Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/F7E20784873311F1B7E9E2E3CE1D38B0.roa
File: F7E20784873311F1B7E9E2E3CE1D38B0.roa (raw, json)
Hash identifier: z+CNLO3NbOZrGtfxZOkyGy0Et3xGLuxNkIJsF5sFrbs=
Subject key identifier: 88:EC:60:DA:ED:9D:24:81:90:83:DE:36:DE:65:33:53:F9:8A:B1:97
Certificate issuer: /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial: 0A2E
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/F7E20784873311F1B7E9E2E3CE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:47:50 +0000
ROA not before: Fri 24 Jul 2026 07:47:46 +0000
ROA not after: Sun 30 Nov 2036 07:47:46 +0000
asID: 6453
IP address blocks: 41.76.40.0/24 maxlen: 24
41.76.41.0/24 maxlen: 24
41.76.43.0/24 maxlen: 24
41.76.44.0/24 maxlen: 24
105.235.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2606 (0xa2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Validity
Not Before: Jul 24 07:47:46 2026 GMT
Not After : Nov 30 07:47:46 2036 GMT
Subject: CN=6a6318a6-1203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:b2:0e:69:5f:ba:4c:0d:84:a0:53:1b:4c:
24:81:13:75:30:2f:71:9c:6c:f4:6d:ea:b4:ea:a4:
3c:e7:77:92:26:22:93:70:6a:ea:5c:57:eb:a3:f2:
65:bf:d9:69:b2:be:44:d7:33:35:4f:1a:1b:2c:37:
98:53:a8:f4:2d:54:87:50:41:2c:54:67:fd:96:c7:
8d:e9:fc:48:8c:38:4d:75:13:2d:83:e6:cb:a6:f2:
83:2f:6c:18:a7:9e:98:48:89:0b:07:82:9c:dd:4a:
51:f5:7a:1a:60:f0:80:48:69:c8:8d:d7:d4:73:17:
bb:36:8c:ca:6e:46:fb:e8:e5:f2:b3:b5:c7:a9:28:
83:2f:96:31:78:ba:84:05:ff:8b:95:ef:80:75:b4:
b0:4d:2d:3f:cf:53:4d:e1:83:47:62:43:fc:e4:1e:
90:fb:5e:86:ee:5c:68:4d:c8:7a:41:99:ec:32:5a:
0b:42:d5:05:46:8e:a0:a0:a9:ed:e9:55:72:25:65:
aa:14:79:f6:8b:ac:85:17:ec:0c:2f:35:2c:d6:7e:
dd:95:33:f7:1c:28:5d:ac:15:9a:c0:c0:eb:2a:89:
3c:1e:c0:d9:5f:5f:27:bd:03:f3:8c:f0:9a:f0:48:
f6:05:2e:e1:51:17:7e:ed:96:7f:d3:d2:84:f8:84:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:60:DA:ED:9D:24:81:90:83:DE:36:DE:65:33:53:F9:8A:B1:97
X509v3 Authority Key Identifier:
keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/F7E20784873311F1B7E9E2E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.40.0/23
41.76.43.0-41.76.44.255
105.235.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:bc:4d:8e:c3:03:ed:7a:92:15:b0:93:07:16:4b:04:fc:1c:
c7:1e:e3:03:2d:4e:4f:0f:40:95:2f:a1:76:ed:0e:a8:86:a9:
1c:f6:d9:48:9e:aa:3c:df:c4:ce:12:78:ba:b4:b1:64:75:9a:
7b:af:3b:ec:c0:ac:33:f8:8e:6d:9b:2d:c9:ba:60:24:96:66:
ee:8d:f0:ff:de:10:9a:d7:8a:e3:e8:34:ea:c4:f7:79:50:67:
d8:bd:05:97:78:f1:4f:3f:3d:71:b9:77:12:7c:7d:5e:25:fa:
41:be:66:75:52:e1:5c:35:1a:ba:d0:29:50:e4:22:1b:67:80:
9a:72:14:95:0b:26:ad:de:75:92:8b:7d:c3:a8:fe:fe:7c:14:
9f:bb:5d:0f:50:7d:de:87:7a:2c:5b:2d:dd:a1:c7:43:e9:8f:
d5:c9:8b:8c:6d:d1:29:cc:d0:64:fa:59:c1:f1:cd:95:4c:c6:
aa:15:3c:de:72:cc:8d:a1:49:70:03:52:b4:4f:a2:32:4b:81:
4e:7a:88:5f:4a:37:52:a8:c9:c7:6b:52:6c:9e:70:30:8a:8e:
a2:c9:08:b9:8e:58:f7:9c:d4:d6:2c:96:49:3f:f3:41:ba:fe:
f7:59:08:0e:21:f2:7f:1b:d7:04:dd:b4:a6:7c:77:2b:8b:c4:
60:7b:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:00 2026 by rpki-client