Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8A4D3D4E8A6F11F19104011DCF1D38B0.roa
File: 8A4D3D4E8A6F11F19104011DCF1D38B0.roa (raw, json)
Hash identifier: KkkhaJxMkFu85p6OFz4hKYH+yt00Zi35bfmkpMFOhoE=
Subject key identifier: EB:8C:D0:76:6C:21:CF:69:3B:FD:59:94:E2:1D:F6:CA:91:76:5B:A8
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 0808
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8A4D3D4E8A6F11F19104011DCF1D38B0.roa
Signing time: Tue 28 Jul 2026 10:31:49 +0000
ROA not before: Tue 28 Jul 2026 10:31:45 +0000
ROA not after: Wed 31 Dec 2036 10:31:45 +0000
asID: 36994
IP address blocks: 105.244.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 28 10:31:45 2026 GMT
Not After : Dec 31 10:31:45 2036 GMT
Subject: CN=6a688515-a7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:1d:13:31:e9:d4:cf:4b:90:1d:6f:b9:14:
b1:56:92:04:cc:df:31:91:cc:50:83:f4:c8:7e:94:
1f:49:67:91:dd:2c:b5:20:b3:8b:97:45:89:fd:0f:
1a:f4:a2:98:2c:6e:60:cd:37:34:0a:f4:2c:fc:f3:
d1:5e:12:15:82:e7:9e:be:e9:0f:e2:bf:63:08:03:
df:3f:8e:8e:b2:f0:5e:8d:d7:f7:f3:fb:c4:b3:3f:
c7:b0:43:d9:18:fa:83:49:04:90:76:2e:1d:10:94:
fd:50:1c:21:ae:9a:84:48:05:1e:b8:20:85:3f:c6:
d0:d5:f1:72:2d:1b:78:66:8f:4b:21:3b:5c:26:73:
d9:cc:20:b8:7e:a7:e3:b6:77:d6:39:e4:29:f9:57:
48:3f:cd:ae:83:d6:71:70:d0:9d:6f:04:a2:01:43:
3f:64:72:d4:50:d1:08:81:4f:2e:97:e6:80:24:e8:
59:42:26:6e:a7:c9:fc:2d:d2:6a:9a:64:cf:1a:21:
e7:f1:c6:f4:e9:80:dc:93:78:8b:6b:2e:6c:c7:8d:
3f:fc:1d:fe:6c:4d:11:7f:11:32:f3:7e:3d:08:4d:
2b:4e:c3:0b:fc:32:aa:2a:44:94:ee:47:8a:55:59:
f3:6c:03:b5:e2:b4:20:49:d3:3c:2a:49:d8:79:f6:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8C:D0:76:6C:21:CF:69:3B:FD:59:94:E2:1D:F6:CA:91:76:5B:A8
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8A4D3D4E8A6F11F19104011DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:e4:4b:2a:1f:ba:48:dd:fa:79:5d:4a:cb:fd:89:d2:c0:8a:
9b:98:35:35:69:36:3b:ed:46:26:6f:57:a2:18:a8:4c:4b:83:
91:9d:b2:c3:69:af:29:02:5a:38:e8:49:f0:0f:a1:fe:44:b5:
93:29:c7:22:4c:38:3a:77:b2:67:5b:c5:c3:60:94:6e:b3:1a:
f2:8c:f9:d8:0f:39:24:b5:83:6f:88:ec:35:d3:3d:a3:0f:25:
49:86:b1:b3:6b:50:eb:b3:f9:83:11:ee:81:ce:83:de:18:5c:
7e:a8:c1:04:c1:3a:ec:dc:88:86:38:63:5e:96:08:8f:da:f1:
d7:9a:0a:4e:50:39:52:86:4e:7c:fb:26:ed:19:ad:b2:04:74:
f3:a5:3a:25:60:6e:16:c9:74:9d:64:f5:f5:44:2b:ca:af:07:
53:78:27:8e:c6:d6:46:18:04:e1:64:c4:8a:1a:5e:e1:dc:5d:
55:e6:20:fc:a5:b6:5b:b3:22:e6:52:1c:03:4e:03:bb:6e:7d:
cc:f9:2a:ac:00:a7:c3:92:b7:66:96:81:b9:9a:59:15:9b:e8:
84:75:fb:ce:ef:bc:85:b7:a5:fe:b5:42:73:df:ad:f4:3a:a9:
f1:5e:93:d5:ff:bd:ce:64:1c:13:a8:62:6b:a7:6e:3a:1e:b6:
bb:a2:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:25:31 2026 by rpki-client