Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/670BE738196111F1A493168ADAE4EC9C.roa
File: 670BE738196111F1A493168ADAE4EC9C.roa (raw, json)
Hash identifier: 89il+swCnx0o5ne+xSUMBKX+ebYKwDzvuxUzUv1wXZ4=
Subject key identifier: 49:88:31:BA:34:15:CF:9C:CD:7C:43:1E:77:63:54:66:00:2E:53:E8
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 092F
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/670BE738196111F1A493168ADAE4EC9C.roa
Signing time: Fri 06 Mar 2026 13:35:56 +0000
ROA not before: Fri 06 Mar 2026 13:35:51 +0000
ROA not after: Tue 06 Mar 2046 13:35:51 +0000
asID: 7262
IP address blocks: 41.221.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2351 (0x92f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Mar 6 13:35:51 2026 GMT
Not After : Mar 6 13:35:51 2046 GMT
Subject: CN=69aad83c-129a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:00:5d:18:bf:f0:f9:8b:80:7f:d2:01:64:
cd:e7:f7:51:06:f9:b8:62:4c:ba:dc:87:2b:c7:43:
05:0c:05:38:a8:ed:13:a6:e7:13:02:06:82:34:56:
f6:3b:d2:72:11:5e:ff:d2:20:b5:22:89:f2:ed:57:
3b:30:94:32:1b:ef:82:7c:1b:9b:aa:3c:90:94:5e:
81:0b:a8:41:74:28:f2:be:84:ef:d0:d1:e5:f0:5e:
6e:4d:5e:c5:8b:55:63:b3:50:09:6c:2d:a3:5e:30:
b4:f1:a8:40:97:4d:93:d2:eb:f5:bc:36:df:a0:1e:
99:8a:19:16:bd:c5:99:31:37:0b:3a:10:a1:75:0b:
c0:41:90:e3:c4:26:49:6e:2e:79:b9:7e:98:e1:b8:
98:df:43:60:41:8d:7a:14:f7:30:2b:93:69:7a:87:
1f:59:a1:77:bd:d4:06:1e:58:2f:84:eb:dc:8d:11:
30:72:c8:bb:ac:d3:90:8d:99:c7:01:47:3d:3b:fb:
dd:58:f7:6a:4c:08:d3:0a:f0:e4:f0:9a:b6:34:32:
c0:d5:2a:d7:f3:62:cb:0c:f3:ca:fb:bf:42:4c:dc:
14:e6:ea:91:8c:42:63:4e:92:5f:b2:3f:53:bc:7f:
dc:09:03:cd:3d:d8:ad:8f:63:cd:41:4a:bd:c3:16:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:31:BA:34:15:CF:9C:CD:7C:43:1E:77:63:54:66:00:2E:53:E8
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/670BE738196111F1A493168ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b2:da:92:be:ba:5a:c4:d6:e1:51:d3:6d:81:cb:78:98:0b:
95:8d:d7:84:44:46:5a:6f:57:4a:d8:e1:ee:5a:8d:46:ee:6e:
5f:a2:1e:55:67:f6:6a:f5:a7:82:32:98:a0:02:04:45:c4:1a:
82:20:f6:67:ee:fa:21:5f:85:7e:78:b5:35:f0:b2:34:d1:56:
9d:9b:30:45:a6:45:ba:9e:42:5e:94:32:01:7e:68:16:af:f6:
9e:f3:73:01:b0:84:31:eb:89:7b:e8:9d:00:47:8f:5f:5c:1b:
89:f2:d2:34:30:22:88:7b:65:5a:cd:42:31:3d:86:03:51:f2:
fb:e2:07:db:38:b0:eb:11:e8:8b:6c:86:82:b8:cc:5f:4f:10:
f4:75:a0:2a:58:37:0b:c5:cf:22:cc:20:81:6e:0c:1a:e2:4e:
aa:57:6c:04:90:de:c1:74:49:fe:03:91:0d:58:53:da:86:04:
6d:d9:7e:4e:6d:38:b8:23:3c:1d:0f:e2:b5:73:c1:e0:26:f4:
1a:08:51:35:da:85:30:88:bc:7c:f3:06:3a:b1:09:fd:7d:d5:
ce:ab:9d:a0:82:c3:b4:b5:a6:50:e9:68:52:6f:21:af:64:b0:
8e:4a:32:1c:84:12:a8:aa:85:cf:1d:80:a2:22:41:03:d4:1a:
dc:bc:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:26:59 2026 by rpki-client