Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/50BE21588FCC11F1B4CB3AD1CE1D38B0.roa
File: 50BE21588FCC11F1B4CB3AD1CE1D38B0.roa (raw, json)
Hash identifier: jehT4w4l4yjlEklCE/woHJl77Wd5+kKmPfYLjQCak+U=
Subject key identifier: 86:C5:7D:EE:64:E0:5E:5E:54:7F:97:EF:D8:B3:35:0C:9A:6C:FF:93
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 05D3
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/50BE21588FCC11F1B4CB3AD1CE1D38B0.roa
Signing time: Tue 04 Aug 2026 06:18:32 +0000
ROA not before: Tue 04 Aug 2026 06:18:28 +0000
ROA not after: Sun 05 Sep 2032 06:18:28 +0000
asID: 37638
IP address blocks: 41.190.232.0/24 maxlen: 24
41.190.233.0/24 maxlen: 24
41.190.234.0/24 maxlen: 24
41.190.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1491 (0x5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Aug 4 06:18:28 2026 GMT
Not After : Sep 5 06:18:28 2032 GMT
Subject: CN=6a718438-85a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:fc:a5:b3:b7:c2:78:65:09:97:5a:2e:da:
89:a4:26:73:fd:e0:53:1d:01:4e:51:d4:4f:d7:e5:
60:e9:b8:01:bf:2b:58:14:6c:37:84:e0:14:45:f3:
12:7e:c5:62:8d:4d:91:98:59:4e:ee:2c:da:12:86:
fd:54:6e:0e:3e:e7:51:34:4b:b5:70:fa:f9:ce:8c:
df:03:22:2d:7a:19:34:88:f2:ae:61:11:e1:00:96:
ff:04:6d:7e:22:0f:5b:da:ee:ff:db:22:ad:95:c6:
29:e6:ec:23:2c:a6:34:96:05:45:24:47:d4:14:8f:
f1:84:7a:83:c6:2d:a0:db:48:6b:76:d2:52:06:04:
3b:3b:28:a1:94:6f:46:2e:6b:bc:c1:eb:9d:be:fa:
3f:6b:1c:ac:2b:4f:54:b7:1d:69:85:d2:81:db:24:
c5:a1:83:17:f7:06:0e:69:65:ad:d9:8c:ae:11:bb:
f5:e5:77:c8:c5:80:f6:14:63:52:33:7f:bf:93:23:
d8:aa:56:8f:89:c6:47:62:7b:5e:09:2e:92:2b:52:
89:e6:69:16:78:9a:e9:15:2b:77:5f:af:ee:26:19:
33:30:b8:ed:1e:a0:38:bb:c3:5e:8b:60:5a:19:2e:
f3:75:e7:b4:a7:a0:65:6d:28:56:63:d3:4b:c4:09:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C5:7D:EE:64:E0:5E:5E:54:7F:97:EF:D8:B3:35:0C:9A:6C:FF:93
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/50BE21588FCC11F1B4CB3AD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.190.232.0/22
Signature Algorithm: sha256WithRSAEncryption
36:6a:25:f5:bf:9a:30:7b:8f:e8:85:fa:d5:d7:85:01:96:4c:
e0:eb:53:b1:e6:dc:61:3b:ef:db:89:6a:a9:c5:f1:62:04:55:
d1:9c:d9:3b:01:4d:4a:02:72:08:24:c6:e6:25:fa:f1:b9:f7:
1d:51:7d:19:d6:24:ff:8d:71:e7:c0:40:6b:0e:0b:f9:2f:19:
0c:cc:af:cd:a1:e7:9e:c8:18:1e:82:99:51:17:de:ec:57:c6:
a6:1a:6f:72:05:98:73:79:8d:1a:3d:f2:52:98:33:d5:40:0d:
ed:90:9d:8b:7e:86:59:d6:49:ae:88:67:a5:22:b7:72:aa:2f:
a5:e1:4d:67:e3:74:b1:1d:c6:67:99:48:ba:ff:45:ba:9b:7b:
0a:66:0a:c4:96:09:69:c7:50:78:82:e9:7c:c8:c4:96:d2:dc:
64:cf:e0:6b:b7:38:0e:6e:af:0b:ce:35:43:5e:f3:7b:2f:4c:
03:8e:17:0d:ba:a2:6f:ba:43:b7:6b:e3:28:14:58:a4:40:2d:
1a:f6:e1:69:70:9b:39:a2:9d:e2:a6:a0:c7:1b:2d:06:fe:ab:
a5:d5:24:4c:d8:c7:10:15:e9:41:08:9f:5d:ba:d5:6e:39:11:
3f:49:2a:5e:15:ce:b2:01:1a:5f:66:20:4b:8f:ab:d1:8f:13:
24:43:d0:af
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBRjExMC8GA1UEBRMoODRCQzIyQTE0QkI1Rjg4OUJDMTBBMjJDRjE3QzlD
MTlCNTE5QjI4ODAeFw0yNjA4MDQwNjE4MjhaFw0zMjA5MDUwNjE4MjhaMBgxFjAU
BgNVBAMTDTZhNzE4NDM4LTg1YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1bPyls7fCeGUJl1ou2omkJnP94FMdAU5R1E/X5WDpuAG/K1gUbDeE4BRF
8xJ+xWKNTZGYWU7uLNoShv1Ubg4+51E0S7Vw+vnOjN8DIi16GTSI8q5hEeEAlv8E
bX4iD1va7v/bIq2Vxinm7CMspjSWBUUkR9QUj/GEeoPGLaDbSGt20lIGBDs7KKGU
b0Yua7zB652++j9rHKwrT1S3HWmF0oHbJMWhgxf3Bg5pZa3ZjK4Ru/Xld8jFgPYU
Y1Izf7+TI9iqVo+Jxkdie14JLpIrUonmaRZ4mukVK3dfr+4mGTMwuO0eoDi7w16L
YFoZLvN157SnoGVtKFZj00vECf6/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhsV9
7mTgXl5Uf5fv2LM1DJps/5MwHwYDVR0jBBgwFoAUhLwioUu1+Im8EKIs8XycGbUZ
sogwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0NERDc0RDc2MkQxQjExRURCRTAwODg4QkYxMjIyNDY4L2hMd2lv
VXUxLUltOEVLSXM4WHljR2JVWnNvZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hMd2lvVXUxLUltOEVLSXM4WHljR2JVWnNvZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkE0NDU5L0NERDc0RDc2MkQxQjExRURCRTAwODg4QkYx
MjIyNDY4LzUwQkUyMTU4OEZDQzExRjFCNENCM0FEMUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIpvugwDQYJKoZIhvcNAQEL
BQADggEBADZqJfW/mjB7j+iF+tXXhQGWTODrU7Hm3GE779uJaqnF8WIEVdGc2TsB
TUoCcggkxuYl+vG59x1RfRnWJP+NcefAQGsOC/kvGQzMr82h557IGB6CmVEX3uxX
xqYab3IFmHN5jRo98lKYM9VADe2QnYt+hlnWSa6IZ6Uit3KqL6XhTWfjdLEdxmeZ
SLr/RbqbewpmCsSWCWnHUHiC6XzIxJbS3GTP4Gu3OA5urwvONUNe83svTAOOFw26
om+6Q7dr4ygUWKRALRr24WlwmzmineKmoMcbLQb+q6XVJEzYxxAV6UEIn1261W45
ET9JKl4VzrIBGl9mIEuPq9GPEyRD0K8=
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:39:36 2026 by rpki-client