Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/D3889C5416FE11F1868C37DDDAE4EC9C.roa
File: D3889C5416FE11F1868C37DDDAE4EC9C.roa (raw, json)
Hash identifier: e9aj0AyfiLUBHA5SdIZzslx9F5Gw9A9kMebTQ3dTtAg=
Subject key identifier: 44:26:87:AF:37:33:90:94:38:54:55:EF:E0:4B:2F:44:77:A9:3A:DA
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 04C4
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/D3889C5416FE11F1868C37DDDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 12:45:15 +0000
ROA not before: Tue 03 Mar 2026 12:45:11 +0000
ROA not after: Sun 03 Mar 2030 12:45:11 +0000
asID: 29286
IP address blocks: 41.218.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 02:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 3 12:45:11 2026 GMT
Not After : Mar 3 12:45:11 2030 GMT
Subject: CN=69a6d7db-45e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:ac:03:a9:50:2c:6c:60:ff:8f:8e:5b:db:
43:5f:4d:09:ad:a2:f9:67:88:42:ea:47:54:6b:ae:
6e:7a:c4:03:17:f6:02:3d:e7:6c:86:6c:f9:e1:e0:
23:f1:08:a4:98:5e:0c:ce:77:3b:57:82:42:74:09:
92:3c:e2:22:e6:e9:12:8c:2d:b6:0f:09:31:46:a0:
86:61:d0:de:c9:25:ee:c1:f8:5b:4c:d7:f8:9f:0d:
d8:09:13:d8:39:d7:49:79:e4:38:33:1e:1a:d7:f9:
01:dc:d1:28:55:d5:30:e2:c2:5d:d7:23:53:4d:69:
72:65:f8:bd:c7:86:aa:97:13:58:96:71:d8:54:31:
13:56:e4:98:bb:03:cd:1e:b1:60:56:89:03:68:f4:
e3:12:67:9f:9c:d8:34:c1:d8:51:69:ef:3f:64:fe:
15:49:35:ed:29:5e:6c:e5:af:f1:f6:92:35:c2:2e:
c2:82:f5:e4:2e:22:3f:f9:c9:5f:68:88:3f:35:c5:
91:69:c1:0b:79:5a:a4:80:86:47:df:40:d7:ea:e2:
a4:0a:f0:d9:8e:61:bc:ba:b4:c4:84:0c:89:8a:6a:
30:c0:8e:59:71:d8:0d:1b:50:2f:f8:22:42:19:fa:
e5:8d:fd:fc:d4:90:36:fe:21:9d:56:bb:6e:d5:63:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:26:87:AF:37:33:90:94:38:54:55:EF:E0:4B:2F:44:77:A9:3A:DA
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/D3889C5416FE11F1868C37DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.218.108.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cb:93:e6:81:51:5b:75:ba:7e:97:16:3e:c9:ae:29:5a:1e:
09:dd:10:19:aa:be:b4:ec:da:2c:99:3a:2f:ff:2f:c2:79:2f:
a1:51:9c:60:6c:ed:ea:8e:a1:6c:8e:73:d7:b0:95:3b:59:28:
9e:41:5a:fc:e4:28:58:1e:03:2b:b1:8d:93:e1:ea:9b:4d:25:
2f:56:8f:3c:8c:f3:94:bc:17:74:ab:9e:8b:4b:f6:8b:34:01:
63:66:07:8e:8b:03:8b:6a:44:4f:2c:66:dc:46:8f:f3:c3:b5:
84:99:e5:35:a7:19:0b:a5:f7:46:60:3c:1d:1d:64:d5:bc:a2:
f0:b0:a3:7b:95:b6:4d:04:0e:6d:a9:8f:22:4a:02:e4:25:f9:
7c:fa:d8:b7:f1:1a:19:fc:7b:df:01:d8:8c:25:b4:79:ba:d2:
3c:34:47:dc:0b:d6:40:4b:aa:c9:85:e9:11:73:2e:33:59:2c:
e5:31:f3:b8:83:cb:6c:28:00:a4:1d:55:67:7c:63:96:76:b1:
29:3a:17:45:8c:e4:6e:97:c2:05:1b:56:8c:6e:3f:5c:3a:a2:
ba:9c:c3:24:9e:8e:a8:9a:dd:1a:77:9f:7b:a9:c9:cd:d8:0d:
6e:50:e5:89:1f:43:c0:41:11:f6:61:9e:85:eb:43:8a:e2:4a:
6f:0a:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:43:13 2026 by rpki-client