20:57:32:b5:87:8d:
b3:a5:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:20 2026 by rpki-client