Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0691360E8F2E11F1A75A9B0CCF1D38B0.roa
File: 0691360E8F2E11F1A75A9B0CCF1D38B0.roa (raw, json)
Hash identifier: Xjdi/36jYQg4QQ2imWPtWaTr/6GyNFGfablELF8Igus=
Subject key identifier: 26:17:6B:9B:75:70:48:DE:17:72:07:15:7C:47:3B:B5:9F:A4:A7:07
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 09FA
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0691360E8F2E11F1A75A9B0CCF1D38B0.roa
Signing time: Mon 03 Aug 2026 11:25:27 +0000
ROA not before: Mon 03 Aug 2026 11:25:23 +0000
ROA not after: Sat 30 Jul 2033 11:25:23 +0000
asID: 37119
IP address blocks: 41.78.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 3 11:25:23 2026 GMT
Not After : Jul 30 11:25:23 2033 GMT
Subject: CN=6a707aa7-d576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:c7:f0:6d:48:58:25:3e:2d:d6:3f:85:f0:
da:67:6f:5e:2d:52:8c:f8:31:7b:50:aa:93:f0:c6:
39:b6:10:6a:78:39:01:34:f9:cb:3b:10:d4:99:51:
49:f3:52:86:3a:8e:31:ae:5b:41:26:ba:f2:a2:ac:
b9:59:1f:b2:8a:f2:9b:bb:ff:d5:15:c4:1f:26:2a:
00:ab:d0:22:2f:98:65:f5:ce:d6:17:db:d1:e7:61:
dc:5d:47:99:4e:30:8c:79:26:c9:00:c2:1d:b2:74:
71:08:79:67:38:16:21:b8:2c:48:85:4d:4b:15:27:
13:92:36:ef:a1:8a:1f:26:df:30:ab:bd:ea:c3:3d:
40:fb:fa:20:3e:b4:94:af:5f:1e:7a:1b:2f:d1:24:
68:4e:0b:1f:0b:53:0a:21:e1:75:e3:55:c0:27:d1:
40:f8:a3:87:7e:55:60:bc:b6:1e:ea:61:bd:53:f4:
ec:90:35:d6:c5:19:e9:a2:73:c3:56:cc:7f:a9:54:
06:39:38:78:57:80:38:20:ac:94:27:8a:c1:86:ce:
05:6e:74:ee:ed:75:c2:27:36:11:71:71:fb:32:4c:
6f:e2:8d:02:6c:69:98:9a:d5:3d:25:50:e1:41:49:
d8:b3:db:e8:45:28:8f:89:67:1e:fb:7a:96:9d:5c:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:17:6B:9B:75:70:48:DE:17:72:07:15:7C:47:3B:B5:9F:A4:A7:07
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0691360E8F2E11F1A75A9B0CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.17.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8a:44:3d:8d:2a:27:87:1d:27:ab:c0:a8:b5:2d:0f:b2:de:
c4:21:d7:c6:39:83:b2:4b:bb:48:dc:4f:28:84:5a:11:7b:df:
51:b3:d5:43:db:a6:9b:1d:a0:3a:98:16:b8:34:6a:f0:9b:e7:
a3:7a:57:e6:df:f4:a9:e5:34:0c:48:eb:99:e9:5d:c0:05:86:
2a:73:79:ec:8a:37:5a:cb:7f:ca:9d:40:a8:fd:ad:ec:4e:9e:
39:92:dc:6e:08:59:26:7f:aa:28:44:86:4e:09:70:63:c3:17:
f6:69:26:72:cc:cd:58:dd:ec:25:0a:63:ec:e6:f1:d5:61:9f:
c5:cd:98:27:56:83:25:76:ba:aa:72:12:0a:4c:47:3f:b3:14:
1f:15:00:1c:e8:bc:fc:4a:c8:99:41:97:e5:7a:7e:c0:cc:2c:
44:3e:bf:52:37:d6:f0:a7:df:dc:5a:d4:3a:de:25:d2:17:4f:
7b:8c:1b:4f:f9:93:75:c3:d9:06:bb:98:ef:97:4b:30:87:35:
f0:7b:f0:30:a3:8a:e0:d1:b3:87:1d:da:f0:76:83:a1:17:0a:
ff:ae:8c:05:e7:3f:ec:40:3c:a7:1f:d0:c6:84:07:c5:82:6c:
1e:6b:c6:d7:ec:ac:9d:2d:70:4a:97:8e:fd:f2:d3:4c:59:ff:
bd:bc:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:41 2026 by rpki-client