Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/5BCF75C485B811F1B48AFBD2CE1D38B0.roa
File: 5BCF75C485B811F1B48AFBD2CE1D38B0.roa (raw, json)
Hash identifier: hCJEpBQT1eimJ22/tIKse9Q4eQjQsfb/Qd4hKV0FwFk=
Subject key identifier: 00:1D:4B:95:FA:88:D2:72:86:FC:0C:6A:86:47:CA:CB:F7:C0:D5:27
Certificate issuer: /CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Certificate serial: 050E
Authority key identifier: 8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/5BCF75C485B811F1B48AFBD2CE1D38B0.roa
Signing time: Wed 22 Jul 2026 10:30:29 +0000
ROA not before: Wed 22 Jul 2026 10:30:25 +0000
ROA not after: Fri 20 Jul 2029 10:30:25 +0000
asID: 37143
IP address blocks: 41.222.56.0/21 maxlen: 24
41.222.56.0/22 maxlen: 22
41.222.60.0/23 maxlen: 23
41.222.62.0/24 maxlen: 24
41.222.63.0/24 maxlen: 24
2c0f:fb88::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1294 (0x50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A854FAF, serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Validity
Not Before: Jul 22 10:30:25 2026 GMT
Not After : Jul 20 10:30:25 2029 GMT
Subject: CN=6a609bc5-673c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:47:aa:e4:a2:75:e0:6c:00:22:88:31:1b:
2b:09:f0:61:62:14:18:e8:2e:93:d3:1d:62:7b:ed:
08:ee:6b:81:fc:63:6a:6c:33:01:af:34:0f:51:a2:
2f:66:4c:d1:ea:a4:8f:c3:9f:5a:25:d4:88:53:43:
d2:6f:ad:18:80:62:ae:d8:90:65:a4:40:95:14:99:
d6:01:c0:fc:56:5b:96:96:c3:54:8b:ab:a0:ba:e1:
41:8f:bb:94:ab:b4:d3:1e:47:d5:9b:3d:1a:20:38:
aa:aa:f5:44:cb:fb:62:5b:06:e6:29:2a:85:83:32:
39:55:4a:93:e6:0a:14:ff:a5:26:49:bb:93:80:91:
b6:b8:95:25:0d:8f:03:34:8b:80:e3:f3:e5:28:01:
e2:aa:03:71:ef:09:6a:fa:d3:16:07:83:1f:4a:6f:
9f:8d:ce:d9:af:2d:6e:9a:ef:25:9e:4b:ab:54:d7:
8d:3a:01:cb:81:32:8b:52:20:f1:dd:28:83:72:67:
ea:17:43:27:e2:02:e2:2d:a2:6a:e9:c8:a5:6f:2c:
23:82:07:77:69:6e:61:e9:69:04:f9:5d:e1:23:43:
28:6d:3a:34:7e:28:f3:de:b7:de:1e:87:06:a6:61:
5d:af:e7:5b:76:e6:f8:5d:8e:24:04:81:7b:bd:a6:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1D:4B:95:FA:88:D2:72:86:FC:0C:6A:86:47:CA:CB:F7:C0:D5:27
X509v3 Authority Key Identifier:
keyid:8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/5BCF75C485B811F1B48AFBD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.56.0/21
IPv6:
2c0f:fb88::/32
Signature Algorithm: sha256WithRSAEncryption
35:f0:2d:e4:a0:9d:dd:d0:3a:1a:bd:93:b8:3b:95:ff:2b:7b:
9e:bc:eb:e1:09:3d:11:2f:d1:3c:2e:e4:fe:23:3a:4e:ba:0c:
fb:82:41:77:92:6f:0d:e2:01:92:cd:01:3c:a3:ee:3c:01:f7:
a0:16:5b:45:98:40:4b:bb:ed:40:52:0d:aa:49:ac:b9:fa:82:
93:e0:1c:f2:c1:c2:c9:83:cd:93:f3:f5:95:ba:77:c5:82:cb:
a2:c0:a4:3e:db:83:b6:9b:df:e9:aa:e2:da:5b:90:96:7a:95:
a0:39:d1:b7:b7:b5:28:5f:48:ee:2b:ae:23:e3:ad:5c:be:d9:
52:49:ad:61:51:7d:b8:9d:82:18:cd:9a:cc:11:1b:d4:6e:01:
79:aa:b6:55:22:bc:0d:da:0a:34:50:70:80:72:52:ce:e9:26:
4a:fd:e9:41:1e:82:89:3e:09:90:04:32:cc:97:86:6f:84:89:
39:4b:63:3d:3e:d6:fb:33:c6:88:35:fc:d8:d6:4b:36:06:6b:
b0:b5:ff:3f:c4:7d:73:9c:8e:18:90:a0:45:d4:50:8e:5d:b4:
86:ab:e5:6c:04:d8:a9:57:8e:44:ae:3c:21:40:00:ee:62:78:
6b:64:f9:01:da:2a:d8:b5:34:6e:9c:fe:d4:fe:b7:9a:29:ae:
1e:c6:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:44 2026 by rpki-client