Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/158D9DAE8A7511F1A3ACABBFCE1D38B0.roa
File: 158D9DAE8A7511F1A3ACABBFCE1D38B0.roa (raw, json)
Hash identifier: ZQBOzcq+msgwMzyCswqy/xH5zibHKccOC2EEu3x+pLQ=
Subject key identifier: C3:71:7F:6D:47:2E:BC:32:AD:84:0B:E4:3A:B2:5F:CF:30:65:7B:1E
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 0810
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/158D9DAE8A7511F1A3ACABBFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 11:11:30 +0000
ROA not before: Tue 28 Jul 2026 11:11:26 +0000
ROA not after: Wed 31 Dec 2036 11:11:26 +0000
asID: 36994
IP address blocks: 41.10.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 28 11:11:26 2026 GMT
Not After : Dec 31 11:11:26 2036 GMT
Subject: CN=6a688e62-6272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:09:1f:13:5b:a3:56:5a:d9:1c:b4:62:dd:
28:df:95:d6:38:7e:c3:ad:d2:b7:08:d0:96:f9:aa:
0f:6d:a9:ee:57:89:83:86:87:1e:b8:af:af:69:7d:
7c:47:ae:a4:65:a1:3e:ad:03:cc:80:e7:db:a7:80:
20:8e:32:96:cc:df:c5:c0:bd:54:62:7f:74:9a:96:
2a:bd:3d:75:46:e5:88:4c:4e:b7:7c:38:82:d7:8e:
6a:03:cb:8f:3a:63:26:aa:1b:ad:4d:b8:50:b1:c7:
f3:5a:62:88:1f:68:1d:01:45:32:31:87:c3:08:42:
97:67:be:9a:be:22:65:67:01:dc:88:9e:23:f4:82:
ab:bb:29:7d:c6:88:31:15:4b:2f:59:a5:bd:b5:21:
1a:05:95:1a:41:54:ca:5b:6d:7f:10:55:b2:82:9f:
fa:c9:62:3a:74:03:1e:c9:13:5f:63:a4:a1:5d:6d:
78:43:f6:40:7c:61:84:97:2a:73:7e:56:73:32:1b:
d9:7d:f1:11:d4:f3:4b:f3:3e:9a:59:25:0c:fd:b5:
e7:fe:0b:8f:45:89:f6:fa:70:5c:82:3a:de:83:ad:
38:59:8f:3e:a0:75:69:87:7a:96:e5:a7:88:6e:3d:
48:07:f0:d3:d7:f4:be:37:7b:8a:ec:ac:96:6b:8e:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:71:7F:6D:47:2E:BC:32:AD:84:0B:E4:3A:B2:5F:CF:30:65:7B:1E
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/158D9DAE8A7511F1A3ACABBFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:ec:f8:1a:2b:a2:9d:bb:36:2f:77:fe:54:70:a0:d2:9a:7a:
cf:c4:22:31:b7:a9:a9:0b:6e:c1:c9:78:79:2a:0b:f0:73:0d:
46:7f:28:09:e4:41:c5:b5:b3:b0:56:59:40:57:ba:75:8c:bd:
bc:27:03:25:36:0f:a4:37:df:b8:cb:6a:b8:a5:3a:86:f9:f3:
1e:83:40:06:d4:fc:16:da:18:52:fe:a6:44:09:28:81:46:bd:
ff:74:fb:b6:b3:4c:38:96:1a:82:89:db:b6:5d:23:20:3b:f3:
42:d7:0e:60:f1:ef:20:25:be:93:65:55:ca:d5:4f:2e:a4:c4:
05:ab:24:bb:b6:68:b4:2c:08:de:86:bd:17:09:33:e2:34:88:
9a:95:69:de:49:e8:73:c0:93:cf:d8:1d:fa:74:e9:09:cd:a2:
91:75:69:73:26:68:d2:cb:e5:ad:73:81:48:83:a1:78:f2:23:
87:ec:b4:06:a3:76:58:83:e9:27:a0:d9:e9:59:7a:20:6d:cd:
f9:33:cd:f6:29:a0:62:9c:92:a6:da:7b:95:2a:4b:09:0d:81:
c6:9a:3f:b8:80:da:28:ab:8d:49:41:d2:72:c5:6f:d6:79:b2:
8a:c8:b1:6b:d8:33:dc:0f:bb:2c:fe:98:06:12:73:6d:12:15:
82:f5:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:41 2026 by rpki-client