Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/8ADC1A3E8A6D11F180BD560FCF1D38B0.roa
File: 8ADC1A3E8A6D11F180BD560FCF1D38B0.roa (raw, json)
Hash identifier: rjs89YTmGWh9XUMaq59FoPkx586pjsdr+zg9OuFmDk8=
Subject key identifier: CA:B4:1C:25:76:16:0F:0E:10:2C:C8:EE:0A:55:95:3C:D1:33:00:4F
Certificate issuer: /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial: 05BD
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/8ADC1A3E8A6D11F180BD560FCF1D38B0.roa
Signing time: Tue 28 Jul 2026 10:17:31 +0000
ROA not before: Tue 28 Jul 2026 10:17:27 +0000
ROA not after: Sat 28 Jul 2035 10:17:27 +0000
asID: 327872
IP address blocks: 196.250.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Validity
Not Before: Jul 28 10:17:27 2026 GMT
Not After : Jul 28 10:17:27 2035 GMT
Subject: CN=6a6881bb-9ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:61:01:69:f6:9d:4e:a2:bb:91:76:8a:c1:
8f:22:f9:a5:a3:c9:0e:67:32:9a:38:c9:1f:5b:bc:
1b:10:ad:ed:e6:3e:06:06:70:79:56:aa:18:95:a2:
ae:65:30:26:9c:ef:ed:39:79:34:52:1e:ec:bd:fd:
99:fd:c6:ef:71:8a:fe:02:05:e4:46:ca:2e:cc:a2:
d0:fa:bd:1d:56:74:51:b1:87:c1:cc:33:82:d9:fb:
ed:9b:a2:04:90:6f:fd:4c:cb:4d:96:a2:10:4d:bf:
cf:21:c6:7b:85:cf:2a:cc:16:35:d6:24:4e:4c:1c:
7c:92:c9:26:0b:a0:49:87:89:66:30:d2:11:9e:ce:
7b:54:be:f5:f8:a2:a0:b0:f7:a0:ee:a8:01:4e:fb:
61:f9:68:ef:91:4e:ee:31:e3:b7:1c:f5:76:a7:d7:
b1:2a:c5:b0:4e:48:2b:2a:57:f9:05:27:fd:82:38:
82:10:ba:63:df:34:ab:7c:5e:75:6f:4d:4f:44:2b:
36:fb:47:a2:4a:5c:fb:fb:07:dd:db:61:32:70:fd:
01:a5:54:7d:5c:69:61:08:dc:a1:c2:cf:2a:5a:64:
ef:eb:8f:bf:4d:a8:68:eb:fd:11:47:0e:60:82:da:
2b:7e:e2:47:d6:3b:2b:db:b6:a5:1c:19:5f:0b:14:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B4:1C:25:76:16:0F:0E:10:2C:C8:EE:0A:55:95:3C:D1:33:00:4F
X509v3 Authority Key Identifier:
keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/8ADC1A3E8A6D11F180BD560FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.250.128.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:e5:42:7d:ab:4d:29:5d:d0:db:8b:44:b3:c7:58:83:f3:14:
b6:5b:cf:84:d5:cf:aa:fa:2e:17:eb:56:0f:a6:0e:50:12:11:
8f:f7:92:2d:90:5d:84:19:83:29:4a:03:92:f5:63:2d:1b:4a:
1d:cc:54:83:a7:60:14:ba:0f:fd:62:22:23:3d:fb:4d:db:b3:
40:16:61:4e:f6:f0:af:34:42:67:5a:72:1c:43:cd:0b:2d:e5:
14:e8:6d:e3:10:c5:13:27:ed:d0:dd:99:ab:41:ce:32:f2:85:
f3:ee:da:1b:9a:e9:05:b2:48:60:f6:79:3f:3e:41:0f:5f:c5:
22:b5:ee:78:c9:03:e2:c7:03:c0:83:19:59:02:c4:99:b8:35:
8e:27:ae:6f:0a:28:86:b5:fd:83:94:ed:56:0b:22:50:3e:86:
bf:d5:47:b5:c5:ed:32:eb:29:04:7c:cd:3c:02:41:b4:80:24:
0f:87:93:9f:a6:cc:67:e6:14:a5:3d:7e:65:80:c1:13:89:bd:
59:55:9c:f1:c5:ae:51:06:17:1d:fb:73:7d:44:16:45:4e:07:
4a:da:5b:55:5c:02:eb:fc:ca:90:e6:1f:46:0d:89:66:31:23:
c2:df:98:9b:4a:4a:7d:a4:75:bc:0b:79:41:39:56:c2:d2:fd:
d8:06:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:49 2026 by rpki-client