Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4A379DD0858D11F1A5CF10D3CE1D38B0.roa
File: 4A379DD0858D11F1A5CF10D3CE1D38B0.roa (raw, json)
Hash identifier: 13vlLCIZHxFQ4U3H+nUJ5SuHw58UZObT5Iu6GUXyyUg=
Subject key identifier: 35:53:6A:63:2F:13:7D:DB:74:F3:45:BA:79:78:16:B6:13:52:9D:CA
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 05FF
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4A379DD0858D11F1A5CF10D3CE1D38B0.roa
Signing time: Wed 22 Jul 2026 05:22:11 +0000
ROA not before: Wed 22 Jul 2026 05:22:07 +0000
ROA not after: Wed 31 Mar 2032 05:22:07 +0000
asID: 23764
IP address blocks: 154.72.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Jul 22 05:22:07 2026 GMT
Not After : Mar 31 05:22:07 2032 GMT
Subject: CN=6a605383-de3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:b7:0f:94:43:1b:d8:b9:98:31:95:2a:c5:
af:0d:33:ed:9b:0a:83:5f:b5:60:d4:d9:23:81:aa:
a6:20:bf:86:ad:16:c5:d2:5d:14:7e:a8:55:17:e4:
ec:e4:76:e7:be:c3:35:9d:40:96:ab:59:b1:04:d3:
52:bd:b7:87:4a:05:18:98:1b:94:c4:5e:fe:4c:2a:
45:a5:94:1a:47:94:6a:5d:bd:9a:f1:e5:47:a1:eb:
38:17:b1:05:e5:c1:3d:4d:ce:d4:61:b3:01:f8:7d:
8d:c7:3d:45:2e:de:fe:51:ba:24:04:fb:72:3a:0f:
d2:8a:89:d3:76:b0:ce:95:2f:34:3b:85:16:ac:a0:
a8:82:59:17:d6:cd:1b:b6:f2:49:9d:09:4a:f0:29:
ec:55:96:d1:a2:5d:d6:df:99:4c:62:e2:4d:a3:5f:
86:b8:46:e2:8d:5f:46:55:6a:5e:70:f3:45:f9:23:
d0:21:8f:23:0b:fa:01:87:0c:f3:81:5b:ea:ae:82:
03:b1:df:2f:14:1f:50:4c:1d:27:26:3e:ad:7c:0d:
c3:6c:0a:d1:f4:38:82:42:91:9c:35:d9:7c:9d:be:
d8:7d:29:61:41:e9:cf:57:71:3d:aa:3c:0a:6c:7b:
5b:d2:38:78:af:32:df:16:a9:47:08:1a:a9:71:73:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:6A:63:2F:13:7D:DB:74:F3:45:BA:79:78:16:B6:13:52:9D:CA
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/4A379DD0858D11F1A5CF10D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:37:80:b7:29:9e:aa:d0:5d:b8:6d:ff:b8:71:4e:ea:87:39:
d2:09:c5:75:2f:15:3c:4f:52:59:e7:2e:a3:04:d4:96:0a:dd:
0d:e6:c9:ca:63:f3:ea:68:62:3c:00:64:48:5b:35:04:d5:28:
75:24:36:ea:47:c7:af:cb:7f:e3:83:ed:a4:48:70:4f:9b:fc:
b3:42:26:72:19:f1:71:0d:71:6a:28:69:d2:40:06:bd:7b:84:
c4:8f:6c:34:0c:15:98:32:38:9e:90:64:3e:8f:a9:85:42:f6:
e2:f8:c8:1e:6d:6d:a8:fb:0a:bc:0a:9e:e0:d2:24:59:7b:61:
52:41:6e:c3:79:d7:97:1e:72:4a:30:c4:a8:e4:d7:ba:2e:a2:
4d:83:0f:07:7a:4e:8e:bb:f7:b7:26:19:68:9d:21:e4:78:77:
1f:ed:e3:00:83:b8:20:9f:97:ba:d2:12:8c:bb:7a:a4:fb:7f:
66:b8:fe:f2:fe:db:03:c5:7c:8b:32:20:65:d9:82:f5:ec:3e:
24:ab:72:95:d9:2c:30:b8:1b:d9:89:28:c5:d9:d7:37:3f:eb:
2b:62:a6:3c:d5:3a:06:3b:1d:20:11:a0:e0:da:0b:3d:bc:b9:
9d:69:4c:62:45:ed:99:ac:a3:54:0e:f1:a2:7c:f6:b8:5a:09:
56:6f:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:34:07 2026 by rpki-client