Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/3987BD848EFD11F18EE676E9CE1D38B0.roa
File: 3987BD848EFD11F18EE676E9CE1D38B0.roa (raw, json)
Hash identifier: UCErMJTUHZPKL/8zL1wbyaEGRFi0ewPR0ivNDnehriI=
Subject key identifier: B0:22:A4:BF:8F:93:0F:0E:28:F4:7D:5A:9A:7A:C9:28:C4:72:13:4F
Certificate issuer: /CN=F36FCE84AF/serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
Certificate serial: 05DD
Authority key identifier: F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/3987BD848EFD11F18EE676E9CE1D38B0.roa
Signing time: Mon 03 Aug 2026 05:36:07 +0000
ROA not before: Mon 03 Aug 2026 05:36:03 +0000
ROA not after: Sun 31 Aug 2042 05:36:03 +0000
asID: 37425
IP address blocks: 41.79.196.0/22 maxlen: 22
41.79.196.0/24 maxlen: 24
41.79.197.0/24 maxlen: 24
41.79.198.0/24 maxlen: 24
41.79.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCE84AF, serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
Validity
Not Before: Aug 3 05:36:03 2026 GMT
Not After : Aug 31 05:36:03 2042 GMT
Subject: CN=6a7028c7-1b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2b:fc:17:47:99:04:53:db:39:60:35:e7:fe:
78:59:9f:81:1a:e0:b8:b9:04:81:be:90:e9:50:68:
e8:39:b0:42:3a:86:06:1e:f9:2d:05:25:2c:0f:9f:
0d:99:cd:d9:be:77:76:b2:78:8f:a6:54:c8:ee:1e:
75:f8:6d:bd:fb:84:f6:04:e6:6a:b3:e9:09:5b:28:
0b:3f:fd:1b:65:64:5e:c8:96:0a:7d:be:f9:39:49:
04:e3:c9:51:56:8e:d0:23:88:18:bc:33:14:a1:a9:
54:13:4a:f7:7b:18:8a:10:03:91:a1:96:2c:18:d1:
c1:7c:26:40:2e:85:4a:87:db:42:df:7c:9b:8e:79:
37:e7:00:e7:f5:d7:fb:f1:4e:71:97:97:e3:77:0d:
55:a8:07:d1:40:bb:f7:e1:5a:ce:16:bc:10:a0:08:
e3:18:6f:8c:36:b5:50:51:ed:c2:7b:04:c0:44:4e:
2b:13:60:c2:92:6c:c2:1d:7a:a7:2e:01:4f:b8:d4:
9b:ac:34:ae:bf:59:b9:11:77:46:30:81:aa:ee:3f:
e3:fa:0e:56:c7:e2:9e:25:d0:65:08:06:c6:71:94:
c7:0d:05:89:61:6a:00:2a:0d:43:78:6a:d2:87:4b:
fe:48:30:78:3f:e0:dc:87:ef:4d:4a:c0:22:b5:e0:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:A4:BF:8F:93:0F:0E:28:F4:7D:5A:9A:7A:C9:28:C4:72:13:4F
X509v3 Authority Key Identifier:
keyid:F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/3987BD848EFD11F18EE676E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.196.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:13:e4:e2:c5:97:17:52:7c:08:c5:bd:89:e2:a8:43:69:ef:
01:c8:80:07:3f:80:7b:f8:b5:94:c5:07:67:5c:a1:70:b2:38:
2b:f5:cb:4d:55:82:d8:0a:9f:21:ed:47:5c:cb:aa:b2:72:88:
47:54:3d:27:a2:2c:e5:cb:c7:58:9a:1b:d6:ec:7c:e4:b2:94:
a1:d1:83:03:89:8b:3c:59:8c:de:b3:47:ac:1c:78:91:3f:a9:
51:62:1b:cc:f3:84:2b:f3:94:c4:39:b4:d2:a4:93:45:d2:e8:
95:3c:ee:f2:11:6a:dd:d6:b5:15:ee:99:38:a7:6d:a5:89:81:
76:70:9e:ae:5b:93:4b:b9:9d:ee:45:83:87:74:14:98:b6:ef:
2d:cb:95:d1:9e:6b:25:80:91:87:e0:50:9f:19:a1:4e:3a:09:
d9:dd:f1:f7:fd:8c:8a:4c:37:8c:ca:63:cd:bb:71:ff:65:dc:
39:c6:d4:ab:e0:4f:3c:20:67:bd:61:4d:20:5a:cc:44:0f:a7:
50:5a:74:e7:7e:d2:d0:8b:8f:ec:eb:e3:d0:27:13:14:c8:cc:
e8:17:ea:c2:11:d7:23:18:14:0d:50:db:d5:bb:ad:d3:56:c1:
d9:13:b2:78:69:e8:05:96:f9:56:f5:0c:5e:84:cd:94:4e:3c:
b4:6e:83:97
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkNFODRBRjExMC8GA1UEBRMoRjhDMjRENEJEODBBNUYwMjFBNkQ4NUNERDBGRjA3
NjgzREUxNzE2NzAeFw0yNjA4MDMwNTM2MDNaFw00MjA4MzEwNTM2MDNaMBgxFjAU
BgNVBAMTDTZhNzAyOGM3LTFiNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD1K/wXR5kEU9s5YDXn/nhZn4Ea4Li5BIG+kOlQaOg5sEI6hgYe+S0FJSwP
nw2Zzdm+d3ayeI+mVMjuHnX4bb37hPYE5mqz6QlbKAs//RtlZF7Ilgp9vvk5SQTj
yVFWjtAjiBi8MxShqVQTSvd7GIoQA5GhliwY0cF8JkAuhUqH20LffJuOeTfnAOf1
1/vxTnGXl+N3DVWoB9FAu/fhWs4WvBCgCOMYb4w2tVBR7cJ7BMBETisTYMKSbMId
eqcuAU+41JusNK6/WbkRd0YwgaruP+P6DlbH4p4l0GUIBsZxlMcNBYlhagAqDUN4
atKHS/5IMHg/4NyH701KwCK14EmxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsCKk
v4+TDw4o9H1amnrJKMRyE08wHwYDVR0jBBgwFoAU+MJNS9gKXwIabYXN0P8HaD3h
cWcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDRTg0L0E4RTEzMzY4MTdGMTExRUQ5Rjk4QThDMEYxMjIyNDY4Ly1NSk5T
OWdLWHdJYWJZWE4wUDhIYUQzaGNXYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1NSk5TOWdLWHdJYWJZWE4wUDhIYUQzaGNXYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZDRTg0L0E4RTEzMzY4MTdGMTExRUQ5Rjk4QThDMEYx
MjIyNDY4LzM5ODdCRDg0OEVGRDExRjE4RUU2NzZFOUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIpT8QwDQYJKoZIhvcNAQEL
BQADggEBACwT5OLFlxdSfAjFvYniqENp7wHIgAc/gHv4tZTFB2dcoXCyOCv1y01V
gtgKnyHtR1zLqrJyiEdUPSeiLOXLx1iaG9bsfOSylKHRgwOJizxZjN6zR6wceJE/
qVFiG8zzhCvzlMQ5tNKkk0XS6JU87vIRat3WtRXumTinbaWJgXZwnq5bk0u5ne5F
g4d0FJi27y3LldGeayWAkYfgUJ8ZoU46Cdnd8ff9jIpMN4zKY827cf9l3DnG1Kvg
TzwgZ71hTSBazEQPp1BadOd+0tCLj+zr49AnExTIzOgX6sIR1yMYFA1Q29W7rdNW
wdkTsnhp6AWW+Vb1DF6EzZROPLRug5c=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:19 2026 by rpki-client