Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/923C5AF2195F11F1A3BEA27DDAE4EC9C.roa
File: 923C5AF2195F11F1A3BEA27DDAE4EC9C.roa (raw, json)
Hash identifier: XHVjQ0BnSbhqTQoC6M8bTABJ3YO/Bp0yh7KCDo0mYuo=
Subject key identifier: 8B:D8:B0:53:F9:D0:4C:67:CA:00:44:CD:EB:F2:AB:F6:D2:12:B5:95
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 0920
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/923C5AF2195F11F1A3BEA27DDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 13:22:50 +0000
ROA not before: Fri 06 Mar 2026 13:22:45 +0000
ROA not after: Tue 06 Mar 2046 13:22:45 +0000
asID: 31713
IP address blocks: 41.79.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Mar 6 13:22:45 2026 GMT
Not After : Mar 6 13:22:45 2046 GMT
Subject: CN=69aad529-cf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:7f:1a:98:5c:8b:b0:68:07:1f:01:29:10:
54:c9:e1:05:9d:46:31:62:26:17:e3:10:41:85:b1:
d3:2d:eb:c5:cf:1c:7a:04:69:ba:17:14:ea:6f:5f:
7f:6a:46:85:08:ef:81:ec:0f:ca:b1:cd:a5:35:ba:
39:3f:af:f1:e6:ce:71:d3:33:43:78:4e:be:be:22:
cf:37:e9:db:21:36:73:49:e1:46:2c:48:7c:43:e5:
8b:77:86:3a:c7:f8:4b:fe:c4:7f:dc:12:c0:c4:b5:
42:31:db:1b:8d:b4:75:cb:31:e0:9c:0a:b1:a1:18:
63:13:4e:32:c7:07:53:14:64:07:de:b0:94:2b:f7:
36:8e:47:d6:61:02:b1:15:dd:4b:55:23:ba:43:29:
d9:89:77:f5:58:45:2c:ee:8b:50:9f:d8:13:f6:87:
75:ba:f9:96:55:6d:f5:80:15:8b:43:e0:43:e9:57:
70:bb:ce:3d:47:17:4a:ec:42:60:13:dc:c9:a6:75:
e9:d6:bd:7e:1d:d3:b0:d3:29:66:bc:e5:d9:74:93:
ce:99:7f:6d:f3:8d:47:20:db:bf:76:6b:45:29:f8:
34:8a:75:c9:63:67:92:93:3b:42:c2:af:98:6d:e7:
41:4f:02:e0:27:cf:46:75:13:8c:90:12:b5:3b:89:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:B0:53:F9:D0:4C:67:CA:00:44:CD:EB:F2:AB:F6:D2:12:B5:95
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/923C5AF2195F11F1A3BEA27DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:bf:76:e7:27:3f:b9:d3:04:fb:c6:d6:34:d4:a6:15:1f:4b:
32:90:72:ee:84:f6:29:e2:c4:db:a4:a9:23:1d:92:0d:f2:af:
f7:52:d6:18:da:76:e3:71:77:d8:40:db:8f:32:4b:76:08:d1:
16:ed:2a:3b:48:30:1c:6a:7b:9d:73:dd:ba:e1:75:82:2e:fc:
06:ea:70:57:ba:6e:25:8c:c6:6e:56:cb:36:6b:3f:ee:ff:5c:
b5:1e:0e:ad:90:cb:d3:09:ef:a6:4c:e1:d5:23:b9:33:49:a6:
9c:e8:00:a0:47:63:79:87:48:58:27:c0:0e:8f:f6:a3:01:81:
36:51:1b:54:f2:ba:63:72:16:62:5b:80:12:19:7b:14:7b:e1:
26:ce:37:b1:53:42:a3:42:62:86:48:e2:7b:ba:ef:5d:84:44:
91:fd:e8:04:b5:7e:32:10:21:e5:c3:bb:ae:e7:93:d8:1c:0e:
9e:5d:f0:f8:9e:99:16:98:34:ec:00:4f:a9:97:56:4c:aa:32:
3e:62:97:11:1f:6e:56:47:20:a3:aa:0e:5b:1e:3b:0a:8c:80:
72:6b:90:cc:eb:0e:64:7e:63:a8:68:b4:75:20:aa:b3:16:84:
1d:4b:54:a4:79:9f:79:14:b0:91:d5:d3:16:ed:61:9e:c2:2a:
54:6a:97:e5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTNEN0ZBRjExMC8GA1UEBRMoOTY1QzhDMzVCMEYxMEY4RUE1REJEQTU0NEYyOTFC
NkNBOTI4M0I1RDAeFw0yNjAzMDYxMzIyNDVaFw00NjAzMDYxMzIyNDVaMBgxFjAU
BgNVBAMTDTY5YWFkNTI5LWNmOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDh1H8amFyLsGgHHwEpEFTJ4QWdRjFiJhfjEEGFsdMt68XPHHoEaboXFOpv
X39qRoUI74HsD8qxzaU1ujk/r/HmznHTM0N4Tr6+Is836dshNnNJ4UYsSHxD5Yt3
hjrH+Ev+xH/cEsDEtUIx2xuNtHXLMeCcCrGhGGMTTjLHB1MUZAfesJQr9zaOR9Zh
ArEV3UtVI7pDKdmJd/VYRSzui1Cf2BP2h3W6+ZZVbfWAFYtD4EPpV3C7zj1HF0rs
QmAT3MmmdenWvX4d07DTKWa85dl0k86Zf23zjUcg2792a0Up+DSKdcljZ5KTO0LC
r5ht50FPAuAnz0Z1E4yQErU7ifJpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUi9iw
U/nQTGfKAETN6/Kr9tIStZUwHwYDVR0jBBgwFoAUllyMNbDxD46l29pUTykbbKko
O10wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzRDdGL0I3MDVFQUYyNDFBNjExRUE4ODFBNjcyOEY4QUVBMjI4L2xseU1O
YkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xseU1OYkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzRDdGL0I3MDVFQUYyNDFBNjExRUE4ODFBNjcyOEY4
QUVBMjI4LzkyM0M1QUYyMTk1RjExRjFBM0JFQTI3RERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIpT/gwDQYJKoZIhvcNAQEL
BQADggEBAD2/ducnP7nTBPvG1jTUphUfSzKQcu6E9inixNukqSMdkg3yr/dS1hja
duNxd9hA248yS3YI0RbtKjtIMBxqe51z3brhdYIu/AbqcFe6biWMxm5WyzZrP+7/
XLUeDq2Qy9MJ76ZM4dUjuTNJppzoAKBHY3mHSFgnwA6P9qMBgTZRG1TyumNyFmJb
gBIZexR74SbON7FTQqNCYoZI4nu6712ERJH96AS1fjIQIeXDu67nk9gcDp5d8Pie
mRaYNOwAT6mXVkyqMj5ilxEfblZHIKOqDlseOwqMgHJrkMzrDmR+Y6hotHUgqrMW
hB1LVKR5n3kUsJHV0xbtYZ7CKlRql+U=
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:26:49 2026 by rpki-client