Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/4D0BB1DE8DA511F1A28797B9CE1D38B0.roa
File: 4D0BB1DE8DA511F1A28797B9CE1D38B0.roa (raw, json)
Hash identifier: Z6d+IZ/l140+LIefSM+goicGVTl0X+CoPnGLigWnIU8=
Subject key identifier: 27:96:3A:BB:18:BA:47:BF:CC:59:9C:B7:26:0C:FE:30:C8:4C:26:AD
Certificate issuer: /CN=F36FB3EDAF/serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
Certificate serial: 0591
Authority key identifier: C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/4D0BB1DE8DA511F1A28797B9CE1D38B0.roa
Signing time: Sat 01 Aug 2026 12:34:13 +0000
ROA not before: Sat 01 Aug 2026 12:34:09 +0000
ROA not after: Fri 01 Aug 2036 12:34:09 +0000
asID: 36965
IP address blocks: 41.73.160.0/19 maxlen: 24
41.221.48.0/20 maxlen: 24
2001:43a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB3EDAF, serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
Validity
Not Before: Aug 1 12:34:09 2026 GMT
Not After : Aug 1 12:34:09 2036 GMT
Subject: CN=6a6de7c5-393b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:04:10:8e:47:55:24:41:d3:2b:78:51:e4:
1a:d9:c8:f3:a9:98:e6:06:27:a5:b4:61:c1:02:d0:
80:c6:52:e4:ad:a8:5b:24:34:3c:af:6b:3e:e9:a8:
ab:a6:5d:27:93:16:81:6d:56:ce:48:93:48:9c:77:
03:ef:70:a8:53:54:8d:f5:09:5f:81:3f:3d:e8:4f:
f3:ed:95:a1:19:4b:d0:cc:f7:0d:95:52:7b:36:dd:
70:2b:9d:84:34:b0:97:88:63:13:e4:3a:cf:89:7b:
3b:53:07:31:a7:bc:14:49:dc:6b:20:2d:22:95:7f:
7a:12:b2:d1:89:a9:96:a7:79:61:bf:09:ec:b5:51:
1a:d4:a0:8a:f9:aa:04:9b:49:ee:c2:be:63:25:0b:
11:d8:da:f6:2d:e6:de:85:b6:68:69:68:81:29:e2:
48:b2:c3:14:fc:33:51:bb:f6:77:f1:1f:9f:99:08:
76:45:8b:01:1e:f0:cf:c8:01:2c:9a:e4:a0:9b:f0:
89:5e:d8:7b:ff:84:a1:76:22:08:98:df:50:98:10:
26:75:36:4d:0f:40:b1:c8:22:5b:6c:82:9a:b9:99:
7e:1a:1f:2c:ce:68:a0:ed:9a:66:57:8d:07:24:09:
bb:15:69:7f:a0:73:ff:e0:a0:f6:15:05:d0:92:ed:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:3A:BB:18:BA:47:BF:CC:59:9C:B7:26:0C:FE:30:C8:4C:26:AD
X509v3 Authority Key Identifier:
keyid:C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/4D0BB1DE8DA511F1A28797B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.73.160.0/19
41.221.48.0/20
IPv6:
2001:43a0::/32
Signature Algorithm: sha256WithRSAEncryption
38:80:fd:de:0b:cb:ec:fe:d1:66:36:40:f9:8d:ab:f3:1f:d5:
5e:c7:3d:9a:69:2f:79:e3:75:35:f2:77:15:e7:83:36:24:c6:
03:27:ff:c2:29:ea:4e:58:ca:f7:74:84:75:cf:fb:71:ec:60:
95:4d:b1:88:86:60:74:0e:1e:4f:0e:03:68:92:1c:51:cd:d3:
f2:32:ea:25:c5:5d:26:33:fa:24:6b:21:96:e1:a7:0d:c4:70:
22:d8:21:09:34:78:0b:86:81:8d:d3:7c:e6:39:5d:23:7e:4f:
e3:30:84:e1:9b:6a:7c:ba:72:b4:13:7f:a7:51:59:8d:1e:2a:
bc:38:af:4b:ee:cf:73:8d:d9:89:cb:ed:49:16:df:ce:33:d1:
6b:e8:75:1d:61:08:88:1e:4a:20:8d:1c:36:fd:e6:cc:c4:aa:
20:e6:f2:d3:6a:9f:14:14:15:51:4f:90:c1:4e:c1:77:6b:93:
b0:5b:93:87:48:1c:9a:5d:bd:aa:c5:60:6e:0f:78:84:13:9f:
92:9f:ce:e9:a6:6c:76:a4:08:3a:6a:19:c6:df:64:d1:98:3d:
78:20:49:ce:ee:b3:09:ae:3c:81:8f:e9:24:bc:c1:c2:36:50:
bd:3f:3d:f0:7b:f0:05:43:d5:8b:d9:b8:aa:b7:48:0f:68:0b:
2c:28:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:33 2026 by rpki-client