Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/4BA72CDE8D8611F188BA33FFCE1D38B0.roa
File: 4BA72CDE8D8611F188BA33FFCE1D38B0.roa (raw, json)
Hash identifier: cw9g2s04/COrl+LRO4OYoMGslSquNMRf6PN6a84xlKA=
Subject key identifier: 4F:63:64:63:24:32:33:AE:EC:77:C7:B6:98:66:D8:B0:54:DD:77:4D
Certificate issuer: /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Certificate serial: 0572
Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/4BA72CDE8D8611F188BA33FFCE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:52:16 +0000
ROA not before: Sat 01 Aug 2026 08:52:12 +0000
ROA not after: Fri 31 Dec 2032 08:52:12 +0000
asID: 37204
IP address blocks: 41.220.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36406B8AF, serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Validity
Not Before: Aug 1 08:52:12 2026 GMT
Not After : Dec 31 08:52:12 2032 GMT
Subject: CN=6a6db3c0-eb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:5f:d6:84:54:f7:72:3c:1d:31:0b:50:17:
72:41:0a:3f:a0:5e:8c:bf:f9:27:7a:f8:05:a7:ea:
9f:d4:23:8d:b3:97:db:26:0b:93:95:07:22:34:e1:
85:f0:ce:6d:4e:c8:65:5a:f4:cb:a2:53:8b:cb:b8:
4e:56:71:2b:c3:cd:5e:be:fc:8e:aa:a6:f2:b3:3a:
e0:0e:ad:9e:57:62:7e:00:03:81:87:01:82:b7:43:
43:a8:e2:aa:e5:2a:a0:0c:6f:a8:35:57:9a:42:27:
49:ea:25:f1:a2:97:4b:fe:5a:be:4a:73:b5:7c:86:
9e:bd:b9:16:8f:d2:e3:a6:ba:83:5c:9c:78:5d:d9:
6b:85:ee:99:4f:e8:60:63:0c:3a:60:b6:63:7d:ca:
ca:f9:e9:06:bd:ea:de:b5:42:67:e6:c7:2b:b8:b8:
50:c4:2a:e6:8f:f9:62:df:c4:ea:c0:a1:34:b2:7a:
a5:28:52:4e:d6:78:11:25:f4:42:29:d6:6c:e0:f2:
a0:d7:5c:76:10:93:92:ed:4f:1b:77:a5:88:49:60:
ea:1f:29:b4:12:92:fc:91:b3:7d:bb:3f:35:de:45:
0d:b7:8a:26:03:01:8e:28:00:25:31:6c:e0:7a:fa:
e9:b3:34:25:ed:56:c1:e7:4a:7e:9b:86:23:7f:54:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:64:63:24:32:33:AE:EC:77:C7:B6:98:66:D8:B0:54:DD:77:4D
X509v3 Authority Key Identifier:
keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/4BA72CDE8D8611F188BA33FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.220.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:fb:48:58:97:57:fe:f4:50:b5:c0:78:13:ff:e1:51:a4:44:
25:b8:ea:c3:2f:ec:b3:e5:a3:61:7d:25:18:86:be:15:54:38:
1a:5c:f3:15:bc:23:cd:0b:c4:0f:9e:00:2d:3b:a2:d6:7b:31:
35:0d:f0:bf:80:a3:a3:f3:f9:66:40:f8:75:ed:00:1d:15:19:
61:0f:ac:44:b6:0e:f6:dc:4b:9f:16:7b:2c:77:f5:01:5b:2b:
c3:f2:4a:68:5e:43:02:e9:5a:70:67:50:f7:54:9d:b2:b7:fb:
90:fd:85:1e:72:c2:a0:8d:bc:3c:94:16:b3:ea:1c:66:a7:95:
1d:db:df:4a:7d:b6:cf:8c:e8:78:87:9a:b0:03:ed:e8:c2:6c:
2b:33:a7:c6:89:c6:18:41:1e:ee:47:2f:01:e5:a7:b5:b2:5e:
5e:25:74:04:a2:c8:eb:30:a3:1f:ae:0d:03:d7:7d:e8:60:cf:
82:bb:e6:14:52:0f:26:f6:6e:0d:bd:55:bc:4a:be:0c:21:45:
77:35:72:19:44:69:ab:58:87:05:01:17:58:68:b6:49:34:0d:
d4:05:8b:e7:01:24:f7:db:37:fe:7e:88:61:1a:c3:dc:b6:c6:
e7:c4:1d:42:db:ba:a8:86:58:df:be:29:af:18:e2:f1:d8:99:
e4:9d:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:33 2026 by rpki-client