Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/CA99C59C873211F1921B7CDDCE1D38B0.roa
File: CA99C59C873211F1921B7CDDCE1D38B0.roa (raw, json)
Hash identifier: J8mkXybFE9u2dG4g/6rMiX/R0vnwSK7ht7HLC5KmFUo=
Subject key identifier: 81:6F:E8:25:92:5F:F6:07:E7:FE:7E:2C:D9:C4:84:A6:30:1D:A8:EF
Certificate issuer: /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial: 0A2A
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/CA99C59C873211F1921B7CDDCE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:39:24 +0000
ROA not before: Fri 24 Jul 2026 07:39:21 +0000
ROA not after: Sun 30 Nov 2036 07:39:21 +0000
asID: 30999
IP address blocks: 41.76.40.0/24 maxlen: 24
41.76.41.0/24 maxlen: 24
41.76.43.0/24 maxlen: 24
41.76.44.0/24 maxlen: 24
105.235.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602 (0xa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Validity
Not Before: Jul 24 07:39:21 2026 GMT
Not After : Nov 30 07:39:21 2036 GMT
Subject: CN=6a6316ac-4b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:22:97:05:c8:5b:38:9e:c4:28:fd:c2:b6:
68:a4:19:13:49:d1:78:10:74:fd:e3:e4:05:b7:80:
1c:09:7d:24:2b:74:cd:e1:0e:62:17:19:34:df:93:
9f:30:16:fa:79:4e:32:ff:6b:ba:0b:23:2c:e0:3d:
12:40:4a:30:a7:cd:28:4b:cb:c2:43:06:14:32:ba:
99:83:91:50:e2:79:de:fd:03:61:c1:89:5c:42:34:
86:e4:18:22:33:72:c6:4c:51:f4:c5:96:1b:32:36:
10:78:0c:48:5a:98:b7:a3:87:b5:c9:fd:57:e5:3f:
d3:ac:bf:0b:32:5a:1a:2d:a7:4a:98:0c:cc:fd:44:
36:3f:10:96:7b:ff:a1:ab:39:a3:f3:69:89:c4:f8:
e5:8a:07:c6:42:e8:5f:e8:9b:1e:3b:5c:b0:80:2d:
06:d8:fe:6e:49:08:c7:47:e6:92:a8:f4:27:a2:9c:
7d:a6:79:70:07:0e:52:82:01:fa:84:2a:ff:66:01:
90:e2:36:ea:a1:01:b9:1b:7f:9e:6f:e2:17:6c:ee:
5c:d2:0c:8c:d5:51:bb:cc:03:6a:26:31:c5:80:1b:
e0:65:8b:14:4e:68:14:1e:f0:b9:f3:2e:a2:40:85:
66:0f:c7:3e:85:45:b7:74:9c:54:3c:93:72:6a:1c:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:E8:25:92:5F:F6:07:E7:FE:7E:2C:D9:C4:84:A6:30:1D:A8:EF
X509v3 Authority Key Identifier:
keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/CA99C59C873211F1921B7CDDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.40.0/23
41.76.43.0-41.76.44.255
105.235.150.0/24
Signature Algorithm: sha256WithRSAEncryption
42:95:91:de:03:8e:d3:cf:f4:7c:fa:53:e1:0e:55:3f:7c:cb:
c7:2e:d7:3a:c7:ad:1b:14:21:38:53:38:a5:d3:ea:44:e3:25:
85:6f:48:8c:fc:d3:0d:d5:f6:a5:20:e9:41:df:02:b8:f0:bf:
9d:0a:e2:df:f5:f4:60:66:30:20:ea:8a:02:04:1b:cc:bb:5f:
30:51:17:4f:1c:2c:57:0d:bf:8c:27:3b:27:79:72:5e:2f:47:
cd:a1:e2:d2:b8:99:7e:1b:35:c2:e2:d8:e5:6c:de:cd:33:fa:
3e:49:a7:83:80:b4:df:48:aa:4e:e4:ba:6f:8d:78:94:1c:87:
1d:ae:ac:c0:15:8e:2a:4f:ef:b8:22:53:4d:42:b0:4a:a3:22:
29:ff:69:8c:ab:4c:17:9b:a3:2c:2e:b9:d4:4c:05:0c:c2:d2:
58:e0:d3:f3:f1:8a:f6:28:6f:55:98:26:5a:95:fd:37:79:89:
81:4d:e1:60:4d:33:6b:da:80:48:4b:f3:3a:1d:83:20:68:74:
3a:b2:89:72:f5:e9:e3:68:d8:bf:54:e7:8d:43:c8:8b:be:be:
5b:46:a8:73:d2:06:84:28:b3:fc:a7:1d:39:52:51:83:9d:98:
08:f0:79:53:77:a3:81:c7:ae:db:4f:80:52:72:97:bc:da:e2:
ac:fb:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:06 2026 by rpki-client