Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/2A74C5F4187D11F1A465C48EDAE4EC9C.roa
File: 2A74C5F4187D11F1A465C48EDAE4EC9C.roa (raw, json)
Hash identifier: fnDGmywkfDEXEdGHYgR/8XMMZSz71Qb9+HbIEmEaRmc=
Subject key identifier: 79:80:C4:7F:38:3D:43:E1:EA:E6:D0:6A:83:74:2D:56:18:AB:B1:3E
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 0AD1
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/2A74C5F4187D11F1A465C48EDAE4EC9C.roa
Signing time: Thu 05 Mar 2026 10:22:09 +0000
ROA not before: Thu 05 Mar 2026 10:22:05 +0000
ROA not after: Wed 05 Mar 2036 10:22:05 +0000
asID: 36915
IP address blocks: 41.207.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 29 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769 (0xad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF, serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Validity
Not Before: Mar 5 10:22:05 2026 GMT
Not After : Mar 5 10:22:05 2036 GMT
Subject: CN=69a95951-35e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:63:6b:92:08:bb:74:aa:bf:db:77:36:36:
0c:55:2b:b1:72:a4:e8:60:b9:00:fc:0e:eb:82:3d:
58:9e:94:94:f3:91:5b:71:6c:75:27:36:0d:ac:e1:
35:8a:29:e4:2d:43:b8:8c:84:73:84:bc:cb:d4:f2:
de:04:5f:80:59:1b:d9:30:f8:7d:dd:b0:83:a5:33:
5a:b6:3d:fe:73:19:ad:2c:09:55:c9:6e:15:90:b2:
79:e7:28:98:1e:91:c6:3c:ac:4c:0b:e5:1d:cb:4a:
51:ff:fb:9c:07:aa:c2:8b:ea:a6:03:da:11:1c:50:
7e:8d:83:a8:45:84:b3:e4:07:dd:3d:94:3d:72:ef:
d0:e5:8d:a0:15:74:b8:83:14:a1:e8:f0:4e:37:ce:
ce:dc:ed:10:b7:f5:b1:f0:e7:44:92:e3:bb:3b:5f:
3b:fe:60:63:da:f8:cf:3f:b7:76:20:00:bc:49:09:
51:3d:25:30:04:65:3f:a3:f0:77:c5:91:06:db:e5:
8e:9c:b4:ba:53:9a:b4:a6:10:9b:b1:eb:59:c0:2f:
67:43:49:10:c7:82:8c:be:a0:80:15:a9:b3:ec:29:
e4:65:2e:7c:ca:e8:b1:3e:ed:24:3f:84:4b:e9:e7:
03:86:74:f2:c0:77:44:be:13:dd:18:51:de:ea:e2:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:80:C4:7F:38:3D:43:E1:EA:E6:D0:6A:83:74:2D:56:18:AB:B1:3E
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/2A74C5F4187D11F1A465C48EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.207.64.0/19
Signature Algorithm: sha256WithRSAEncryption
96:c6:2c:54:7c:b1:ba:3c:ce:e7:79:a7:13:c4:63:d8:ef:e9:
1a:5b:fc:7a:f1:aa:c5:4f:a2:10:1d:08:b7:36:54:a9:ee:2c:
44:60:00:77:5a:ea:74:fe:6b:6f:1a:b0:be:23:af:94:d8:71:
03:b1:08:01:5c:f1:17:b3:4d:2d:3d:99:a4:cc:5f:d8:de:5b:
e9:d3:a1:2c:5c:74:06:7f:4a:cd:47:51:b5:98:0a:60:af:b0:
7e:b6:20:74:1d:44:d2:44:9a:a0:c1:7d:c3:dc:08:69:21:f9:
99:9e:19:17:db:7f:c8:fb:e4:6a:d5:6e:40:a9:c0:66:ca:00:
01:43:31:2d:9a:b2:ee:ca:24:f0:24:cd:72:5b:c7:fe:12:cb:
3f:f7:07:dc:4a:a0:9d:bf:17:fa:9f:ab:8e:3c:e5:0a:31:09:
79:0e:3c:a5:97:a9:47:cb:df:ff:7e:6a:7e:d2:a4:5c:d0:92:
91:6f:c4:db:f2:bb:79:00:6d:9a:42:41:e7:19:a2:17:aa:d8:
39:4e:f5:91:32:4d:b6:2d:4a:27:84:3c:8c:42:bb:e9:cc:4e:
a4:9a:2f:ea:7d:10:26:6c:49:e7:b3:3b:f8:a0:00:62:27:a9:
6f:38:2b:63:93:92:45:b5:cf:34:35:c4:e3:29:d3:aa:90:3a:
96:5a:52:fc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCtEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUMzQTFBRjExMC8GA1UEBRMoOTBFOTg4Nzc5MUNGMkQ5NjA1MDFGOEFFREUyNEEy
MzM0QUJBNTQwMzAeFw0yNjAzMDUxMDIyMDVaFw0zNjAzMDUxMDIyMDVaMBgxFjAU
BgNVBAMTDTY5YTk1OTUxLTM1ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYDmNrkgi7dKq/23c2NgxVK7FypOhguQD8DuuCPVielJTzkVtxbHUnNg2s
4TWKKeQtQ7iMhHOEvMvU8t4EX4BZG9kw+H3dsIOlM1q2Pf5zGa0sCVXJbhWQsnnn
KJgekcY8rEwL5R3LSlH/+5wHqsKL6qYD2hEcUH6Ng6hFhLPkB909lD1y79DljaAV
dLiDFKHo8E43zs7c7RC39bHw50SS47s7Xzv+YGPa+M8/t3YgALxJCVE9JTAEZT+j
8HfFkQbb5Y6ctLpTmrSmEJux61nAL2dDSRDHgoy+oIAVqbPsKeRlLnzK6LE+7SQ/
hEvp5wOGdPLAd0S+E90YUd7q4sprAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUeYDE
fzg9Q+Hq5tBqg3QtVhirsT4wHwYDVR0jBBgwFoAUkOmId5HPLZYFAfiu3iSiM0q6
VAMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFDM0ExLzJEOTY3NzJFRTBEMDExRTg4QUU2MDcxQ0Y4QUVBMjI4L2tPbUlk
NUhQTFpZRkFmaXUzaVNpTTBxNlZBTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tPbUlkNUhQTFpZRkFmaXUzaVNpTTBxNlZBTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjFDM0ExLzJEOTY3NzJFRTBEMDExRTg4QUU2MDcxQ0Y4
QUVBMjI4LzJBNzRDNUY0MTg3RDExRjFBNDY1QzQ4RURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUpz0AwDQYJKoZIhvcNAQEL
BQADggEBAJbGLFR8sbo8zud5pxPEY9jv6Rpb/HrxqsVPohAdCLc2VKnuLERgAHda
6nT+a28asL4jr5TYcQOxCAFc8RezTS09maTMX9jeW+nToSxcdAZ/Ss1HUbWYCmCv
sH62IHQdRNJEmqDBfcPcCGkh+ZmeGRfbf8j75GrVbkCpwGbKAAFDMS2asu7KJPAk
zXJbx/4Syz/3B9xKoJ2/F/qfq4485QoxCXkOPKWXqUfL3/9+an7SpFzQkpFvxNvy
u3kAbZpCQecZoheq2DlO9ZEyTbYtSieEPIxCu+nMTqSaL+p9ECZsSeezO/igAGIn
qW84K2OTkkW1zzQ1xOMp06qQOpZaUvw=
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:06:31 2026 by rpki-client