Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/FCD3D5DE844911F1A8FA5F13CF1D38B0.roa
File: FCD3D5DE844911F1A8FA5F13CF1D38B0.roa (raw, json)
Hash identifier: FhAGrMj5xojX6TYFKx5nozxrwXt8TLfTYJbvtMzKy44=
Subject key identifier: D6:9E:9B:76:6E:FD:F1:7A:1F:DC:66:A0:AC:E3:8C:B1:ED:40:7A:79
Certificate issuer: /CN=F36D987FAF/serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Certificate serial: 07
Authority key identifier: 7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/FCD3D5DE844911F1A8FA5F13CF1D38B0.roa
Signing time: Mon 20 Jul 2026 14:47:54 +0000
ROA not before: Mon 20 Jul 2026 14:47:50 +0000
ROA not after: Fri 20 Jul 2029 14:47:50 +0000
asID: 328459
IP address blocks: 41.76.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D987FAF, serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Validity
Not Before: Jul 20 14:47:50 2026 GMT
Not After : Jul 20 14:47:50 2029 GMT
Subject: CN=6a5e351a-8924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:19:ab:e2:91:96:61:48:28:a1:3f:a9:55:
b5:39:0c:54:3e:2e:15:fb:33:41:32:83:d6:71:16:
3e:c1:3d:45:0a:ed:36:4d:cc:1a:d7:0e:dc:8f:11:
0a:66:a4:ca:e5:c0:29:78:a8:7a:d4:0f:e4:24:27:
0a:7f:0c:b3:c8:11:59:fb:7f:f9:3d:50:5f:ad:1d:
c6:56:4a:9d:6d:4f:c0:ab:a2:ca:d3:8d:47:5a:05:
e2:d2:22:5e:06:22:ca:ad:56:d4:66:2b:af:6c:f9:
db:c1:c9:2d:c3:7c:88:76:3e:5d:7a:5d:72:9b:06:
fa:50:05:79:d0:ab:d5:e1:9d:01:40:29:29:e5:96:
ca:84:a9:ae:bf:a3:9b:68:ec:86:91:8e:5f:bc:84:
32:5e:78:cf:65:cb:67:f9:d0:70:2f:0d:94:65:c7:
c1:21:b3:0e:8e:9b:dd:d8:ca:c8:73:0a:d9:cd:a4:
8d:bc:bc:cd:78:c8:bd:01:78:58:5e:36:e8:3b:c4:
20:d3:81:2e:ed:5c:2d:ca:1e:7f:a2:96:f6:5e:63:
87:ee:cc:87:5f:a1:05:4d:4d:a3:99:3c:d7:fd:5d:
3f:09:40:d8:41:2d:16:f2:ae:47:65:95:e8:a3:f3:
d3:bf:a5:db:4c:65:82:7f:34:1d:74:40:09:03:46:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:9B:76:6E:FD:F1:7A:1F:DC:66:A0:AC:E3:8C:B1:ED:40:7A:79
X509v3 Authority Key Identifier:
keyid:7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/FCD3D5DE844911F1A8FA5F13CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.240.0/21
Signature Algorithm: sha256WithRSAEncryption
59:92:79:09:57:23:3f:73:8f:a8:5a:c7:a1:f3:a6:0a:5e:01:
fe:d7:39:6c:03:ee:02:5c:1c:42:09:04:1f:fb:2b:0d:f4:a8:
41:2a:91:55:50:cb:19:74:12:dc:cc:0e:94:10:42:b5:df:65:
c2:1c:11:5e:a2:a9:ad:28:40:06:a8:4a:b6:d4:88:fe:cd:ea:
f2:d9:ea:fd:ec:d1:9a:22:95:d3:7e:e5:1a:d9:9c:cc:16:06:
a9:d9:ea:1e:48:1f:54:0f:0f:43:e3:25:93:d7:50:9f:d4:59:
26:ab:a2:ed:a3:5a:ea:90:d8:f6:20:67:16:c5:51:a9:6d:dc:
fd:0d:d9:d7:91:6c:7a:d6:e2:0d:8c:ee:b8:a0:39:87:55:a9:
51:e8:9e:6d:97:f7:bd:e2:b3:c4:67:ac:1e:b0:e7:d5:57:bd:
25:a9:fd:5e:45:48:15:d3:ac:59:1f:38:d0:df:b9:2f:74:2d:
12:91:0c:cc:42:88:52:b4:45:47:0d:15:c9:1c:9d:23:18:1d:
c8:1d:3d:d8:1f:2a:8d:89:f4:2a:b9:66:04:2e:40:30:04:67:
6e:15:5e:e4:82:ed:c7:c0:a4:c4:4c:e9:b4:99:a1:00:22:83:
04:ac:13:36:a8:5f:12:34:97:34:d6:f4:fa:af:8a:f7:8a:52:
9f:a9:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:37:10 2026 by rpki-client