Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/114B488C8A8811F1B4F294B1CE1D38B0.roa
File: 114B488C8A8811F1B4F294B1CE1D38B0.roa (raw, json)
Hash identifier: lTH4VR2iEA5NtmQng6yuK9k/zCA94aU45I3nxenJvFk=
Subject key identifier: D0:B1:22:92:C5:B6:18:F8:21:73:C0:C8:FE:7E:62:90:D1:A0:37:28
Certificate issuer: /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial: 04ED
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/114B488C8A8811F1B4F294B1CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:27:24 +0000
ROA not before: Tue 28 Jul 2026 13:27:20 +0000
ROA not after: Thu 31 Mar 2033 13:27:20 +0000
asID: 37309
IP address blocks: 197.242.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365062AAF, serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Validity
Not Before: Jul 28 13:27:20 2026 GMT
Not After : Mar 31 13:27:20 2033 GMT
Subject: CN=6a68ae3c-196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:aa:e8:2d:66:be:21:b8:28:85:8f:fd:58:
dc:53:4d:7b:0d:5b:24:ee:80:b6:ec:fb:17:02:4d:
a5:cf:6f:ca:67:96:06:8a:84:ed:3c:4c:71:46:e7:
4a:ee:b0:04:d7:dc:9c:34:cb:1c:74:7e:06:da:c5:
c3:c4:5a:f1:b7:f8:8e:bb:88:5b:c3:62:67:33:07:
bf:a6:e8:83:b2:48:9a:ca:a0:5a:90:9c:f5:89:c9:
7e:87:44:2f:fe:eb:03:63:a7:f7:d0:36:ec:5c:6f:
d3:96:be:53:b9:14:3c:c8:82:d7:01:2d:b6:a9:ef:
76:06:1c:78:b9:c6:a7:2c:35:3d:14:8d:8f:2d:fe:
6f:8e:9e:87:ff:41:d9:b0:ed:c4:52:a8:9c:87:30:
87:3d:15:b2:fb:61:30:2f:6a:df:de:5a:3f:e2:f4:
98:6e:d3:ea:4f:0c:dc:34:8b:95:8f:d7:bf:84:6a:
20:e9:87:2a:69:21:9e:d1:a8:59:fd:d4:35:f5:88:
45:07:d0:47:dc:87:04:d0:4a:d9:af:21:2b:fa:c1:
fa:8a:10:cd:73:6d:7e:6a:92:3c:2c:2f:fd:7b:ff:
dd:bc:93:c7:16:aa:84:3c:f9:5f:b6:91:2a:7e:22:
0e:4f:bd:b2:5d:c3:44:5d:cb:43:18:ca:18:e2:00:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B1:22:92:C5:B6:18:F8:21:73:C0:C8:FE:7E:62:90:D1:A0:37:28
X509v3 Authority Key Identifier:
keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/114B488C8A8811F1B4F294B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.242.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:40:4d:45:4d:a1:fe:15:b9:f8:56:fd:a5:bc:6e:fb:8e:93:
c0:7d:d9:bb:14:38:30:8b:f9:ab:20:5a:8c:54:c4:db:09:7e:
c2:a4:71:14:1e:a4:b9:4e:ca:6b:6b:2f:44:da:72:23:3a:da:
63:23:d8:e8:d7:f4:b6:52:6d:be:2e:a5:40:92:be:70:8a:fb:
bd:eb:98:2c:f6:a5:17:18:9f:d0:f3:1c:6a:85:eb:ef:70:a1:
c2:99:af:d7:e8:27:f1:0f:ed:2e:d2:b6:59:b3:b3:22:fc:a7:
08:69:fe:8e:bd:81:0f:c5:07:4f:e9:3e:81:dd:d5:5b:e8:00:
be:ca:12:8e:be:a7:44:a0:88:8e:da:e0:ed:72:41:0d:87:44:
9b:79:2a:ff:99:cf:e3:3b:60:4f:ef:5b:d0:d6:08:fb:6e:3c:
ac:88:b6:24:f6:c9:13:34:78:23:79:b8:4f:96:84:f2:88:b6:
17:65:89:3b:f8:59:c8:5f:31:c3:b5:5a:09:7a:84:cc:ea:06:
06:c9:09:41:0d:97:5a:c8:40:89:33:4f:dd:d8:de:af:d0:52:
27:c4:ab:5f:c4:8c:ce:28:f1:cf:6e:c6:ff:e2:b5:90:b0:ce:
e1:02:3d:4d:e8:d2:01:b8:3b:ba:72:55:c4:da:8f:9e:a1:2b:
81:2f:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:58 2026 by rpki-client