Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/C84F69DA3C2E11F19351E9FACE1D38B0.roa
File: C84F69DA3C2E11F19351E9FACE1D38B0.roa (raw, json)
Hash identifier: JTiyDr+BPnV+iWLl31rjRDSZljo6336haFDyUifLeJ4=
Subject key identifier: E1:9B:DE:35:45:43:18:EF:6F:42:38:8C:41:5C:CA:9F:BD:19:20:3C
Certificate issuer: /CN=F3679C5DAF/serialNumber=13B2A1936158F4B74D274E586CA1DD39A95DE936
Certificate serial: 02
Authority key identifier: 13:B2:A1:93:61:58:F4:B7:4D:27:4E:58:6C:A1:DD:39:A9:5D:E9:36
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/E7Khk2FY9LdNJ05YbKHdOald6TY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/C84F69DA3C2E11F19351E9FACE1D38B0.roa
Signing time: Sun 19 Apr 2026 20:31:46 +0000
ROA not before: Sun 19 Apr 2026 20:31:32 +0000
ROA not after: Wed 19 Apr 2028 20:31:32 +0000
asID: 37427
IP address blocks: 41.79.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/E7Khk2FY9LdNJ05YbKHdOald6TY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/E7Khk2FY9LdNJ05YbKHdOald6TY.mft
rsync://rpki.afrinic.net/repository/afrinic/E7Khk2FY9LdNJ05YbKHdOald6TY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3679C5DAF, serialNumber=13B2A1936158F4B74D274E586CA1DD39A95DE936
Validity
Not Before: Apr 19 20:31:32 2026 GMT
Not After : Apr 19 20:31:32 2028 GMT
Subject: CN=69e53bb1-ec2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:db:ed:fb:dc:71:bd:95:14:23:20:b9:79:
7b:bf:1b:f8:ae:45:92:d1:52:aa:04:51:74:2a:ad:
f4:2f:6e:b4:b0:0f:40:f0:b2:4b:08:cd:6f:6a:15:
3d:98:d9:e9:85:31:bb:df:d0:4a:1f:bf:d1:2e:de:
84:56:05:78:9a:67:94:a6:0b:2f:c1:f7:f5:70:c7:
31:e7:77:63:69:7e:86:cf:ae:4a:aa:bc:3f:53:ef:
f9:5e:4d:fd:07:32:50:b8:a0:1a:71:25:6a:aa:57:
eb:0d:7f:6e:db:e4:26:91:f4:cb:0d:93:82:54:6b:
77:65:01:f4:ef:21:6b:84:1c:ac:4b:14:d9:27:52:
d8:76:04:00:37:5e:a8:88:9f:38:41:a0:7b:55:72:
95:20:d9:41:c8:31:5f:15:5f:35:ca:25:fe:1d:0a:
e4:69:f9:84:0d:e3:ca:d8:33:2c:6b:84:83:3d:07:
e6:d3:5d:7c:da:01:ca:72:cd:b4:e8:ea:fc:f5:38:
9a:31:bb:39:b5:f6:c6:98:05:32:9e:49:d7:4c:f5:
75:25:97:2e:f1:05:a9:5f:df:d6:27:9e:e4:e6:9e:
3d:5a:23:29:b7:79:8e:3d:79:a9:f3:24:b8:2a:73:
81:4e:62:df:cc:d7:da:f0:ee:26:e7:37:39:f1:3d:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9B:DE:35:45:43:18:EF:6F:42:38:8C:41:5C:CA:9F:BD:19:20:3C
X509v3 Authority Key Identifier:
keyid:13:B2:A1:93:61:58:F4:B7:4D:27:4E:58:6C:A1:DD:39:A9:5D:E9:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/E7Khk2FY9LdNJ05YbKHdOald6TY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E7Khk2FY9LdNJ05YbKHdOald6TY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/C84F69DA3C2E11F19351E9FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:41:ce:60:dc:01:f9:28:0a:7a:cb:e8:75:35:fa:09:01:5d:
59:60:d9:51:a8:4e:f4:40:38:90:d6:0f:55:11:2e:26:84:b5:
93:6f:48:6f:30:92:48:91:b2:33:d7:94:c0:0d:41:3c:a3:e9:
35:b2:e0:65:b8:d2:e1:7c:92:c0:c5:5b:08:29:40:4a:1a:38:
0a:ae:e5:f7:e8:06:87:14:eb:7f:a5:1c:76:db:86:18:b1:11:
88:23:09:3b:bb:01:6b:b4:13:3e:38:7e:b3:a3:7f:e6:68:53:
c3:16:b0:98:7b:9c:ec:d4:62:82:70:cc:0c:f8:0b:e2:d6:6b:
88:75:11:ec:03:c7:1a:a3:53:bd:e2:c0:4b:04:e7:2f:60:66:
4d:89:30:08:57:71:27:ed:2f:99:3d:e9:44:12:ff:41:94:ce:
ba:53:87:9d:72:b9:43:30:4a:a2:d4:cd:1f:7d:69:15:86:89:
e3:b3:5c:f1:54:4d:da:ef:0f:b1:49:cb:aa:5f:77:a9:69:7c:
32:00:f0:08:db:25:9d:be:3f:75:6d:da:a5:8e:56:eb:27:2a:
03:30:4a:cb:71:b5:90:f8:3b:cf:e7:1f:2e:f7:03:17:d9:a8:
9f:1d:9a:2b:95:23:02:6c:34:f4:21:c1:0b:58:fc:07:30:86:
97:cb:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 22:24:49 2026 by rpki-client