Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/0B2BDC008D8011F187AF7DDACE1D38B0.roa
File: 0B2BDC008D8011F187AF7DDACE1D38B0.roa (raw, json)
Hash identifier: hvVvqgd3J6HugAOQ2xZMf4rYH2ZaGbqj41jpcp8CqDs=
Subject key identifier: BD:1C:39:91:C2:FC:81:68:42:39:7A:07:39:BF:A0:61:91:5E:5E:3F
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 057E
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/0B2BDC008D8011F187AF7DDACE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:07:31 +0000
ROA not before: Sat 01 Aug 2026 08:07:27 +0000
ROA not after: Wed 01 Dec 2032 08:07:27 +0000
asID: 37009
IP address blocks: 41.63.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406 (0x57e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF, serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Validity
Not Before: Aug 1 08:07:27 2026 GMT
Not After : Dec 1 08:07:27 2032 GMT
Subject: CN=6a6da943-6725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:37:92:d0:f2:ec:fa:01:bc:6b:df:c8:3e:
bd:3f:58:d7:43:f0:4c:1c:68:76:73:f2:65:ae:59:
41:d2:9e:1b:03:5a:55:27:79:54:6d:6e:91:e7:ee:
ef:64:22:09:ae:fb:52:d6:8e:6d:86:8c:5f:d4:fa:
7a:04:62:dd:84:e7:ce:0e:f5:64:b7:10:8f:61:bf:
58:8b:00:79:23:e3:a0:60:b0:49:f1:bb:93:49:45:
d1:2a:20:ec:66:99:31:f5:64:c8:94:e8:13:fe:bd:
27:17:54:0e:e2:80:a5:04:da:58:83:bb:52:46:2e:
23:6b:48:55:6e:26:41:77:57:2c:d7:55:c2:dc:13:
60:56:25:10:cd:72:c9:2f:2c:1a:53:63:2c:6e:bf:
19:72:b8:7a:09:f6:80:ce:c2:0b:af:bc:dc:ad:cb:
cf:36:40:a1:7c:13:d7:19:dd:94:5b:5e:2d:a3:45:
94:3e:9a:45:be:00:7b:d9:e3:ce:29:3e:d4:8e:25:
dd:06:17:7a:2d:f4:cf:25:69:b1:b9:f5:72:82:e8:
b6:72:e3:05:60:d5:fc:1f:5f:7c:2c:79:0b:2b:28:
f4:2e:19:89:45:86:f4:9c:29:89:93:d0:7a:44:21:
93:8c:a2:c6:39:79:18:4c:b1:cb:0a:a6:01:d4:57:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1C:39:91:C2:FC:81:68:42:39:7A:07:39:BF:A0:61:91:5E:5E:3F
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/0B2BDC008D8011F187AF7DDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.63.192.0/18
Signature Algorithm: sha256WithRSAEncryption
49:b1:a7:be:82:eb:0e:74:b4:2e:8f:e9:b8:96:90:54:81:00:
12:71:2e:be:d5:e3:97:6f:30:c5:1c:ff:21:bc:0a:ba:09:49:
de:cc:e4:3d:80:57:42:ca:09:5c:e9:ca:1e:2b:55:e6:77:aa:
e6:68:be:11:51:71:c4:0d:93:a8:40:0f:73:ed:5e:d7:a6:d4:
44:1b:e7:0e:a1:5e:bb:02:b6:11:d6:da:f7:ed:ca:89:c7:4d:
d3:16:5c:0d:f1:a6:b0:aa:bb:d6:02:c5:8a:d4:3e:33:0d:d8:
5a:82:58:e9:57:94:77:04:db:87:f7:0a:6c:46:63:25:6e:5b:
54:a6:08:1b:b1:21:80:7f:ea:9e:e0:cf:a6:15:ba:f5:35:0e:
f9:25:b2:a7:ff:df:1e:f9:2b:63:05:a7:95:6d:83:c2:59:b4:
b3:86:14:33:45:6e:fd:60:a7:0c:8b:de:7e:da:43:0d:93:c5:
7d:2e:3e:c8:ef:0e:ea:70:01:bd:c3:d1:3d:74:38:1d:ed:1c:
27:ba:41:0e:26:33:93:c0:33:96:ac:c1:86:01:fc:1a:98:f6:
f3:ab:e7:a7:b0:14:54:8f:43:53:97:44:ba:1e:72:eb:7e:25:
2c:18:19:84:0a:68:9b:60:18:60:a4:1d:bd:79:d4:55:01:5b:
6e:09:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:15 2026 by rpki-client