Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/22D54F2A873211F1A1DD25DBCE1D38B0.roa
File: 22D54F2A873211F1A1DD25DBCE1D38B0.roa (raw, json)
Hash identifier: 6YJKt+6KEiWJEqvrJ2OOcpZGMxLBjGJJceHlPGGeI9A=
Subject key identifier: 76:0D:A5:AE:62:50:5D:28:E9:ED:84:06:CB:A1:CF:68:0F:BE:A6:A2
Certificate issuer: /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial: 0A28
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/22D54F2A873211F1A1DD25DBCE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:34:43 +0000
ROA not before: Fri 24 Jul 2026 07:34:39 +0000
ROA not after: Sun 30 Nov 2036 07:34:39 +0000
asID: 30999
IP address blocks: 41.76.40.0/21 maxlen: 24
102.160.0.0/14 maxlen: 24
105.235.144.0/20 maxlen: 24
154.71.0.0/19 maxlen: 24
196.192.80.0/22 maxlen: 24
2001:4248::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2600 (0xa28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Validity
Not Before: Jul 24 07:34:39 2026 GMT
Not After : Nov 30 07:34:39 2036 GMT
Subject: CN=6a631593-ab7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:96:85:72:c7:0b:49:25:2f:15:c7:71:2f:
bc:9b:ed:91:2a:70:dd:8b:7a:70:6f:9c:7e:7c:c7:
8d:b5:c1:3b:52:7c:ca:fb:ed:9e:e9:ef:6f:34:48:
60:74:9b:de:73:77:bb:d8:8a:fd:b6:e0:9a:3f:18:
03:f0:26:bf:6c:4f:72:04:70:cd:73:29:29:d5:64:
f5:2a:03:f4:0d:a7:80:10:32:83:11:85:fd:59:75:
96:3a:af:b8:75:54:a7:06:25:0f:87:d4:28:53:6f:
33:8e:fc:bf:1a:63:a3:2a:a9:37:c7:31:6b:68:15:
29:1a:07:37:6b:45:49:31:f7:99:5c:a1:46:50:60:
85:22:32:49:b9:00:39:43:5a:ec:4d:2f:40:50:7d:
96:39:ad:fb:14:ea:15:6e:98:0d:43:53:50:f9:bf:
d3:09:32:31:d3:43:2d:14:5f:ce:f2:8e:98:e6:8e:
fd:a8:05:95:3b:33:db:25:38:df:63:52:2a:93:09:
17:8d:20:31:37:5d:6f:5b:67:b3:ad:c7:a5:55:5e:
ab:53:f4:da:3e:49:d1:fa:90:33:6c:60:70:52:4a:
61:53:fb:22:45:1f:d8:3b:88:fa:ad:d2:c7:91:2d:
bf:dd:c9:5c:11:82:54:fe:32:56:e0:ba:2f:01:c9:
61:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0D:A5:AE:62:50:5D:28:E9:ED:84:06:CB:A1:CF:68:0F:BE:A6:A2
X509v3 Authority Key Identifier:
keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/22D54F2A873211F1A1DD25DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.40.0/21
102.160.0.0/14
105.235.144.0/20
154.71.0.0/19
196.192.80.0/22
IPv6:
2001:4248::/32
Signature Algorithm: sha256WithRSAEncryption
4a:be:17:35:b1:ff:19:71:3c:07:42:fc:09:be:0b:73:2b:8d:
ce:b8:66:23:ce:d3:f1:c7:b2:af:d0:0b:9e:47:92:2f:bb:4c:
6a:44:9a:51:c3:74:8d:eb:7d:75:c3:ae:24:62:bc:07:0c:b3:
39:04:8c:7d:72:23:1d:7a:94:01:82:e8:32:57:1c:a5:09:d9:
0e:a7:28:df:a0:dd:69:15:0c:4b:f6:2a:78:94:43:32:06:89:
99:35:a7:ea:4b:8d:c9:9f:21:43:05:48:7b:be:db:e9:41:4a:
e0:5b:ae:c1:9e:85:e4:52:60:9a:33:de:8d:03:b3:b8:f0:d6:
ff:96:4c:02:2b:39:0f:70:f0:ee:80:be:e6:de:26:1e:f3:1e:
a9:de:86:d4:a4:19:fa:1e:17:a7:d7:ef:02:25:6c:02:95:8b:
dc:ee:df:b5:68:97:17:30:80:0c:cb:57:c4:0f:95:4b:fb:4a:
05:3a:3c:73:57:f0:55:03:8d:45:8f:36:c0:a9:a9:8e:4d:b1:
84:0a:6a:d6:bc:a8:79:65:44:30:ff:f6:35:76:6a:01:18:50:
34:bb:63:66:78:02:33:58:ec:07:3b:ca:ab:0d:35:d9:d6:9f:
ce:69:56:70:72:6e:3c:5d:e2:ea:2a:25:c9:bf:d9:57:26:85:
34:dc:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:47 2026 by rpki-client