Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D3A32586899711F1A765B7F5CE1D38B0.roa
File: D3A32586899711F1A765B7F5CE1D38B0.roa (raw, json)
Hash identifier: 6tLlu0dZVst71qmfDwpvgUKfVMLdHsvxYfLcmGebQsQ=
Subject key identifier: AC:FB:A1:66:DA:54:79:5B:63:B0:65:85:2E:F2:34:04:8E:C2:BA:7D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 125E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D3A32586899711F1A765B7F5CE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:47:41 +0000
ROA not before: Mon 27 Jul 2026 08:47:37 +0000
ROA not after: Tue 27 Jul 2027 08:47:37 +0000
asID: 214351
IP address blocks: 196.251.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4702 (0x125e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jul 27 08:47:37 2026 GMT
Not After : Jul 27 08:47:37 2027 GMT
Subject: CN=6a671b2d-89dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:9e:c8:f6:ff:40:aa:f7:d1:4a:3c:ee:b9:
3b:e2:9a:60:f1:8c:dc:c8:d1:9e:0a:0e:5d:4c:5b:
36:9d:71:b1:d4:30:5a:05:b3:4d:47:e1:07:40:20:
9f:91:a8:2b:ea:81:4e:55:4e:f4:17:5f:d4:8a:84:
9b:5d:b9:ae:e7:c6:2b:6a:b4:b1:5c:7d:ab:8e:ff:
d4:66:77:15:d9:02:85:d2:fc:f1:32:e6:f7:c6:51:
c2:4a:30:41:cc:10:60:61:26:fa:77:e6:a3:14:1d:
cb:01:67:02:95:48:c0:ea:3f:9f:5b:d6:b9:ab:1c:
2f:8e:3f:bb:8a:7b:51:e5:83:93:4e:23:07:33:2c:
16:7d:1b:e0:45:39:2e:1c:39:65:d3:46:89:94:ab:
89:06:ee:85:e2:59:84:40:13:69:21:d4:2d:57:1b:
58:7d:81:64:9b:11:7d:5f:76:5b:06:73:e5:be:fb:
52:4e:4e:78:a5:5a:53:24:cb:60:48:f5:ad:1b:9e:
ea:2b:94:3f:1d:6d:7b:ce:a7:c1:84:1f:d4:90:f5:
8d:f9:c4:16:a7:e2:3d:e8:5b:b1:56:fc:f7:08:5a:
1f:41:55:57:6f:92:a2:83:31:78:56:3f:37:46:c0:
34:b3:53:58:d7:68:30:41:fe:75:ae:99:89:a4:c5:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:A1:66:DA:54:79:5B:63:B0:65:85:2E:F2:34:04:8E:C2:BA:7D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D3A32586899711F1A765B7F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.122.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:14:60:bd:9a:60:ff:a3:d8:50:64:cb:bb:d4:74:d4:dc:40:
d6:4c:96:a9:0a:f1:7c:59:95:4f:50:f8:38:b9:0a:47:e6:b7:
9b:73:0c:5c:11:84:36:08:08:fc:c9:f8:1e:51:15:4f:80:fb:
37:b9:3e:89:89:77:c0:1e:32:15:c5:3d:fe:c1:b5:8c:56:58:
ad:3c:64:2a:21:78:96:04:af:03:38:94:b9:ce:a2:22:6f:14:
55:9f:de:75:87:65:bb:b4:5b:a5:4f:d6:21:01:f8:a4:2e:03:
ab:d4:9f:86:2d:f1:ab:c8:9d:f9:f0:16:b7:02:ad:41:37:d1:
9e:8f:71:a2:d6:5f:40:8b:53:bb:3b:0d:41:d8:e0:cc:1c:bf:
f7:4d:49:ff:65:51:19:ba:73:16:9a:31:1c:19:7b:27:78:59:
d0:67:0b:dc:d9:93:af:de:ef:f5:19:80:d2:e6:1e:6b:0e:ee:
59:6f:ed:f6:b1:49:e5:df:f0:74:96:00:08:5b:90:3f:3b:d5:
ec:85:e0:45:dc:f6:4e:5e:8e:31:c5:33:09:76:b0:5d:27:58:
7a:16:1e:18:e8:4b:d6:6d:8d:3d:3c:1d:af:98:a6:19:81:7e:
93:61:2f:6d:ca:94:c4:4d:f8:db:c6:ef:c9:c2:56:e3:15:e6:
6a:e5:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:26 2026 by rpki-client