Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/086691B6196011F1AA8AAF81DAE4EC9C.roa
File: 086691B6196011F1AA8AAF81DAE4EC9C.roa (raw, json)
Hash identifier: IM9+GWZbmnwdn08EHStSdHEHqEJhliwSrh+UsfiVB7M=
Subject key identifier: 4B:15:A9:D0:20:B3:BB:C2:29:C5:F8:06:96:EB:9D:59:AD:A8:3A:BE
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 0924
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/086691B6196011F1AA8AAF81DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 13:26:08 +0000
ROA not before: Fri 06 Mar 2026 13:26:03 +0000
ROA not after: Tue 06 Mar 2046 13:26:03 +0000
asID: 3491
IP address blocks: 41.79.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2340 (0x924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Mar 6 13:26:03 2026 GMT
Not After : Mar 6 13:26:03 2046 GMT
Subject: CN=69aad5f0-def0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:a5:c9:6e:21:f9:4c:1d:29:8f:69:ad:65:
ba:38:f2:8b:90:83:4a:d9:45:e1:f4:c7:ee:ef:33:
a6:c8:4a:f9:1a:e1:f0:dc:ba:f1:f0:7b:e8:eb:e0:
c1:ed:63:32:9e:43:f5:14:00:0b:d6:f9:0f:cf:1a:
44:49:fc:82:1c:21:54:c8:12:86:f8:cd:07:7c:67:
98:1c:d3:be:a0:e0:83:7d:b0:bf:f1:3f:c5:3f:8e:
43:0d:93:8e:9d:f9:b8:bc:b4:07:f2:e7:51:19:53:
1b:af:e5:23:2c:ad:6b:32:0d:60:b0:97:14:b6:df:
12:88:62:53:eb:32:06:f0:6e:37:6b:58:cd:6c:80:
62:a0:03:07:4b:a1:eb:25:dc:88:c5:e2:f7:23:b2:
35:69:61:c3:8b:bc:71:49:78:0d:39:4c:72:16:af:
1f:17:63:31:fa:e7:c0:ea:73:d9:0e:52:33:f4:e6:
56:f3:42:9c:9f:b5:68:84:d3:f6:1b:d8:6a:bc:03:
15:95:64:93:36:93:d2:87:2f:5d:1c:f1:b4:3b:24:
94:77:96:8e:58:5f:35:43:de:c7:65:39:8a:be:10:
7c:96:02:dc:98:94:90:cd:f2:a2:aa:d2:99:aa:ec:
fb:dd:4d:6f:06:b2:b1:77:8a:32:73:be:f2:23:79:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:15:A9:D0:20:B3:BB:C2:29:C5:F8:06:96:EB:9D:59:AD:A8:3A:BE
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/086691B6196011F1AA8AAF81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:b8:bb:f0:67:78:b2:41:01:0a:49:c1:f4:11:33:9a:82:10:
c9:ef:81:7f:ca:85:db:da:b4:d9:fe:3d:9d:4f:c6:14:90:10:
d5:13:76:98:62:17:dd:34:75:43:01:bb:97:da:6f:dd:39:cd:
47:9c:55:9d:0e:c9:15:22:cb:57:0c:85:dd:d8:f4:92:ef:84:
20:1c:2c:2a:aa:35:ee:a5:a9:fa:70:9b:c3:07:9c:77:3e:fa:
3f:10:37:aa:af:45:11:f4:16:16:f1:36:14:25:37:c0:b0:8d:
19:0d:0b:97:6a:24:d3:74:f8:79:d1:83:b6:39:81:f1:10:4c:
ab:cc:33:3a:a4:4c:67:9d:dd:fe:4e:7b:5e:e0:ce:2a:d3:ff:
9b:d2:72:15:5c:06:e3:12:5d:54:e7:ea:1a:9a:57:dd:08:a7:
87:60:0a:55:6e:af:64:84:b7:6f:20:c2:67:02:53:4f:c5:a0:
42:0f:f7:e7:4d:c1:31:9b:69:b3:c8:b8:08:89:db:9c:c1:1b:
27:3c:99:7f:35:7f:e8:00:c8:04:ec:71:7a:40:99:9b:72:6a:
0a:38:dd:ab:12:23:1a:fd:61:7f:8d:2c:ae:05:52:92:83:1d:
c6:aa:01:a0:99:80:5d:9b:ef:32:cb:41:da:6b:0c:83:53:5e:
6f:88:63:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:21:57 2026 by rpki-client