Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/328118D26ED211F1A7E0B60BCF1D38B0.roa
File: 328118D26ED211F1A7E0B60BCF1D38B0.roa (raw, json)
Hash identifier: mpYwvFPIIwGBad6LgXffGJB90JE3h4W8XaZN6Yka/Yc=
Subject key identifier: E3:FA:9E:2C:5A:6C:19:A3:89:65:EC:A1:D6:93:CD:5B:76:F6:2A:A2
Certificate issuer: /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial: 0306
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/328118D26ED211F1A7E0B60BCF1D38B0.roa
Signing time: Tue 23 Jun 2026 07:07:30 +0000
ROA not before: Tue 23 Jun 2026 07:07:25 +0000
ROA not after: Mon 30 Jun 2036 07:07:25 +0000
asID: 329427
IP address blocks: 41.85.208.0/23 maxlen: 23
41.85.208.0/24 maxlen: 24
41.85.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Validity
Not Before: Jun 23 07:07:25 2026 GMT
Not After : Jun 30 07:07:25 2036 GMT
Subject: CN=6a3a30b2-a9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:fa:44:eb:2d:81:a2:e8:17:09:15:8e:d7:
04:83:d3:08:83:f3:d5:55:83:4b:cf:6a:0c:ce:e6:
da:7c:3d:54:10:41:be:95:92:06:01:ea:d4:ff:70:
35:68:36:cd:d8:a5:80:d9:d1:90:48:a4:5f:39:9d:
b0:fd:2a:00:25:69:80:a4:73:a3:01:7b:f6:fe:c2:
cb:f2:b7:18:fd:fd:8d:94:48:16:94:40:6c:34:80:
32:34:21:57:3e:e9:f0:98:19:ba:39:c5:8c:37:e5:
ec:15:d1:06:3f:1d:c7:80:a9:45:7b:3d:58:a0:61:
cd:9e:67:7a:99:9b:33:87:47:29:57:e8:32:59:bb:
88:f6:8f:da:85:6e:2d:06:db:39:da:c3:4d:a3:d7:
ac:61:b3:fe:bc:de:8f:6e:14:80:51:e4:fc:1f:53:
a4:97:fc:49:80:eb:fe:0f:76:54:85:a0:49:66:76:
2e:eb:95:eb:8c:35:25:f8:9b:4b:57:4a:25:8f:34:
21:e0:d5:5f:76:c1:4e:9d:e0:73:85:9a:fe:a1:fb:
33:cd:22:b3:22:11:e9:b1:bf:25:83:83:3a:3f:7c:
cd:1d:8f:59:5f:85:37:88:24:16:73:f8:9c:5a:44:
9a:5d:0e:57:38:c2:ee:c9:f8:7c:28:99:52:79:5f:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:9E:2C:5A:6C:19:A3:89:65:EC:A1:D6:93:CD:5B:76:F6:2A:A2
X509v3 Authority Key Identifier:
keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/328118D26ED211F1A7E0B60BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.208.0/23
Signature Algorithm: sha256WithRSAEncryption
61:a8:e0:bd:fd:0f:cb:02:fd:14:21:c1:be:18:1a:92:3f:8b:
36:d6:8f:0b:12:12:56:04:3b:e3:e8:ed:59:66:55:c4:24:42:
7e:66:6e:a4:9a:62:3d:c4:72:50:2a:41:9a:99:f8:2c:13:c4:
27:ec:4c:65:2b:37:e2:05:61:0a:ea:48:73:de:eb:85:ab:ca:
47:ac:0c:48:36:91:56:5c:b6:19:bd:68:86:f7:97:c5:b8:07:
14:55:9f:a1:f5:ce:38:5c:ea:bf:77:98:b3:f4:cb:30:8f:fc:
38:40:f8:c9:ac:fc:ab:53:45:b8:a7:f9:aa:cc:52:80:aa:4a:
39:28:62:d1:42:51:fb:2f:76:28:09:16:3f:83:66:14:68:22:
87:72:6e:0c:29:0a:7f:9d:f7:03:7c:a6:74:4e:b6:50:92:13:
a6:b4:a6:39:88:2e:5d:94:92:f0:89:63:a4:9e:56:ed:52:ed:
4a:9e:fb:30:97:d5:78:d0:54:4b:f3:39:6d:61:67:2b:d1:aa:
6d:20:89:fc:0c:5f:0c:91:4f:52:fd:bc:c5:a1:d9:77:ab:74:
47:58:11:b9:75:fb:fd:eb:02:52:9d:b1:d1:58:14:01:82:2a:
89:eb:60:29:c0:ce:bb:43:0b:a9:87:07:8e:f7:0b:b2:88:1f:
35:6a:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:41:23 2026 by rpki-client