Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa
File: F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa (raw, json)
Hash identifier: PW/BAXgHvih22srJgbVXfOqpna8bQSUwnKdkd55yiKw=
Subject key identifier: 33:1D:6E:7C:48:DC:D6:13:83:84:10:8D:9E:C2:D3:FA:A2:62:C1:D3
Certificate issuer: /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial: 0912
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:50:36 +0000
ROA not before: Tue 10 Mar 2026 10:50:31 +0000
ROA not after: Sat 10 Mar 2046 10:50:31 +0000
asID: 31713
IP address blocks: 41.79.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322 (0x912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Validity
Not Before: Mar 10 10:50:31 2026 GMT
Not After : Mar 10 10:50:31 2046 GMT
Subject: CN=69aff77c-cb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:28:d4:26:61:43:0a:b0:d2:ea:c8:db:da:
e7:f1:f8:bf:61:e5:c6:85:aa:d9:12:8d:4c:85:48:
3a:4c:15:42:8d:53:13:96:3a:3f:a8:5e:83:94:8d:
6d:c3:c4:28:07:a5:7b:9c:00:c8:15:80:98:bc:7e:
da:c0:e2:13:ec:44:47:75:2c:15:bb:af:8c:43:d7:
59:93:09:0f:ee:89:f9:c3:da:b6:be:df:aa:3d:31:
e5:f4:42:2c:32:f4:67:e8:24:3b:10:f8:ad:70:27:
e2:db:ea:7f:f6:91:a4:e5:7c:c2:df:75:83:72:8d:
d4:1c:09:1d:59:2d:5c:d8:34:e5:a8:fc:cb:3b:79:
07:ee:91:55:f1:53:c7:4d:af:1a:29:30:cf:b9:5e:
93:ce:a2:88:47:3a:66:d0:f0:c8:eb:b3:21:b5:01:
f1:6a:a1:b9:25:32:86:e1:1e:66:42:74:54:97:52:
d0:86:bb:a3:cf:4f:f8:a7:6a:af:bf:59:99:1e:4b:
18:77:1a:60:a7:ce:c1:0c:e1:6d:10:d6:f9:b1:3d:
ad:ee:9b:90:0b:2c:2a:1b:3c:fa:d2:5f:d5:da:6e:
ca:fb:3c:5c:39:99:cb:37:7f:c0:21:58:0c:20:6a:
15:5a:d6:63:87:4a:87:01:92:d0:0c:4c:f3:e8:c4:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1D:6E:7C:48:DC:D6:13:83:84:10:8D:9E:C2:D3:FA:A2:62:C1:D3
X509v3 Authority Key Identifier:
keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:9e:cb:06:fd:6e:99:c6:49:d1:15:ca:15:12:09:89:0a:d9:
05:3a:7d:cd:8b:75:10:72:95:f1:87:60:c2:1a:5b:38:4e:fe:
7b:76:20:08:84:d8:94:63:48:32:cf:b7:bd:ce:4f:ea:44:74:
0c:c3:04:3a:90:29:f0:6b:92:1d:fe:78:6e:4e:64:28:49:a3:
99:7e:f8:55:91:a4:ae:08:29:5c:ca:33:ae:ae:62:01:dc:46:
d1:01:a3:56:9f:a3:c3:a8:69:48:c7:8b:c4:36:cf:e3:fa:47:
de:70:9e:f5:6d:9b:59:f4:97:ab:18:e6:9f:82:a5:c9:28:20:
ac:e1:70:95:17:ad:bf:05:7a:73:f6:84:a8:67:6b:d3:ff:bd:
80:8b:af:d9:46:35:ca:ce:06:db:50:e9:62:f5:23:32:d6:80:
f1:3c:0e:7c:f6:44:fa:24:d5:c1:64:91:d7:94:0a:05:89:55:
18:16:24:49:01:59:58:8e:a3:ec:64:5f:86:88:f3:18:fc:88:
ee:af:91:0d:b1:9f:fa:01:c4:0b:78:01:f5:f5:a9:cd:63:0b:
59:78:bb:25:01:99:19:36:d2:70:25:5b:ee:05:35:bd:e2:33:
5a:50:5a:1b:d8:0e:a1:3b:7b:ac:59:04:ba:7b:f1:50:37:e1:
57:90:63:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:26:49 2026 by rpki-client