Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/C41EE034846D11F1B0082AE7CE1D38B0.roa
File: C41EE034846D11F1B0082AE7CE1D38B0.roa (raw, json)
Hash identifier: vPIx+3su5XEgYcI5vDBbL8/o4dvvzyDdnNa2ovBoobU=
Subject key identifier: DA:AB:B5:31:C5:4E:8C:EA:4A:79:7B:CB:C1:B0:9A:99:99:D2:C4:69
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 04FF
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/C41EE034846D11F1B0082AE7CE1D38B0.roa
Signing time: Mon 20 Jul 2026 19:04:00 +0000
ROA not before: Mon 20 Jul 2026 19:03:57 +0000
ROA not after: Sun 20 Jul 2036 19:03:57 +0000
asID: 0
IP address blocks: 41.191.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF, serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Jul 20 19:03:57 2026 GMT
Not After : Jul 20 19:03:57 2036 GMT
Subject: CN=6a5e7120-289d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:6a:fd:b5:88:79:1c:89:cf:54:08:04:9b:
28:db:3f:eb:67:52:82:bf:a6:2f:3a:d1:33:bf:52:
42:20:87:df:56:a5:ba:8a:42:66:e9:a2:fa:7a:15:
d0:61:ae:20:4f:96:47:ff:28:77:1a:a3:2e:ff:8b:
68:f7:58:bd:25:b0:4b:b7:27:5a:06:38:51:6d:f2:
5c:50:dc:5a:38:79:80:fb:72:9e:9c:b9:46:81:87:
09:9e:2f:2c:4b:d6:35:18:7e:fa:61:a2:ea:62:a2:
f8:6b:34:1a:55:0d:c1:bd:24:7f:a2:7d:12:3f:48:
3d:ea:3f:1e:aa:c7:25:44:de:25:85:32:03:3d:7a:
55:d5:a0:31:e0:6a:02:0f:6e:f6:6b:5e:02:d5:62:
39:b7:fc:8d:fe:74:9b:6b:a2:c5:b0:56:41:31:d3:
bf:e5:e5:24:38:c2:dd:0e:a0:f7:18:1b:c8:be:b8:
76:5f:5b:4c:1e:23:81:a9:e6:9b:6f:20:3a:27:a3:
a3:fe:47:c1:91:61:fb:fe:59:e2:4d:7e:b9:11:95:
cc:d3:cb:c5:a0:f9:fc:19:2d:c4:8b:49:d3:22:7a:
47:9d:06:6e:4a:15:6e:bb:cd:22:9f:9f:48:91:98:
71:50:6a:0c:17:bd:23:d5:77:e3:d8:47:95:9e:a0:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AB:B5:31:C5:4E:8C:EA:4A:79:7B:CB:C1:B0:9A:99:99:D2:C4:69
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/C41EE034846D11F1B0082AE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.191.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:7d:9b:b0:d1:14:e7:2f:09:7b:a6:ac:53:b3:71:00:c5:ec:
8f:5b:63:14:47:7a:d1:cd:f5:d8:1f:7c:aa:26:03:f8:36:27:
c5:37:45:27:77:52:96:41:06:fa:7e:c8:bf:6a:9a:58:e9:3f:
f3:e8:13:bb:2a:14:82:47:c3:7f:d8:b9:0c:5b:4c:c9:03:f8:
46:f2:e0:74:b8:bf:67:4e:2d:e2:c2:f3:d0:f9:e6:e4:a1:9e:
7c:f6:40:e4:a8:39:d6:fb:2b:1a:cf:12:71:34:ee:33:2f:b3:
1c:73:b6:10:5a:bd:80:c0:45:1f:4c:36:22:6f:0f:49:76:1e:
22:c1:26:ee:d1:90:ca:e9:06:4b:ff:2d:9b:c1:d0:98:4f:39:
75:8f:a0:32:3c:61:67:02:fb:8b:48:0d:ce:70:e7:83:4b:03:
72:ce:44:fb:c9:7d:97:66:43:2a:5b:df:fc:c6:2f:d1:2e:21:
8b:09:08:e7:1e:df:f8:7c:06:9f:97:50:ce:72:15:e5:9d:21:
3c:4b:ac:95:28:5e:48:bc:a4:b9:d2:ad:5b:13:f9:74:e8:39:
7f:7f:7c:22:39:06:2c:b7:37:1b:2f:7d:dc:9e:15:0b:3d:9b:
b6:b0:4c:8d:d8:b0:b1:92:af:48:1f:f9:34:cb:26:c2:b5:d5:
37:2a:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:07 2026 by rpki-client