Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/AC6167DE8A8811F18F75B1B5CE1D38B0.roa
File: AC6167DE8A8811F18F75B1B5CE1D38B0.roa (raw, json)
Hash identifier: Zvk0a9nAXJtnghgjaJf1/ITi6gG3KagMRPwl4sbj7O4=
Subject key identifier: 34:63:DE:F8:D6:27:47:BA:DC:A6:DC:10:0F:B2:9E:0D:57:9A:C3:27
Certificate issuer: /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial: 04F1
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/AC6167DE8A8811F18F75B1B5CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:31:44 +0000
ROA not before: Tue 28 Jul 2026 13:31:39 +0000
ROA not after: Thu 31 Mar 2033 13:31:39 +0000
asID: 37309
IP address blocks: 196.46.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 13:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365062AAF, serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Validity
Not Before: Jul 28 13:31:39 2026 GMT
Not After : Mar 31 13:31:39 2033 GMT
Subject: CN=6a68af40-c968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:80:00:c1:36:91:47:d1:ba:66:57:c2:72:
e0:1f:dc:5b:29:e3:0a:4b:63:34:0e:62:07:93:ac:
d7:f3:68:d5:c2:fe:a5:9b:0b:4a:93:0a:76:f1:45:
4e:bb:5a:9c:fa:77:39:70:e7:a4:ff:c4:79:ec:06:
2c:11:56:bb:df:1f:52:6b:16:6a:1f:84:db:41:39:
1a:66:00:8b:0c:2c:0b:fa:c3:ae:a4:aa:21:0a:4e:
f5:08:92:70:d6:27:a0:bb:84:44:08:ab:be:f0:b4:
40:62:1e:2a:f3:38:27:ab:d7:39:9b:d9:60:45:0d:
02:50:e4:96:47:2e:7c:55:5c:1d:7b:21:2a:65:ed:
12:c5:68:c6:8d:11:84:ec:12:69:ac:16:cc:c4:e1:
b1:90:31:84:e5:9f:a0:9e:fa:3c:c9:61:36:78:28:
e7:2f:d5:77:90:ad:06:7c:ad:78:62:79:35:fa:ff:
04:61:d3:7f:d9:49:c7:1f:c6:86:01:34:04:e4:29:
96:41:a3:cc:09:af:1d:2f:95:c2:ea:cb:70:4f:d6:
71:4a:bb:6d:44:fa:26:9c:ec:89:d1:ec:27:02:5d:
a5:23:23:b8:aa:21:58:22:6f:83:6e:7f:42:69:7c:
57:cb:9b:d7:25:0d:c6:c4:8f:9e:33:1f:a6:88:a7:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:63:DE:F8:D6:27:47:BA:DC:A6:DC:10:0F:B2:9E:0D:57:9A:C3:27
X509v3 Authority Key Identifier:
keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/AC6167DE8A8811F18F75B1B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.46.232.0/21
Signature Algorithm: sha256WithRSAEncryption
14:2f:9f:86:02:86:d9:13:39:99:74:9f:09:c7:02:0a:e4:2a:
8d:6c:29:cb:42:62:24:66:95:fc:be:00:71:12:b7:06:e0:49:
47:88:2b:d7:78:58:60:c9:78:af:7f:b6:eb:2e:68:8e:87:5b:
f7:a8:4d:6e:85:3f:fd:29:7f:65:70:9b:2c:b9:af:0d:64:2b:
66:b6:88:35:be:be:7a:45:9b:53:6d:61:9e:49:f3:f5:60:0d:
a5:d1:b7:00:f2:32:7f:50:35:c0:88:0c:dc:ea:4e:40:7b:f6:
17:43:ad:f2:c6:02:e6:e8:3c:ca:93:71:40:6b:07:66:9b:75:
46:6f:e0:d8:0e:db:91:d8:68:ee:55:c4:c4:43:10:35:4c:2a:
2e:64:a6:f2:06:1c:46:5b:8a:d4:c3:c4:61:7c:6a:16:e4:02:
da:f5:cf:2f:12:4b:cd:99:3a:02:b5:3c:e1:5e:5d:c1:38:b6:
78:ba:d6:17:97:1c:c8:f8:2d:93:bc:d2:2d:49:92:1c:51:70:
c9:f5:d3:df:2d:53:93:30:f0:b5:ad:6f:96:88:35:0f:5b:bc:
67:7c:d8:93:b1:d6:59:2d:63:65:24:45:0e:7a:ff:2e:10:c5:
8e:64:88:7f:df:ce:46:61:0a:a8:00:e6:2d:98:14:09:64:71:
f8:05:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:49:10 2026 by rpki-client