Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/613061EE8A6911F1B97A9FF6CE1D38B0.roa
File: 613061EE8A6911F1B97A9FF6CE1D38B0.roa (raw, json)
Hash identifier: LzGFx8x4Kvtk+dGOLPYsg9UisZIMyOQubpapTduQZbw=
Subject key identifier: D7:8A:DC:81:B7:A1:9C:D9:C8:18:27:63:47:E2:1F:8C:06:E2:F4:31
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 0800
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/613061EE8A6911F1B97A9FF6CE1D38B0.roa
Signing time: Tue 28 Jul 2026 09:47:43 +0000
ROA not before: Tue 28 Jul 2026 09:47:39 +0000
ROA not after: Wed 31 Dec 2036 09:47:39 +0000
asID: 36994
IP address blocks: 41.0.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 28 09:47:39 2026 GMT
Not After : Dec 31 09:47:39 2036 GMT
Subject: CN=6a687abf-0981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:d2:69:84:b5:d0:8e:6c:73:13:5a:9d:d0:
46:52:b6:cd:2c:53:ae:41:c9:61:76:71:8a:bb:6e:
79:d8:6e:f4:e9:81:6a:e5:cf:b3:1c:33:27:ba:91:
a2:c8:12:b9:4f:5b:0a:3e:4b:89:57:4b:9c:b1:86:
db:2d:c4:a9:34:4d:35:85:de:62:8d:7c:7c:75:0a:
f5:53:77:9c:11:8f:b8:31:22:6d:db:5f:78:5b:38:
3e:1a:64:f1:34:83:61:ba:db:2d:1b:d5:79:15:70:
67:5a:54:09:09:79:61:25:8d:a2:51:c3:50:0a:48:
c9:65:ef:96:71:49:21:b5:d1:82:b7:6f:08:29:8c:
95:36:63:72:5e:a8:67:a9:f7:d6:96:d9:6f:66:0d:
4d:a1:44:e2:57:80:9b:b8:06:5d:4e:af:f5:8b:0d:
a9:73:5e:31:b4:af:4f:c2:31:4f:45:21:46:fc:21:
2e:d6:3b:16:e0:25:59:64:6f:7d:10:04:ac:09:54:
94:c9:b4:1e:fb:82:1a:ee:47:10:ac:2b:ad:37:ec:
ab:0f:d0:1f:68:1e:0e:ab:f1:f5:d2:5a:cc:58:ef:
89:f6:c5:3a:1a:1d:76:3d:04:da:b4:b4:d6:61:91:
0d:af:47:0d:15:41:86:f3:a0:fe:93:02:b7:ba:6b:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:DC:81:B7:A1:9C:D9:C8:18:27:63:47:E2:1F:8C:06:E2:F4:31
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/613061EE8A6911F1B97A9FF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c8:84:24:e4:ef:87:d0:50:bf:04:56:4c:74:c2:6f:35:60:0e:
44:17:5e:73:84:32:c2:a0:d0:fe:e3:6e:a5:cd:1a:b2:df:7e:
a7:92:b6:dc:c8:03:f4:45:b9:3b:89:14:89:be:0a:8e:e8:f4:
0f:72:b5:a5:35:c0:65:1e:09:59:89:0b:85:6e:42:aa:b7:61:
30:7d:fd:ad:b2:a5:46:77:bd:c8:63:db:db:a2:a7:37:96:52:
c8:15:8a:10:24:05:b3:b2:ef:cc:3b:cc:e8:3b:62:f2:f4:a4:
81:73:3b:60:e0:22:8e:d1:ef:d1:df:95:e3:e0:1f:3e:39:8d:
e3:43:8b:87:b9:b7:31:a1:9b:25:c6:5f:bf:0c:fe:a0:1d:a9:
35:0a:94:eb:b4:7a:84:f1:d3:36:2c:db:54:1f:4b:54:50:99:
89:e7:a6:4e:51:ad:a4:77:ec:30:7e:85:8a:06:59:c0:eb:a1:
14:0e:44:56:20:92:42:a4:92:bd:4e:15:39:4f:c2:64:d5:f3:
06:25:29:0b:f2:23:ba:84:dd:7c:b7:bf:f3:c0:fb:b5:f9:1e:
19:d4:ed:d5:a6:3d:0a:e9:22:1e:02:20:42:97:42:57:8c:66:
96:5b:d8:7f:6b:77:5e:de:72:19:e6:fa:35:16:a1:1e:85:e1:
f4:9b:55:32
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA3MjgwOTQ3MzlaFw0zNjEyMzEwOTQ3MzlaMBgxFjAU
BgNVBAMTDTZhNjg3YWJmLTA5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvedJphLXQjmxzE1qd0EZSts0sU65ByWF2cYq7bnnYbvTpgWrlz7McMye6
kaLIErlPWwo+S4lXS5yxhtstxKk0TTWF3mKNfHx1CvVTd5wRj7gxIm3bX3hbOD4a
ZPE0g2G62y0b1XkVcGdaVAkJeWEljaJRw1AKSMll75ZxSSG10YK3bwgpjJU2Y3Je
qGep99aW2W9mDU2hROJXgJu4Bl1Or/WLDalzXjG0r0/CMU9FIUb8IS7WOxbgJVlk
b30QBKwJVJTJtB77ghruRxCsK6037KsP0B9oHg6r8fXSWsxY74n2xToaHXY9BNq0
tNZhkQ2vRw0VQYbzoP6TAre6azXNAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU14rc
gbehnNnIGCdjR+IfjAbi9DEwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzYxMzA2MUVFOEE2OTExRjFCOTdBOUZGNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwApADANBgkqhkiG9w0BAQsF
AAOCAQEAyIQk5O+H0FC/BFZMdMJvNWAORBdec4QywqDQ/uNupc0ast9+p5K23MgD
9EW5O4kUib4Kjuj0D3K1pTXAZR4JWYkLhW5CqrdhMH39rbKlRne9yGPb26KnN5ZS
yBWKECQFs7LvzDvM6Dti8vSkgXM7YOAijtHv0d+V4+AfPjmN40OLh7m3MaGbJcZf
vwz+oB2pNQqU67R6hPHTNizbVB9LVFCZieemTlGtpHfsMH6FigZZwOuhFA5EViCS
QqSSvU4VOU/CZNXzBiUpC/IjuoTdfLe/88D7tfkeGdTt1aY9CukiHgIgQpdCV4xm
llvYf2t3Xt5yGeb6NRahHoXh9JtVMg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:24:42 2026 by rpki-client