Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/579583E2195F11F1B991657DDAE4EC9C.roa
File: 579583E2195F11F1B991657DDAE4EC9C.roa (raw, json)
Hash identifier: SF0hDp8Zk9dynSHbdMmIgYSWC7ijmylDn1pyd15RvQY=
Subject key identifier: B8:2F:6E:03:9B:C5:DA:1E:AD:09:E9:6C:06:85:12:82:EA:63:1F:99
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 091E
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/579583E2195F11F1B991657DDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 13:21:11 +0000
ROA not before: Fri 06 Mar 2026 13:21:07 +0000
ROA not after: Tue 06 Mar 2040 13:21:07 +0000
asID: 31713
IP address blocks: 41.221.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2334 (0x91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Mar 6 13:21:07 2026 GMT
Not After : Mar 6 13:21:07 2040 GMT
Subject: CN=69aad4c7-a19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7b:7c:9d:77:d0:de:c7:57:a7:16:69:cd:1e:
32:61:fb:b4:18:f7:5f:f1:37:af:11:c2:5b:b6:51:
9e:3e:e4:b6:a8:ee:0d:be:c8:5f:4d:c2:24:96:43:
6a:64:a6:47:fe:ae:32:19:ef:9a:33:25:78:8a:eb:
44:9c:c5:b4:5e:59:6d:a1:05:b4:44:bd:57:cb:cb:
1f:da:ac:18:66:49:93:dd:7f:a9:ce:86:d6:97:e2:
c9:e0:1a:c1:e8:0a:af:78:c6:6f:d3:78:4f:0c:ff:
41:84:23:8b:e8:95:40:bc:0f:a7:74:5b:f2:21:2e:
50:93:16:13:f1:02:d2:91:20:cf:b9:8b:8b:5f:90:
fd:d1:92:5f:50:24:c2:97:d5:39:6d:d0:a8:d8:8b:
87:b8:80:68:ab:2b:14:07:66:3d:c1:36:d8:19:2e:
05:23:84:73:f9:6d:8d:d3:f0:57:64:cb:86:4e:b4:
ad:45:90:a9:ee:ec:a4:ae:4f:1c:9a:b8:92:52:91:
38:15:f3:00:a4:7e:8b:a4:55:19:8c:0e:51:d4:f5:
31:f3:39:a3:83:77:9c:ac:f3:26:44:7e:a9:8b:54:
33:24:2c:5b:ba:12:f6:d7:40:27:9d:ff:b8:4b:7c:
b8:0f:85:f2:27:d8:82:e6:af:ce:19:58:32:eb:a5:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:6E:03:9B:C5:DA:1E:AD:09:E9:6C:06:85:12:82:EA:63:1F:99
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/579583E2195F11F1B991657DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.208.0/20
Signature Algorithm: sha256WithRSAEncryption
26:26:85:5c:10:37:36:82:66:88:b4:75:54:49:38:d4:76:92:
e2:b2:b9:96:03:f4:dd:55:1f:b6:42:0e:6c:16:72:a4:b9:22:
95:ea:1d:4d:b7:c0:aa:e3:01:a4:e2:7c:f1:b3:fb:b3:df:1b:
88:91:98:6c:e1:52:56:e5:52:8e:cc:df:be:48:0c:a3:ec:b2:
cb:03:79:94:e4:0a:ed:78:b6:fb:44:19:5b:99:7a:65:eb:77:
9f:f6:97:ee:8b:ee:65:85:99:71:68:b2:f7:cf:2a:36:33:01:
c9:f8:d4:b1:ac:e1:cc:d1:b7:37:f1:ad:0a:4e:0f:1c:72:34:
06:82:2d:99:d3:22:62:09:52:13:c6:83:2b:25:85:df:fd:4a:
b1:70:da:6a:15:20:98:01:53:d3:89:84:8c:e6:06:ca:23:6d:
83:5f:ad:41:a0:b8:c8:51:f4:08:0e:31:84:f0:89:ac:7d:ce:
19:e5:20:79:6f:c8:96:70:a8:91:84:a0:97:19:63:12:1f:d2:
82:01:0a:79:be:dc:92:9a:2b:8b:d4:f8:bd:48:18:96:38:db:
7c:08:4e:c9:a2:c1:19:e7:01:99:ed:65:cd:b2:d4:2a:f4:28:
f7:76:44:b9:33:1c:c8:43:eb:68:86:5b:16:18:7b:ca:36:4f:
e4:9b:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:26:49 2026 by rpki-client