Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/7E8D503E195411F1A25C2AB8DAE4EC9C.roa
File: 7E8D503E195411F1A25C2AB8DAE4EC9C.roa (raw, json)
Hash identifier: LndX4htGhh1sJgeBAywfbXKEn72T5/YVdtcKjiz/a2g=
Subject key identifier: 0D:D4:21:36:6B:63:FF:26:EB:16:91:DE:E4:9A:17:A6:9E:14:AC:8B
Certificate issuer: /CN=F36D4684AF/serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
Certificate serial: 06F3
Authority key identifier: B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/7E8D503E195411F1A25C2AB8DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 12:03:32 +0000
ROA not before: Fri 06 Mar 2026 12:03:27 +0000
ROA not after: Thu 06 Mar 2036 12:03:27 +0000
asID: 37333
IP address blocks: 41.76.32.0/21 maxlen: 24
41.77.200.0/21 maxlen: 24
41.138.64.0/21 maxlen: 24
102.67.48.0/21 maxlen: 24
154.73.240.0/21 maxlen: 24
2c0f:fba0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779 (0x6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D4684AF, serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
Validity
Not Before: Mar 6 12:03:27 2026 GMT
Not After : Mar 6 12:03:27 2036 GMT
Subject: CN=69aac294-71da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:52:30:21:a3:d0:5b:22:01:c8:37:f9:60:
94:12:a8:63:59:e7:87:75:f1:d7:4f:80:de:09:80:
9e:58:54:52:e2:fc:69:fe:35:66:48:05:17:60:45:
b5:1e:7f:e2:05:19:79:90:9b:25:b8:cd:65:f5:a0:
cd:8b:83:1f:c5:47:e4:04:5d:c6:44:dd:16:43:72:
59:c3:2a:3c:d0:d2:a7:45:70:e2:a4:b0:02:6c:b5:
8d:09:35:fd:02:e3:25:76:4b:83:f4:b3:8a:4f:ee:
f9:18:10:a5:5b:52:8b:f3:61:7a:41:0f:f6:b1:53:
22:45:0a:3b:22:54:70:4c:c3:c5:24:2e:9e:77:1c:
57:36:9e:b8:ed:01:eb:49:6d:33:17:12:f4:ad:d7:
16:51:dd:ec:47:a0:3b:cf:7a:6f:22:ee:95:87:b6:
ab:c0:33:67:97:ad:01:c4:b1:75:eb:48:26:ef:1f:
0c:2f:e6:7a:c7:5b:42:68:c1:cb:27:5c:ec:ab:4d:
68:95:a0:66:0d:89:ca:61:a5:92:50:fb:33:88:b0:
79:e0:f6:cb:56:6b:a8:e8:86:a1:fd:c4:9d:e3:c9:
0b:73:61:64:f4:13:28:31:1f:22:1b:d9:b5:a1:40:
3f:48:9d:7a:5b:32:7c:2e:98:e2:a6:de:53:e4:a3:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:21:36:6B:63:FF:26:EB:16:91:DE:E4:9A:17:A6:9E:14:AC:8B
X509v3 Authority Key Identifier:
keyid:B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/7E8D503E195411F1A25C2AB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.32.0/21
41.77.200.0/21
41.138.64.0/21
102.67.48.0/21
154.73.240.0/21
IPv6:
2c0f:fba0::/32
Signature Algorithm: sha256WithRSAEncryption
28:a4:99:2a:1d:73:16:58:ca:46:78:54:f3:31:ab:ce:de:46:
81:21:1c:0f:d3:67:ef:ae:dd:20:76:1b:36:33:6f:a6:7e:a3:
3e:05:ab:d8:31:6b:f5:98:14:63:99:6b:8a:04:25:ca:d8:e4:
36:66:4c:06:58:67:84:96:0a:1b:1a:62:76:91:be:bf:33:4d:
b8:d2:0c:72:26:1b:d3:d6:7e:27:06:1a:b8:2c:f2:fe:aa:3d:
be:c9:5e:29:d7:2b:4f:5a:74:a9:58:37:a0:64:8a:5a:89:ba:
21:f0:2c:5f:e8:76:39:92:cf:41:d9:c9:0b:49:73:de:78:e0:
9a:52:e8:d8:bd:c6:28:6c:0c:1c:ec:43:85:de:b1:d6:15:49:
6a:ac:bf:f1:62:b7:0e:fd:6e:2f:0f:a4:24:9a:5c:bf:34:03:
74:78:10:ff:d6:c2:9d:65:55:12:83:68:d8:76:fc:0a:e2:0c:
eb:dc:01:26:25:65:85:bc:85:f6:9a:5a:21:fb:fb:bc:ca:58:
47:12:47:f5:17:60:ca:30:1a:9c:9d:ac:66:99:ad:52:ba:6f:
a4:6f:ac:96:30:07:79:27:b9:88:b0:58:71:34:38:ae:9b:95:
ff:bf:ca:57:af:86:82:c7:22:27:5c:a9:e1:b3:04:17:b9:84:
56:e2:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:05 2026 by rpki-client