Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/5F85225A873311F19C71D2DFCE1D38B0.roa
File: 5F85225A873311F19C71D2DFCE1D38B0.roa (raw, json)
Hash identifier: FLClJViDm2ygpv43e3sB4wxskOHtddicfBdPxrJHMUo=
Subject key identifier: CE:ED:BF:47:A8:19:B5:25:F9:D9:19:8D:BE:C5:CC:3A:DE:A1:0E:E2
Certificate issuer: /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial: 0A2C
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/5F85225A873311F19C71D2DFCE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:43:34 +0000
ROA not before: Fri 24 Jul 2026 07:43:30 +0000
ROA not after: Sun 30 Nov 2036 07:43:30 +0000
asID: 4755
IP address blocks: 41.76.40.0/24 maxlen: 24
41.76.41.0/24 maxlen: 24
41.76.43.0/24 maxlen: 24
41.76.44.0/24 maxlen: 24
105.235.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2604 (0xa2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Validity
Not Before: Jul 24 07:43:30 2026 GMT
Not After : Nov 30 07:43:30 2036 GMT
Subject: CN=6a6317a6-ce09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:19:e9:0e:53:d2:d3:13:8b:e3:d6:cc:d7:
97:11:54:4e:0b:17:53:b5:02:b9:0f:0c:29:03:b6:
40:72:3e:a1:f1:c5:04:96:c0:9c:8d:f8:91:44:1f:
4e:b2:f7:eb:ce:54:62:db:bd:c5:4f:23:a1:fc:33:
b7:c0:3d:3f:05:33:72:4f:3f:54:6d:62:5f:ba:eb:
d1:40:52:a4:aa:00:8a:42:ee:b8:e1:0c:37:6f:34:
c0:00:e9:3b:3a:7a:e9:cc:e1:82:a2:49:8f:8a:4d:
38:22:2e:a6:93:7e:37:c9:39:3d:ce:b1:b8:94:75:
3e:f5:71:35:ce:6a:55:ca:dc:ac:d5:77:dd:ef:7e:
17:c3:b6:f3:44:d7:61:ce:8e:9a:23:23:3e:9f:2b:
5f:e7:5a:79:64:ea:75:7b:77:fe:cf:e0:47:65:05:
43:89:41:ba:d8:65:94:cb:df:19:58:d7:ff:cf:50:
f6:74:94:ef:6a:c5:ce:fe:0d:74:ef:7f:49:94:fb:
33:4b:c2:04:f5:3d:dc:bd:bd:8b:a9:1a:3f:82:18:
2c:6f:57:2b:a4:e0:3e:01:37:33:34:14:6b:25:7c:
90:74:ca:e9:2d:88:46:6e:f2:16:a6:14:e9:ba:13:
e4:f4:3e:88:46:36:94:d4:cd:64:61:11:fe:47:50:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:BF:47:A8:19:B5:25:F9:D9:19:8D:BE:C5:CC:3A:DE:A1:0E:E2
X509v3 Authority Key Identifier:
keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/5F85225A873311F19C71D2DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.40.0/23
41.76.43.0-41.76.44.255
105.235.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c7:3b:83:fb:76:69:2f:3b:de:0d:6c:36:be:89:f0:ab:c9:
cc:93:3f:36:99:d8:7e:f3:40:7e:34:79:58:2b:f1:9d:4a:c2:
34:17:6f:ee:b3:08:69:1c:18:36:51:d9:67:ae:0c:2a:04:14:
0a:bf:51:58:2d:f5:cd:dc:41:d7:45:fa:e8:98:71:41:81:4f:
c0:79:9c:68:86:b0:3f:af:26:41:35:58:de:bf:6f:36:a9:ed:
41:fd:b7:21:b0:cb:e6:31:2f:19:5a:60:ed:24:16:6b:61:1a:
70:4f:6c:a1:07:19:c2:99:06:2f:8c:ff:cb:44:7d:41:cb:25:
8e:40:90:9b:2d:2e:42:38:e9:ab:b9:a2:3e:ff:ec:1b:f1:78:
45:94:5a:39:f6:6d:3f:79:f7:32:2e:e7:80:46:d7:94:1a:1c:
b7:d0:bb:69:8a:98:9b:b5:62:02:cf:4f:be:52:c4:dd:bb:73:
2a:2e:99:b5:64:4a:d8:58:5e:c9:79:f5:d1:cb:89:bf:e8:0d:
ee:18:9a:56:4c:6f:4c:f1:77:7e:90:13:bc:b8:77:9f:20:23:
fb:af:d9:a7:7e:ab:fe:cc:21:06:b5:a2:b1:4b:07:e3:97:17:
c1:73:c6:44:32:88:e2:14:82:68:58:10:20:41:f9:c4:c4:50:
4b:fe:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:05 2026 by rpki-client