Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/5ADAEA428DA411F19652A6B3CE1D38B0.roa
File: 5ADAEA428DA411F19652A6B3CE1D38B0.roa (raw, json)
Hash identifier: 5JJQ358XU/uV4F04ikG8Wv5l2HlFyXE9smv14Iz/5C4=
Subject key identifier: 64:12:91:7F:9E:66:B2:1F:F0:B5:E7:13:4A:09:6F:F9:3F:01:49:3A
Certificate issuer: /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial: 09D3
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/5ADAEA428DA411F19652A6B3CE1D38B0.roa
Signing time: Sat 01 Aug 2026 12:27:27 +0000
ROA not before: Sat 01 Aug 2026 12:27:23 +0000
ROA not after: Fri 01 Aug 2036 12:27:23 +0000
asID: 327987
IP address blocks: 41.78.244.0/22 maxlen: 24
196.250.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2515 (0x9d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F3412AF, serialNumber=938BE89351A81A42DF847BF3931372D098304446
Validity
Not Before: Aug 1 12:27:23 2026 GMT
Not After : Aug 1 12:27:23 2036 GMT
Subject: CN=6a6de62f-88cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:dc:70:39:f5:5e:8a:20:8b:dd:3c:9b:bc:
19:f1:4f:e0:0b:29:01:1c:0b:28:60:9c:49:bb:13:
1c:d8:c5:e2:2b:f8:10:82:a3:bf:e9:68:36:4a:25:
8c:01:e6:3b:47:ce:12:78:10:95:26:5a:f4:04:06:
53:f6:1f:87:be:08:3c:af:2c:7a:d4:82:e2:67:75:
ec:2c:2b:20:5f:09:e6:f4:36:26:2b:3c:82:1b:c2:
23:16:d2:7a:b7:56:38:cf:1d:55:53:d5:cf:22:8a:
bc:2b:a9:91:ab:0a:e8:ea:89:6c:65:ff:f6:2b:91:
76:71:2e:5b:49:4b:b2:9c:c6:74:b1:59:31:56:ce:
a1:90:05:da:9e:7a:3e:00:d4:39:53:31:4f:c2:11:
83:9b:25:c0:e3:fd:4d:2d:50:e3:be:e7:93:c7:f8:
49:24:4f:15:ca:21:7b:74:d3:f2:fc:8d:98:be:cd:
59:18:8f:e4:de:f6:d7:a3:33:ab:6e:3f:ca:73:d3:
01:1b:e7:aa:85:30:91:d2:1f:db:04:a7:ef:48:0c:
cf:49:1b:93:ae:ef:46:56:db:37:7c:f9:4e:0f:6b:
c9:6b:fd:3c:8f:89:e4:6d:15:08:b8:5f:a8:f6:cf:
ee:5b:de:a5:1c:37:17:eb:82:d1:ae:2b:93:64:0c:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:91:7F:9E:66:B2:1F:F0:B5:E7:13:4A:09:6F:F9:3F:01:49:3A
X509v3 Authority Key Identifier:
keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/5ADAEA428DA411F19652A6B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.244.0/22
196.250.192.0/21
Signature Algorithm: sha256WithRSAEncryption
35:8d:0f:75:cd:bc:bb:73:a6:74:b6:fc:df:11:51:43:f5:bd:
06:a7:cd:f8:4e:f0:19:13:8a:b3:14:11:9f:b0:01:75:8c:35:
a6:5c:66:0e:05:30:8f:af:a5:b4:09:12:e8:75:9b:78:15:6d:
c2:28:d2:06:48:0d:0a:39:12:c3:d2:72:38:83:96:be:60:ae:
88:2a:ac:36:21:07:80:26:aa:30:6e:90:a6:90:5c:e7:18:9f:
26:5d:44:be:94:c9:9a:54:ad:2a:08:b5:8f:c0:8c:d6:0e:91:
81:31:d9:28:84:6e:e9:ac:0f:d9:7b:ed:a1:ef:0a:98:b9:9d:
25:a0:99:4b:ff:f0:98:07:72:1c:3b:8a:b6:b6:b8:44:ba:29:
30:68:fe:d0:32:57:5f:bd:fd:9a:c7:e4:a9:60:94:ee:6a:91:
60:7b:7d:c7:5a:7b:bd:33:2c:6c:e4:e4:e4:58:8d:34:e1:8f:
7f:0b:5f:33:22:77:54:88:28:dc:e5:cc:cb:69:5d:d2:ff:15:
12:d1:89:f8:d3:bb:2d:50:39:7a:40:04:28:bf:a1:a9:02:43:
e4:3f:c0:da:96:a4:f3:1e:8a:4c:9f:a5:97:90:1d:5d:a5:bd:
21:3d:c4:22:f0:4c:48:81:b0:84:90:53:78:9a:e0:11:c3:71:
55:a2:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:31 2026 by rpki-client