Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/AF1A8D288B7511F1AF296ED8CE1D38B0.roa
File: AF1A8D288B7511F1AF296ED8CE1D38B0.roa (raw, json)
Hash identifier: BZXv9yrstBZs1wi53emWwK8yGAg0JfHY+4Ck530XQdA=
Subject key identifier: 15:17:0B:07:B9:FE:8B:B8:F3:FB:7D:2D:A7:12:50:AB:C2:AE:4E:FE
Certificate issuer: /CN=F36C3384AF/serialNumber=32E6680B0A20A80019EBBAC02D331EB30270DE87
Certificate serial: 07B8
Authority key identifier: 32:E6:68:0B:0A:20:A8:00:19:EB:BA:C0:2D:33:1E:B3:02:70:DE:87
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MuZoCwogqAAZ67rALTMeswJw3oc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/AF1A8D288B7511F1AF296ED8CE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:48:19 +0000
ROA not before: Wed 29 Jul 2026 17:48:15 +0000
ROA not after: Sat 21 Apr 2040 17:48:15 +0000
asID: 328594
IP address blocks: 41.242.152.0/21 maxlen: 21
41.242.152.0/22 maxlen: 22
41.242.152.0/23 maxlen: 23
41.242.152.0/24 maxlen: 24
41.242.153.0/24 maxlen: 24
41.242.154.0/23 maxlen: 23
41.242.154.0/24 maxlen: 24
41.242.155.0/24 maxlen: 24
41.242.156.0/22 maxlen: 22
41.242.156.0/23 maxlen: 23
41.242.156.0/24 maxlen: 24
41.242.157.0/24 maxlen: 24
41.242.158.0/23 maxlen: 23
41.242.158.0/24 maxlen: 24
41.242.159.0/24 maxlen: 24
2c0f:eb98::/32 maxlen: 32
2c0f:eb98::/48 maxlen: 48
2c0f:eb98:13::/48 maxlen: 48
2c0f:eb98:14::/48 maxlen: 48
2c0f:eb98:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/MuZoCwogqAAZ67rALTMeswJw3oc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/MuZoCwogqAAZ67rALTMeswJw3oc.mft
rsync://rpki.afrinic.net/repository/afrinic/MuZoCwogqAAZ67rALTMeswJw3oc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976 (0x7b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3384AF, serialNumber=32E6680B0A20A80019EBBAC02D331EB30270DE87
Validity
Not Before: Jul 29 17:48:15 2026 GMT
Not After : Apr 21 17:48:15 2040 GMT
Subject: CN=6a6a3ce3-d14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:55:3f:f8:d2:e3:48:65:a9:99:77:61:17:
f5:c2:02:19:7a:e6:aa:87:a2:e9:8f:6e:50:ff:01:
21:5e:0c:bd:1f:4e:52:2f:88:da:53:65:1d:fe:cb:
53:5d:a0:09:88:f8:fc:db:36:67:df:a5:6e:81:37:
10:e6:52:90:31:76:5c:c4:e9:35:95:6f:75:ef:36:
4c:94:cc:94:29:e9:ce:bd:d3:3d:2a:25:d8:a3:4c:
42:be:9f:a9:2e:18:8c:2d:b6:11:3e:8f:ed:83:a8:
6e:cb:09:a5:1a:35:74:af:b8:8e:49:9d:86:68:fa:
25:c3:1c:56:5c:ef:74:53:50:39:b3:95:ed:ea:4c:
05:39:29:fc:06:24:1e:c0:1c:1f:71:7f:4e:39:bf:
18:c6:b9:73:7e:80:d9:71:b3:c1:5d:d1:02:18:37:
1c:ae:24:f9:04:05:ef:22:38:24:bd:a9:11:e5:58:
9a:e3:75:10:ad:0b:bf:97:8c:4f:81:40:58:8a:85:
b4:2a:df:e7:5a:b7:e4:80:0e:04:38:86:7d:0e:1e:
4f:06:5a:2d:a0:af:d2:0f:f4:ae:40:03:b7:9b:ba:
aa:f1:c2:d3:70:7a:60:3e:32:d1:4c:42:bd:1d:9c:
3e:d6:a3:3c:0f:86:92:09:66:d7:62:6f:5a:22:82:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:17:0B:07:B9:FE:8B:B8:F3:FB:7D:2D:A7:12:50:AB:C2:AE:4E:FE
X509v3 Authority Key Identifier:
keyid:32:E6:68:0B:0A:20:A8:00:19:EB:BA:C0:2D:33:1E:B3:02:70:DE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/MuZoCwogqAAZ67rALTMeswJw3oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MuZoCwogqAAZ67rALTMeswJw3oc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3384/A7F90D10B30011EB848B4A5CF8AEA228/AF1A8D288B7511F1AF296ED8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.152.0/21
IPv6:
2c0f:eb98::/32
Signature Algorithm: sha256WithRSAEncryption
58:bd:16:51:7d:ec:6b:b9:58:b8:e1:7f:62:c0:e8:bb:9b:bc:
89:eb:66:67:02:7d:ab:3d:a1:95:37:ee:e3:aa:2e:c4:47:d1:
81:fd:fd:2d:ad:2c:90:c0:a5:57:c4:c4:4d:2d:c1:9f:07:7d:
a7:1f:e5:54:a4:01:94:27:27:8a:8d:c7:37:b1:63:22:50:fe:
33:9c:73:c8:87:2c:5a:03:de:f4:97:47:96:40:d1:97:46:8c:
53:54:08:42:72:1a:42:8c:fa:81:3f:63:0a:54:03:9c:27:c1:
61:8e:86:4a:c0:12:cd:06:2f:92:09:fe:a4:a0:7a:d7:5c:3e:
d8:fd:36:7c:d1:e8:6a:66:63:41:d9:2a:25:dc:c1:87:0b:08:
8d:1b:68:45:48:d9:5d:21:24:94:d2:03:a3:ed:c6:0f:56:13:
5d:a0:85:f8:13:e3:d7:80:84:d8:67:8c:21:b9:29:5a:5e:42:
78:5a:6f:a2:0f:2f:7f:a0:9b:0b:8c:f8:67:ed:6c:78:89:99:
6b:01:2e:51:fa:04:35:ad:4e:34:46:63:7f:46:dc:9a:48:8e:
92:ba:e1:82:71:f1:ea:f3:1d:ba:2b:b6:30:8c:49:0b:1d:da:
65:82:df:92:55:ab:86:74:12:79:df:cc:71:b6:ab:52:e5:c0:
3e:ad:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:34 2026 by rpki-client