Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/353655B83FCC11F1922821BFCE1D38B0.roa
File: 353655B83FCC11F1922821BFCE1D38B0.roa (raw, json)
Hash identifier: IRSZKYkm7LcuUToOhHCRKBS+q6X69O13ur9lhLNv9xs=
Subject key identifier: 5F:7A:E4:75:52:9B:B0:C8:78:A7:67:38:E6:3A:66:7F:9A:E9:EA:5E
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 0FA6
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/353655B83FCC11F1922821BFCE1D38B0.roa
Signing time: Fri 24 Apr 2026 10:56:13 +0000
ROA not before: Fri 24 Apr 2026 10:56:08 +0000
ROA not after: Tue 30 Apr 2030 10:56:08 +0000
asID: 36958
IP address blocks: 41.86.38.0/24 maxlen: 32
2c0f:fef0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4006 (0xfa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Apr 24 10:56:08 2026 GMT
Not After : Apr 30 10:56:08 2030 GMT
Subject: CN=69eb4c4d-7a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:04:1c:46:67:08:76:a2:71:5c:a4:c1:2b:
0a:8e:0b:75:42:3a:d9:29:71:72:c0:e4:1b:4b:33:
8d:69:35:59:63:c2:48:27:e9:90:8c:d3:bc:02:7a:
cc:95:be:58:d4:d3:fb:e8:bf:b7:74:d6:2b:09:58:
a6:a5:59:5f:41:a8:70:a0:00:d7:f6:9a:c5:ca:23:
32:62:ca:a9:8f:46:81:af:a9:ef:af:7a:86:8a:39:
40:44:5d:a2:5a:c6:e4:52:3c:32:3a:6b:0e:26:83:
43:a6:88:ad:b7:1a:06:20:e0:f7:07:d1:3f:16:f1:
4b:1b:7d:77:8b:3d:10:86:64:93:75:b1:03:15:b4:
69:82:60:5b:1a:7f:63:06:e6:72:f2:63:e6:6f:17:
d0:09:41:dd:3d:49:d8:88:ed:0d:ac:f3:19:7d:9a:
21:ae:83:81:7c:18:56:01:df:f2:f5:95:33:e6:dd:
69:54:1b:c8:d8:fd:3b:1a:c0:0a:f2:54:e2:1b:3a:
a9:ee:0a:06:ec:aa:be:37:dd:a4:06:78:6d:23:f1:
ae:f4:5a:7d:06:79:64:fa:3e:d8:f1:56:ac:50:57:
d6:94:af:31:ef:af:b2:b2:69:5e:b0:4a:f6:61:13:
a1:90:dd:43:37:ef:c3:28:c0:93:96:a7:44:db:a2:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7A:E4:75:52:9B:B0:C8:78:A7:67:38:E6:3A:66:7F:9A:E9:EA:5E
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/353655B83FCC11F1922821BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.86.38.0/24
IPv6:
2c0f:fef0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:b1:6c:7d:17:6e:9b:03:7f:91:9b:7c:55:d8:2f:11:e6:97:
b9:61:ab:82:c0:ee:e7:f4:9f:e4:9a:b0:06:87:a1:0a:e5:5a:
3b:7b:3c:e6:00:f5:ac:8c:69:d0:7b:e1:b4:2a:0d:78:24:8c:
71:74:ae:c1:db:1d:79:91:29:4e:97:a1:b7:2a:7b:65:1a:1a:
76:1b:e2:48:33:d2:8c:68:98:40:45:c1:e8:8e:40:d7:a9:85:
83:68:a2:19:4c:b5:4a:14:37:1e:8b:ab:a0:c5:3c:61:e8:5a:
30:cf:0a:cb:60:6c:a9:d2:10:68:b7:5c:7e:ab:6f:b7:3e:f9:
da:23:06:73:78:33:c6:7a:79:5e:1b:91:aa:16:8b:f2:06:b7:
ed:a5:d6:92:14:a1:66:0d:d9:a8:59:f9:08:b6:e5:47:fe:91:
96:af:79:28:71:35:96:18:2c:75:1d:0c:27:88:f0:f4:07:b4:
1d:51:45:cf:28:d5:62:a0:20:27:41:6d:a4:b9:63:a6:08:1d:
be:3f:6b:ba:24:39:fd:43:44:c8:d0:0e:c4:b9:93:42:80:54:
b0:e0:b2:b2:6c:c4:28:13:9b:74:82:49:d0:4e:a9:92:d5:c3:
78:89:e7:90:c2:35:32:ec:1b:96:06:8b:9d:ec:f3:dd:82:0a:
d1:a0:97:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 09:33:09 2026 by rpki-client