Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/4FCC04223A6811F1A30B30AACE1D38B0.roa
File: 4FCC04223A6811F1A30B30AACE1D38B0.roa (raw, json)
Hash identifier: kWGqFsDRkG7kv8ZBBDntu5jcnDPJI4Lk8Rn5mfMvSuc=
Subject key identifier: 2D:2D:AC:4B:0A:73:C8:D6:67:3C:29:75:E6:4B:09:E5:28:3C:A8:5C
Certificate issuer: /CN=F36424BFAF/serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
Certificate serial: 02
Authority key identifier: 06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/4FCC04223A6811F1A30B30AACE1D38B0.roa
Signing time: Fri 17 Apr 2026 14:18:32 +0000
ROA not before: Fri 17 Apr 2026 14:18:27 +0000
ROA not after: Wed 17 Apr 2030 14:18:27 +0000
asID: 37371
IP address blocks: 41.78.72.0/24 maxlen: 24
41.78.73.0/24 maxlen: 24
41.78.74.0/24 maxlen: 24
41.78.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36424BFAF, serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
Validity
Not Before: Apr 17 14:18:27 2026 GMT
Not After : Apr 17 14:18:27 2030 GMT
Subject: CN=69e24138-615d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:9c:ca:b7:e3:68:97:c2:a3:cf:04:b2:ad:
39:07:ec:bb:13:24:af:e7:f7:8b:a1:b8:09:2c:6b:
9a:ee:a2:a3:f9:6f:4a:92:42:3e:da:47:91:77:78:
ef:74:be:d1:06:52:c6:84:02:17:5a:bf:b0:b9:2e:
ad:1f:60:86:db:6d:de:0a:1a:c4:10:1e:7f:16:a8:
0a:7d:0c:0f:25:63:b3:73:6b:2a:1d:c5:41:54:73:
ea:1d:d4:f0:46:31:da:9c:ee:a7:02:f5:29:28:eb:
d7:de:57:56:42:0b:56:40:02:33:86:fe:2c:97:03:
ae:ba:69:1f:b4:51:14:74:ea:55:d1:91:21:72:8f:
78:79:9c:2d:33:67:05:77:0a:fb:51:b6:c2:77:8d:
8e:03:f8:d7:41:4a:5c:72:32:32:80:15:53:c1:80:
48:07:97:ab:31:01:78:22:d0:25:3f:fe:f2:4d:b7:
db:b2:cc:c8:10:94:48:d3:3a:fb:d3:fb:1a:7c:c9:
25:a7:70:74:87:2f:a5:a6:3d:b9:85:59:c9:41:db:
ae:6b:8d:ff:4c:7c:aa:49:ee:7c:e8:3c:cb:20:45:
de:6c:8c:4d:27:1b:a2:a4:db:64:ab:dc:dd:d5:94:
7e:42:5a:70:0e:d7:64:78:fb:1e:cf:52:39:9a:7e:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2D:AC:4B:0A:73:C8:D6:67:3C:29:75:E6:4B:09:E5:28:3C:A8:5C
X509v3 Authority Key Identifier:
keyid:06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/4FCC04223A6811F1A30B30AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.72.0/22
Signature Algorithm: sha256WithRSAEncryption
65:2b:2f:e4:f2:40:c3:64:a5:18:ec:9d:08:26:98:23:57:7f:
23:06:9f:a1:47:95:86:af:c4:d8:50:74:87:25:d9:1e:50:05:
e0:e3:ef:b0:dc:7a:9b:4d:ed:c8:36:7a:75:2d:63:8c:3b:9e:
fd:44:f4:12:b8:8d:9e:a1:84:5f:e6:04:e6:75:9d:2c:4a:6a:
0b:c8:b3:ad:1a:17:e1:50:82:4e:7d:e6:f7:9b:8b:18:79:ec:
67:19:aa:54:37:6c:6d:1e:f4:90:fb:21:27:c2:78:dd:47:c9:
f3:5d:5e:4f:ed:7b:e1:98:d4:27:17:57:4f:3e:45:e9:b5:63:
29:d2:79:fc:2f:4c:90:b4:39:15:db:e9:09:86:7a:3c:6c:3b:
bd:e3:10:af:5f:1a:5e:d8:36:b7:5e:05:2f:f2:ad:37:29:ac:
fb:a7:cd:d0:c3:e9:9d:db:bb:17:77:22:f6:51:e5:30:61:52:
69:b4:bf:0f:22:8f:0d:ab:78:92:f6:7d:09:b7:32:08:4e:e9:
b8:48:50:5b:89:c2:3a:d0:2d:1c:a3:40:9f:e3:9e:6a:67:74:
2c:0b:67:b1:d3:e4:f0:04:99:bc:b0:61:86:6e:dd:cd:2e:58:
ec:94:c4:fd:36:c3:6e:80:46:34:b5:d2:2a:a5:2b:9e:de:36:
08:f4:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:05:06 2026 by rpki-client