Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/582A85201C6E11F196474E8ADAE4EC9C.roa
File: 582A85201C6E11F196474E8ADAE4EC9C.roa (raw, json)
Hash identifier: tXQNq5anGZuKI/N3ls0PiguA4/6L6XRyM0QYo8OFjRw=
Subject key identifier: D2:12:07:9A:6C:76:F4:03:F0:1D:A2:1A:D9:A1:8A:3A:6B:A5:BE:23
Certificate issuer: /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial: 090E
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/582A85201C6E11F196474E8ADAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:46:10 +0000
ROA not before: Tue 10 Mar 2026 10:46:03 +0000
ROA not after: Sat 10 Mar 2046 10:46:03 +0000
asID: 31713
IP address blocks: 41.79.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Validity
Not Before: Mar 10 10:46:03 2026 GMT
Not After : Mar 10 10:46:03 2046 GMT
Subject: CN=69aff672-3aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:dd:49:c9:54:04:0d:c5:cd:8a:31:a1:f3:
41:b4:61:63:08:e4:01:55:ad:1a:4e:9b:33:95:a6:
71:56:09:9d:7e:37:ff:5c:52:8f:7c:3f:ea:7c:d1:
03:f3:38:5c:e8:74:c7:d9:0a:94:05:1c:db:f0:57:
d9:fc:a9:34:09:93:fd:33:e8:90:9f:17:b9:cd:3b:
d0:c1:4b:71:b3:fa:67:4b:35:70:30:93:ad:e4:0e:
66:4c:51:30:c1:3e:d3:db:23:cd:c0:27:b8:e7:ef:
c7:75:18:40:37:b1:02:0f:dc:c2:f1:e7:0d:40:e2:
96:c8:f7:92:8d:0a:4c:7f:c4:69:c6:e3:7a:b3:03:
a5:00:f1:9c:a7:5e:aa:44:0e:67:34:04:4b:e3:3d:
c4:a0:59:23:4f:b5:53:df:11:d2:07:06:92:52:40:
8f:4b:2d:a9:33:1b:57:d2:51:9c:1a:6a:cf:12:69:
ae:b9:0d:ba:e2:78:de:95:c7:32:22:a3:6b:98:64:
27:9d:b9:3b:ae:46:fc:50:a1:52:2c:5c:1e:70:d8:
12:31:a7:74:ff:2c:56:6a:98:b7:14:b1:06:86:27:
01:e2:51:bd:69:70:a4:39:0f:32:9d:91:c4:0c:88:
ae:3d:17:09:06:3a:c1:4e:45:ca:03:2d:ac:3f:6a:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:07:9A:6C:76:F4:03:F0:1D:A2:1A:D9:A1:8A:3A:6B:A5:BE:23
X509v3 Authority Key Identifier:
keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/582A85201C6E11F196474E8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.245.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9f:c4:af:12:8c:32:11:52:13:23:fb:f5:68:67:d6:3e:59:
a1:72:a0:df:b8:e6:c9:ba:67:a2:6f:b3:81:f8:7b:17:76:b8:
25:02:53:03:d6:ed:c5:f5:37:06:f3:b5:bf:3a:91:4d:3f:70:
42:ea:70:a6:30:a1:b2:b6:f7:13:41:dd:5b:9b:49:11:95:ed:
c2:33:9e:09:37:93:c3:ca:22:a2:e2:23:3d:51:19:75:45:af:
25:93:93:f2:aa:ec:38:48:76:95:6b:aa:35:b9:d9:65:69:63:
39:ff:16:19:14:b5:d2:97:77:65:6d:58:ce:51:d1:c3:df:c4:
ea:65:a3:54:48:1e:7f:d8:9f:20:56:32:90:af:94:95:35:8e:
b9:fc:5a:b3:a2:4a:57:7a:28:20:d4:0b:41:fa:8f:a9:91:72:
3f:73:4a:f0:98:2f:00:4a:da:55:16:b9:f2:20:0c:3c:64:5a:
e4:d3:3c:05:e4:01:80:54:20:a6:92:6d:c6:e0:42:f1:6c:08:
45:42:18:76:2e:22:e9:fc:84:1c:5e:2d:9f:fe:a6:1c:55:19:
21:05:05:c2:43:8b:36:3c:a5:1b:1b:56:3d:57:8f:7f:41:3f:
bb:2f:26:84:54:85:ac:c0:59:38:12:d6:f9:be:52:39:8d:28:
35:3a:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:26:59 2026 by rpki-client