Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/435405E88A7011F18820A5A2CE1D38B0.roa
File: 435405E88A7011F18820A5A2CE1D38B0.roa (raw, json)
Hash identifier: g1W9TfNmPqTg7NxuTVChqZ9zAaRnV2ZU/fU7ues+2t4=
Subject key identifier: F8:6B:E6:73:7F:59:A4:E5:A1:A8:AF:5B:FC:CF:3B:38:09:72:A6:3E
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 080A
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/435405E88A7011F18820A5A2CE1D38B0.roa
Signing time: Tue 28 Jul 2026 10:37:00 +0000
ROA not before: Tue 28 Jul 2026 10:36:56 +0000
ROA not after: Wed 31 Dec 2036 10:36:56 +0000
asID: 36994
IP address blocks: 105.246.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 28 10:36:56 2026 GMT
Not After : Dec 31 10:36:56 2036 GMT
Subject: CN=6a68864c-a7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:7d:9d:8f:6c:39:47:40:de:27:b5:06:6b:
8a:17:b6:33:80:fe:d3:86:01:b2:dd:aa:9e:83:b5:
1b:32:ca:8b:93:8d:cf:de:1d:db:32:06:32:8a:0a:
78:f7:d7:19:96:f1:9d:0b:ac:1b:16:fa:05:24:91:
10:54:4a:e0:bb:bb:56:54:fd:c8:8a:16:0d:e1:94:
fe:d8:50:ff:82:a9:c9:3c:3f:b9:20:79:54:a3:65:
04:05:44:2e:37:79:8f:85:9d:3f:14:fb:f4:14:b5:
69:47:23:07:9a:fa:ea:02:5f:40:71:24:ae:73:5c:
de:76:bc:8e:be:ae:c1:6d:01:ac:49:55:07:ce:10:
f4:2e:e3:e2:cf:91:db:f3:0c:06:19:6b:e5:68:f0:
2a:98:c4:bd:85:d5:3d:17:34:45:19:41:19:0f:4a:
9c:05:a9:25:dd:11:ab:35:02:88:8a:1c:4c:af:17:
15:57:a9:46:ef:cf:e0:36:42:3a:79:42:22:f4:7c:
72:28:2f:1d:bc:60:1b:49:a0:0e:48:4f:a5:ae:ce:
43:4e:f3:ce:fa:da:63:f8:32:4f:34:ea:cf:b6:d0:
da:f4:f8:bf:1b:94:ac:16:a4:22:bf:85:ff:08:cf:
f7:78:53:a0:bf:8e:a1:50:ac:80:71:bd:39:dd:8e:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:E6:73:7F:59:A4:E5:A1:A8:AF:5B:FC:CF:3B:38:09:72:A6:3E
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/435405E88A7011F18820A5A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:94:90:df:12:02:97:bb:af:22:5f:66:20:c1:3e:59:49:ba:
b6:78:53:d5:c4:48:a6:f3:d0:20:ec:57:cf:22:c4:c5:41:ab:
f9:66:84:c3:1f:16:a1:69:bc:fd:cf:9f:86:93:f8:c8:1a:cd:
64:df:50:fc:a7:81:11:54:ec:f4:c9:0f:b1:c9:9c:04:85:42:
25:7a:97:a4:6e:e0:b8:9f:5c:13:33:33:2c:7e:77:8e:28:d6:
73:00:6a:42:9e:72:25:d0:c1:3e:b2:84:9d:8e:13:d0:4f:68:
b5:e6:f9:b3:93:bd:0f:f2:8d:df:cd:2b:b1:4e:41:07:9e:26:
f9:f2:11:34:20:8a:31:00:00:dd:2f:24:5a:c7:38:ce:01:d0:
d5:7c:68:54:8e:eb:de:49:17:c1:82:24:48:98:af:e3:75:4c:
aa:12:35:01:8b:42:a7:54:84:d9:90:ef:53:6d:9e:9c:31:58:
48:15:e6:db:cb:7d:c6:f3:cf:d1:e3:a5:4d:dd:df:7d:3a:5d:
9c:6e:8e:7e:44:6e:ba:14:48:07:df:e5:66:b8:39:eb:a2:ff:
59:ba:6f:59:58:dd:7f:64:1e:e5:e9:85:32:10:85:9a:ab:2f:
0f:29:7f:b5:38:34:00:e6:37:33:f7:2e:76:31:34:ba:31:eb:
fa:0f:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:02:30 2026 by rpki-client