Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/DD559FC68FCF11F18B5977E7CE1D38B0.roa
File: DD559FC68FCF11F18B5977E7CE1D38B0.roa (raw, json)
Hash identifier: 88ReSMVzJ4BF1wDmtrF0G+NRMvDEU2WgJwfRanfSMO4=
Subject key identifier: B5:3F:07:23:89:88:97:7D:35:0E:E0:76:F3:B2:79:F6:2E:AB:43:4A
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 05D9
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/DD559FC68FCF11F18B5977E7CE1D38B0.roa
Signing time: Tue 04 Aug 2026 06:43:56 +0000
ROA not before: Tue 04 Aug 2026 06:43:52 +0000
ROA not after: Sun 05 Sep 2032 06:43:52 +0000
asID: 37638
IP address blocks: 41.190.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Aug 4 06:43:52 2026 GMT
Not After : Sep 5 06:43:52 2032 GMT
Subject: CN=6a718a2c-c20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:2c:08:66:b8:ff:ae:78:66:33:6b:1e:3e:
8d:99:e0:5b:6d:fc:93:23:67:b6:5d:94:82:aa:fb:
92:36:34:a4:11:63:9a:8b:e8:6b:e6:8a:34:ae:d1:
80:6f:c9:e6:42:27:f3:6e:ae:c8:6f:9b:4d:43:d8:
25:6a:ec:d6:b6:21:92:2f:35:d0:a6:c0:c7:2d:90:
c9:53:42:c0:c4:c0:fe:8e:f9:17:0e:fd:85:6a:61:
b0:fa:9a:0d:ef:d4:ab:b0:6c:6e:29:6f:14:c6:00:
67:f1:df:0a:de:90:ca:ac:63:4a:13:95:4a:10:98:
7e:48:87:33:bc:60:8c:9d:65:98:84:b5:98:48:da:
45:08:b6:85:73:84:ff:9c:96:10:12:4d:b8:54:08:
af:3a:3e:1a:05:a1:d1:af:d7:4a:ce:c8:28:5b:3d:
ff:39:30:63:20:5c:fd:99:91:f3:c0:57:f1:d1:ca:
04:04:41:91:c1:f9:e6:65:0e:31:88:e4:87:0f:3e:
86:28:99:e7:45:4e:78:9a:e1:85:b8:f2:92:45:ed:
e3:9f:cd:b7:88:28:16:66:c1:b9:bf:d4:cb:0c:f0:
0a:ff:9b:96:49:e8:76:db:32:5c:2e:89:07:b3:ef:
a4:22:03:bb:8f:9b:2f:5a:5c:b0:5b:10:23:80:99:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3F:07:23:89:88:97:7D:35:0E:E0:76:F3:B2:79:F6:2E:AB:43:4A
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/DD559FC68FCF11F18B5977E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.190.232.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:3d:16:a7:c7:8c:56:f0:f6:c3:48:8c:6a:1e:73:52:04:ed:
89:68:4a:0d:1e:87:7c:9e:4c:d1:f8:ed:f6:81:8c:ff:2a:e3:
01:d1:c9:31:aa:e6:9e:b5:fa:85:06:23:df:b5:9e:04:1f:dc:
b4:14:73:26:1c:f6:94:53:1f:07:eb:c9:2e:92:34:f0:38:10:
d9:e2:0f:b2:f4:76:cb:1f:6d:36:4b:93:9f:cf:97:47:b4:72:
a5:f2:d8:85:ff:a8:8c:6b:52:43:a9:1c:f8:ce:af:42:8e:f4:
1f:f4:c3:ce:9c:b5:14:b6:b6:b4:55:50:18:5f:90:59:c8:0f:
c5:4f:bc:03:59:36:cb:01:7a:e9:e5:b8:b1:7c:28:55:50:62:
de:57:09:f6:6c:01:1f:ea:df:e9:9d:02:1d:9b:91:32:97:f2:
89:c8:84:b1:38:dd:47:53:a2:90:cb:25:09:a4:3e:ec:83:d9:
cd:c1:30:9b:5a:da:8f:8b:2d:1a:80:be:80:66:56:45:7f:2e:
99:c5:79:16:64:2b:cb:2a:11:13:b1:a4:59:9c:ac:5a:af:da:
92:f1:95:d0:cc:58:da:b7:7e:f4:c6:c8:2e:83:7a:ed:b0:bc:
3f:98:70:e3:14:6b:e9:60:33:e2:3d:5a:15:a9:18:5d:ec:d5:
77:59:17:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:39:27 2026 by rpki-client