Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/CAF9A7748CF911F1A621EE1ECF1D38B0.roa
File: CAF9A7748CF911F1A621EE1ECF1D38B0.roa (raw, json)
Hash identifier: CCsJv7lQrd4X0FxhvH6nH7QSt8msf0WAMGX9/sGHJzo=
Subject key identifier: B9:CF:FC:91:8A:E8:A3:FB:60:4E:13:59:FA:92:FF:7F:7B:38:EC:40
Certificate issuer: /CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Certificate serial: 0729
Authority key identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/CAF9A7748CF911F1A621EE1ECF1D38B0.roa
Signing time: Fri 31 Jul 2026 16:06:31 +0000
ROA not before: Fri 31 Jul 2026 16:06:27 +0000
ROA not after: Fri 31 Dec 2049 16:06:27 +0000
asID: 37254
IP address blocks: 41.76.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8561AF, serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Validity
Not Before: Jul 31 16:06:27 2026 GMT
Not After : Dec 31 16:06:27 2049 GMT
Subject: CN=6a6cc807-10f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:95:57:97:25:8c:99:c6:7a:23:75:31:fc:
83:2b:c2:0c:ae:d6:dd:95:ac:d9:ea:d2:3c:3c:5c:
55:4b:65:06:00:0b:82:ea:42:6a:d1:c7:b4:40:f3:
2e:da:e6:ee:29:7f:a3:1d:54:fe:cb:5e:ae:d0:ce:
5a:c2:a2:54:fb:04:18:52:b5:07:42:48:4b:b5:97:
8f:7f:55:88:29:08:de:0d:85:0a:94:d2:a0:be:78:
99:2f:cc:3d:7a:12:20:1f:bc:75:63:46:f9:82:8a:
3a:8a:d8:8b:56:19:00:7e:3f:15:23:4a:d2:97:d8:
08:00:ea:1c:26:0f:16:7c:ca:8a:f8:93:a2:75:4c:
72:97:80:31:23:fd:f1:75:32:a2:4c:8a:27:ca:94:
e0:21:ca:5c:20:cf:b1:70:21:57:0d:2b:5e:92:18:
c1:af:80:90:53:c5:d4:33:57:af:2f:c5:6f:46:50:
24:ea:f5:f4:e5:ae:c2:09:96:4e:30:c5:37:1d:50:
cd:0d:ca:a5:02:3f:25:0e:26:e0:73:3e:d8:4a:b9:
ab:4c:d5:e1:67:3a:51:00:c3:62:a1:cb:6a:32:33:
21:21:39:9c:5d:9f:ba:15:b1:8b:75:16:4c:f0:ce:
0c:bb:2f:92:09:1e:e2:f3:04:9c:65:23:87:54:75:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:FC:91:8A:E8:A3:FB:60:4E:13:59:FA:92:FF:7F:7B:38:EC:40
X509v3 Authority Key Identifier:
keyid:BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/CAF9A7748CF911F1A621EE1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.216.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:b0:5d:ab:a8:e4:0a:1a:5a:a7:b1:5f:d0:82:b3:4c:2c:bd:
7a:47:95:82:69:cf:b5:4b:c7:29:30:e7:4f:dd:02:bf:7c:a3:
a9:29:2c:c1:d7:a8:ec:f5:db:ed:66:82:14:a2:64:c5:f5:b2:
84:9c:30:31:dd:53:17:f3:d6:b1:6f:7b:55:2e:b8:5e:cd:d7:
02:19:cd:9c:53:d0:ed:87:f3:c5:d8:24:ec:90:26:c3:5b:78:
43:b9:4d:00:5e:1a:87:b0:af:82:cf:5f:5c:a6:14:2d:82:7f:
72:c4:a8:5e:f5:e6:3d:54:17:44:18:d8:7a:17:72:73:4b:35:
33:90:58:e5:4d:de:01:8f:31:86:08:e6:58:01:92:83:f1:44:
54:03:5e:42:eb:0e:f5:d4:d4:c6:dd:6c:53:26:d5:f6:71:02:
ee:13:6f:5a:0d:90:84:15:55:13:d3:a2:05:87:2e:d3:0f:f7:
36:33:b2:93:37:af:48:30:8d:7e:38:2b:6e:e5:6f:75:35:30:
13:f6:ab:75:f4:d6:b3:0e:e2:9b:78:d6:f2:77:2c:f9:31:72:
b1:ba:a8:b3:e9:dd:a1:9a:e1:79:55:83:fc:b4:f7:ed:2e:1b:
e3:01:3a:df:03:a9:af:b9:b2:a4:04:6d:df:62:a9:8b:03:28:
0d:25:46:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBykwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTg1NjFBRjExMC8GA1UEBRMoQkRGNkY5OUNEMDgyQzEzQkVEQTVEQTBFODk4ODhE
RDUzMkM4NjMwNzAeFw0yNjA3MzExNjA2MjdaFw00OTEyMzExNjA2MjdaMBgxFjAU
BgNVBAMTDTZhNmNjODA3LTEwZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGwpVXlyWMmcZ6I3Ux/IMrwgyu1t2VrNnq0jw8XFVLZQYAC4LqQmrRx7RA
8y7a5u4pf6MdVP7LXq7QzlrColT7BBhStQdCSEu1l49/VYgpCN4NhQqU0qC+eJkv
zD16EiAfvHVjRvmCijqK2ItWGQB+PxUjStKX2AgA6hwmDxZ8yor4k6J1THKXgDEj
/fF1MqJMiifKlOAhylwgz7FwIVcNK16SGMGvgJBTxdQzV68vxW9GUCTq9fTlrsIJ
lk4wxTcdUM0NyqUCPyUOJuBzPthKuatM1eFnOlEAw2Khy2oyMyEhOZxdn7oVsYt1
Fkzwzgy7L5IJHuLzBJxlI4dUdQ2VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUuc/8
kYroo/tgThNZ+pL/f3s47EAwHwYDVR0jBBgwFoAUvfb5nNCCwTvtpdoOiYiN1TLI
YwcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4NTYxL0IwRDcyMEUwMUMzRjExRUNCQTIyMEQwQkQ4QTAxNENFL3ZmYjVu
TkNDd1R2dHBkb09pWWlOMVRMSVl3Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZmYjVuTkNDd1R2dHBkb09pWWlOMVRMSVl3Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkU4NTYxL0IwRDcyMEUwMUMzRjExRUNCQTIyMEQwQkQ4
QTAxNENFL0NBRjlBNzc0OENGOTExRjFBNjIxRUUxRUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMpTNgwDQYJKoZIhvcNAQEL
BQADggEBAH+wXauo5AoaWqexX9CCs0wsvXpHlYJpz7VLxykw50/dAr98o6kpLMHX
qOz12+1mghSiZMX1soScMDHdUxfz1rFve1UuuF7N1wIZzZxT0O2H88XYJOyQJsNb
eEO5TQBeGoewr4LPX1ymFC2Cf3LEqF715j1UF0QY2HoXcnNLNTOQWOVN3gGPMYYI
5lgBkoPxRFQDXkLrDvXU1MbdbFMm1fZxAu4Tb1oNkIQVVRPTogWHLtMP9zYzspM3
r0gwjX44K27lb3U1MBP2q3X01rMO4pt41vJ3LPkxcrG6qLPp3aGa4XlVg/y09+0u
G+MBOt8Dqa+5sqQEbd9iqYsDKA0lRss=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:20 2026 by rpki-client