Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/76A8B37A8AA811F191D9CBF2CE1D38B0.roa
File: 76A8B37A8AA811F191D9CBF2CE1D38B0.roa (raw, json)
Hash identifier: 6JHF5LVrkMN963on9ATo1+Xaz16ezncd71FNghrXAOQ=
Subject key identifier: 75:DD:7B:0A:7C:5F:94:1B:A2:B6:4A:ED:16:B6:93:21:C8:5D:36:ED
Certificate issuer: /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial: 053E
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Authority info access: rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/76A8B37A8AA811F191D9CBF2CE1D38B0.roa
Signing time: Tue 28 Jul 2026 17:19:18 +0000
ROA not before: Tue 28 Jul 2026 17:19:14 +0000
ROA not after: Sat 01 Jan 2033 17:19:14 +0000
asID: 24757
IP address blocks: 213.55.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Validity
Not Before: Jul 28 17:19:14 2026 GMT
Not After : Jan 1 17:19:14 2033 GMT
Subject: CN=6a68e496-91f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:88:e9:29:a4:8e:fc:db:d6:ad:c2:f6:13:
84:f2:3b:4f:d2:c6:f7:15:f0:c2:97:8c:5f:19:52:
65:4c:95:38:ae:41:cc:3d:a1:03:22:68:94:f4:56:
e0:f2:e3:17:43:be:1b:7e:8e:88:5c:1b:f3:d5:97:
46:1c:25:97:5a:ce:3a:4f:92:2e:62:d0:0b:30:04:
c2:a9:39:4c:ba:f4:45:cf:e7:2a:1e:77:a9:b3:3d:
ab:7b:18:42:bb:f0:6d:57:bd:e9:36:c8:5f:f2:f2:
e8:0d:ec:aa:41:88:bc:1d:e2:b1:bd:6e:0a:8c:97:
91:87:f9:01:83:08:aa:af:a0:0e:72:3f:05:0b:3b:
0d:26:5c:68:89:bf:7d:ec:5d:90:19:df:78:e9:23:
ec:9f:7e:05:ed:fb:94:df:a0:05:8a:08:73:0f:53:
a4:7d:25:72:3b:da:2d:11:1d:2c:3c:d3:62:52:7b:
54:2c:6a:b0:e5:2b:56:69:5e:0d:9a:ac:91:61:1a:
99:f7:91:c2:b7:5c:37:88:55:fc:71:4e:c9:2d:1a:
52:41:f5:1c:72:ec:37:b1:2a:e7:a6:76:98:e9:ec:
1f:c3:72:9e:2b:46:df:a4:84:19:3f:14:19:e7:17:
2a:d7:dc:74:b8:29:9b:cb:40:3d:91:51:97:9e:e9:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DD:7B:0A:7C:5F:94:1B:A2:B6:4A:ED:16:B6:93:21:C8:5D:36:ED
X509v3 Authority Key Identifier:
keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/76A8B37A8AA811F191D9CBF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
213.55.64.0/18
Signature Algorithm: sha256WithRSAEncryption
59:7b:16:6f:b6:35:a1:ed:d3:d2:b1:ba:d6:4f:21:e6:52:12:
c2:34:b4:98:5d:2c:3a:cc:09:73:25:08:41:ec:0e:f5:a7:e7:
f3:76:45:c4:2f:63:7e:08:15:1d:68:b7:66:f8:a1:d9:a5:72:
f2:de:a4:93:c6:3e:d4:2f:7b:61:16:9e:3a:62:7e:57:3c:dc:
26:fb:b6:3b:73:81:b6:b3:0f:3b:0d:63:ba:38:ef:a6:a5:9e:
eb:d0:45:f6:fb:94:66:b1:bf:cd:19:b7:c7:ca:e7:ff:5e:06:
e6:c2:ab:51:42:6f:66:99:26:21:3f:e9:8f:04:f5:6c:f1:87:
c2:02:f4:fc:d2:d5:fb:6f:a5:44:3b:e6:99:23:71:80:b0:d8:
24:6b:0d:bd:39:82:d2:01:0b:07:d6:b6:3c:e7:01:74:ec:93:
58:1f:b8:0f:80:c8:11:dc:1a:d8:52:a2:94:a9:14:47:8d:33:
68:b5:c5:ba:66:c5:73:36:f3:03:e9:0f:55:55:43:d9:fc:b4:
2c:ec:d4:e0:05:93:ff:27:91:d8:0a:95:cf:b9:e7:ae:b9:71:
c1:70:6a:02:99:4d:d5:01:c8:53:e1:39:86:29:dd:84:ae:bb:
cb:e0:a8:f5:db:72:8d:36:69:a9:85:74:6e:78:06:e4:37:a3:
a2:76:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:54 2026 by rpki-client