Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/8320A09089D111F1A546DECFCE1D38B0.roa
File: 8320A09089D111F1A546DECFCE1D38B0.roa (raw, json)
Hash identifier: DA5qK7fz+WovThN7j+XSUJLgfIJR5c0CH8vGrCi0D6g=
Subject key identifier: B8:E7:43:37:5D:1F:D2:82:C3:59:B8:25:B5:EB:D9:B0:F2:FF:97:8C
Certificate issuer: /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial: 09C1
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/8320A09089D111F1A546DECFCE1D38B0.roa
Signing time: Mon 27 Jul 2026 15:40:37 +0000
ROA not before: Mon 27 Jul 2026 15:40:33 +0000
ROA not after: Mon 06 Dec 2032 15:40:33 +0000
asID: 37650
IP address blocks: 196.50.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 01:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Validity
Not Before: Jul 27 15:40:33 2026 GMT
Not After : Dec 6 15:40:33 2032 GMT
Subject: CN=6a677bf5-3215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:61:64:a8:95:4a:38:15:71:d0:91:95:48:
25:1c:8d:18:b5:17:94:71:be:96:33:27:ee:47:1b:
af:2a:65:27:4c:a5:47:49:86:8d:07:a4:ac:d0:12:
e4:ba:3a:ea:c3:88:ff:5e:a8:5a:f7:8c:30:ac:7b:
ce:a6:6a:68:ff:18:e9:9a:51:dd:c3:e2:b5:b4:6f:
2d:c9:de:0d:08:ed:b9:0b:32:fe:d0:6e:b5:39:b5:
1a:96:13:cb:76:09:70:07:94:d3:0c:72:f3:50:7c:
aa:8c:9e:b5:7b:15:86:6f:c3:ee:cc:67:aa:76:95:
de:37:f2:41:84:1c:e0:a3:24:4f:1f:cd:00:66:11:
02:18:c1:94:92:5a:e9:e2:77:06:e6:5d:93:58:2f:
6e:26:91:e9:1b:c5:69:1b:fd:d6:63:0b:39:a7:09:
80:b8:01:3a:ab:a9:a7:8e:df:15:8e:22:a5:98:b6:
96:db:ef:c8:a3:c9:46:ff:1e:06:09:91:56:a1:44:
66:34:09:98:0f:2a:f8:7c:ee:db:6d:37:22:34:8b:
67:bb:df:69:8d:01:68:f8:b6:e7:e6:c2:38:54:3f:
23:63:f4:ef:cd:27:86:68:df:bf:cf:9c:38:a1:de:
82:95:96:4b:08:ee:cf:86:06:55:0a:06:f5:68:b8:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:43:37:5D:1F:D2:82:C3:59:B8:25:B5:EB:D9:B0:F2:FF:97:8C
X509v3 Authority Key Identifier:
keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/8320A09089D111F1A546DECFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.50.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:ce:64:92:8c:32:06:3c:64:6c:d4:c1:1c:1b:04:c3:7f:0c:
f3:c1:f9:e5:67:30:99:c1:86:de:c1:6f:bc:c8:fb:41:31:26:
99:51:11:76:37:b4:aa:75:dc:92:4e:5c:0f:8f:3d:a5:f0:c6:
c4:ba:68:4b:bf:98:d2:1a:3f:87:6c:79:bd:e4:2c:db:32:0e:
e1:d0:a1:e5:6d:2c:2a:0b:07:9c:a1:f5:e7:e1:fe:cf:15:b8:
c7:1a:de:44:85:42:50:53:dd:c1:e0:b3:92:42:dd:7c:82:f0:
5d:f2:09:35:43:9d:5a:a7:99:df:ee:8c:cd:0a:96:e6:e6:ee:
ca:e6:fd:50:69:5b:f5:ca:33:33:b6:f4:29:8e:c1:80:59:33:
e2:c0:c6:23:a6:6c:16:26:e8:bb:4c:c0:16:66:d2:3a:b4:24:
86:22:bd:a8:88:d3:f8:f1:6b:68:c7:b7:cd:37:b1:c8:99:b0:
49:d5:ba:8e:1a:38:4d:70:d1:b3:f0:42:45:14:44:b1:67:40:
34:54:ac:8b:2c:d0:d4:c6:c7:78:7a:e3:7a:a5:14:c0:d1:fc:
5d:ce:48:3b:a3:a4:66:77:d8:af:c9:36:a0:fc:61:0b:0d:3c:
0a:75:7c:4e:54:71:02:3c:3c:3a:b2:f2:f8:d2:d2:96:93:fa:
1a:14:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:16:12 2026 by rpki-client