Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/7A8800C28A7111F180F127ABCE1D38B0.roa
File: 7A8800C28A7111F180F127ABCE1D38B0.roa (raw, json)
Hash identifier: 2ehSc60zY3y4+5rl9i2l3o4/3/0osjXnhIwaZrI/PV4=
Subject key identifier: E8:9C:8D:F2:59:11:C0:DC:EE:E7:A8:E6:11:E8:72:47:E1:65:CB:87
Certificate issuer: /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial: 0611
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/7A8800C28A7111F180F127ABCE1D38B0.roa
Signing time: Tue 28 Jul 2026 10:45:42 +0000
ROA not before: Tue 28 Jul 2026 10:45:38 +0000
ROA not after: Sat 30 Jun 2040 10:45:38 +0000
asID: 37035
IP address blocks: 41.222.176.0/21 maxlen: 24
154.74.0.0/15 maxlen: 24
2c0f:f0c0::/31 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1553 (0x611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Validity
Not Before: Jul 28 10:45:38 2026 GMT
Not After : Jun 30 10:45:38 2040 GMT
Subject: CN=6a688856-ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:a8:da:34:a3:bf:b9:69:f5:bf:8e:b5:13:
b3:a5:e4:ed:36:4b:cf:8c:12:9b:17:42:cc:af:5e:
04:f7:21:58:32:3b:3e:f1:f8:e8:6f:15:11:4a:d3:
82:71:24:2c:8f:76:7a:06:61:12:61:04:5b:d2:61:
ea:76:a5:58:e2:72:2a:ee:83:f2:e2:aa:98:21:b7:
6d:ff:84:71:9f:62:68:08:c8:0f:ae:b9:c0:10:d1:
98:bf:90:76:19:bd:f8:a6:5c:6d:ee:b1:fc:fb:18:
c6:e0:86:89:3e:8d:ea:bd:a8:76:8f:79:52:fb:7b:
66:b7:73:80:e7:f0:b9:f5:56:54:d6:74:c8:7f:8b:
28:f1:c5:1a:ca:11:66:95:cf:b2:1f:d0:b5:51:35:
a2:e8:83:18:86:c2:07:49:c3:3b:db:67:43:27:1a:
fb:7c:3b:64:26:b7:21:c8:26:5d:e1:af:58:00:86:
3b:7e:f3:d3:30:be:92:00:94:1e:3e:d1:34:0f:26:
a4:61:55:e2:60:22:df:14:43:10:e5:0d:86:a2:d5:
91:2e:03:e4:4f:94:5f:5b:23:7a:d6:24:c7:31:e7:
6d:9d:ef:5f:12:87:fc:3a:57:81:40:34:69:64:b1:
c8:f3:cf:a9:f5:07:f7:2e:cc:5e:c1:9b:81:31:02:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:8D:F2:59:11:C0:DC:EE:E7:A8:E6:11:E8:72:47:E1:65:CB:87
X509v3 Authority Key Identifier:
keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/7A8800C28A7111F180F127ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.176.0/21
154.74.0.0/15
IPv6:
2c0f:f0c0::/31
Signature Algorithm: sha256WithRSAEncryption
7d:f7:53:a7:50:d1:50:b8:6a:26:11:a9:2b:53:14:51:b7:a7:
4b:c4:ff:47:93:cd:6c:19:e0:10:c4:54:6d:4a:0d:86:4d:4c:
05:5a:78:5e:76:bf:3f:09:b5:80:f5:ab:e6:78:98:0f:9b:60:
3f:17:37:83:2d:b3:c8:a1:b4:27:b6:f4:ae:55:52:2e:f3:a5:
c4:72:0e:dd:4a:56:8b:86:91:fd:21:d0:66:88:4a:a6:9f:f9:
99:8a:31:ca:c9:fd:ef:b7:d9:42:e7:03:e9:08:77:52:de:25:
d4:5c:dc:99:00:79:7d:0b:20:9e:0e:2a:59:68:9e:c3:a2:17:
b6:40:3f:e7:68:36:8e:f0:6c:0d:46:94:63:87:e7:ce:1c:fa:
0a:f7:ac:51:b9:3e:48:81:2e:a6:bc:b1:b9:57:7d:87:28:ce:
17:a7:38:10:2d:48:51:c2:5b:78:85:3f:18:57:21:20:b9:83:
f1:89:de:7a:47:f6:04:fd:7c:ee:41:34:a1:50:f6:a7:13:32:
ba:a4:eb:39:f4:e3:e0:01:e7:a4:83:8f:cd:40:8e:d4:b8:1d:
16:6e:90:4f:12:d4:8b:4e:e8:73:ea:ef:de:d7:b1:36:7b:dc:
f4:23:42:c1:80:5e:6e:47:5d:2d:63:d4:7d:fa:c9:b1:c3:d3:
03:fd:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:24 2026 by rpki-client