Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/FF2158528AA711F1B550CFF0CE1D38B0.roa
File: FF2158528AA711F1B550CFF0CE1D38B0.roa (raw, json)
Hash identifier: cZ1trg8d+F5o+UUdS9EJoldliC9ZeXJBsBQSd753BjQ=
Subject key identifier: EE:2F:73:B1:A8:76:DB:82:DD:8C:67:92:9A:13:1E:5B:A1:82:A2:C7
Certificate issuer: /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial: 054F
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/FF2158528AA711F1B550CFF0CE1D38B0.roa
Signing time: Tue 28 Jul 2026 17:15:57 +0000
ROA not before: Tue 28 Jul 2026 17:15:53 +0000
ROA not after: Sat 01 Jan 2033 17:15:53 +0000
asID: 24757
IP address blocks: 197.156.64.0/18 maxlen: 24
2c0f:f348::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Validity
Not Before: Jul 28 17:15:53 2026 GMT
Not After : Jan 1 17:15:53 2033 GMT
Subject: CN=6a68e3cd-d095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:e0:01:58:a8:85:5a:82:e5:39:35:c4:35:
0c:61:84:32:97:1c:bd:53:ea:cb:70:db:e0:1c:2c:
e0:7c:78:d6:ab:22:f1:59:6a:e7:67:7f:cb:8b:f6:
ac:47:6b:fc:96:71:1d:8a:c1:aa:57:c1:73:c2:a4:
8e:d7:51:33:ea:71:7c:62:5f:34:6e:44:a9:ab:e0:
0d:43:c8:65:ca:0b:48:f5:e4:0d:7a:a6:5a:51:e1:
c7:d7:22:b3:06:dd:40:45:28:fb:0f:17:b4:cf:51:
33:12:0b:a8:df:6e:ff:6c:33:9f:0b:0d:65:b7:fa:
a8:13:c1:f8:3a:d2:86:fb:c7:07:ef:64:16:11:44:
1c:3d:a1:55:16:8e:65:05:42:c9:15:40:9f:9b:31:
50:3a:42:a8:bf:8c:a2:46:1d:39:d3:a2:7b:1a:e2:
74:f4:f1:18:19:40:09:38:66:91:49:62:40:55:15:
e4:06:a3:3f:8b:40:2c:b8:bf:5e:ea:46:9d:f3:2d:
a5:8b:a5:1b:27:3d:ef:6e:1b:8d:35:84:0e:d9:a8:
9c:9c:5b:0b:ff:f8:f4:b2:c0:5b:58:cb:ec:df:1b:
e5:e3:8f:97:68:28:b8:f5:1b:7b:49:51:31:19:51:
be:85:54:77:0c:72:4d:3c:55:c1:33:f0:90:51:e9:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2F:73:B1:A8:76:DB:82:DD:8C:67:92:9A:13:1E:5B:A1:82:A2:C7
X509v3 Authority Key Identifier:
keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/FF2158528AA711F1B550CFF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.156.64.0/18
IPv6:
2c0f:f348::/32
Signature Algorithm: sha256WithRSAEncryption
39:21:65:fa:1a:a4:89:18:58:ea:56:20:a2:76:ff:ed:de:b7:
74:92:d4:aa:1c:aa:a4:2c:76:53:3b:90:e0:0c:28:11:03:ff:
7d:64:69:5d:c4:e7:7b:13:87:ed:c7:b9:0b:9a:e2:a8:72:a9:
9e:f8:39:cd:c0:84:34:60:94:b3:59:5d:0d:aa:82:f4:2a:9e:
c1:d9:42:fa:05:44:09:3a:99:73:ec:93:4f:9c:fa:01:7c:49:
8b:75:58:cd:a0:b8:2e:20:77:d1:11:49:da:3e:7f:09:07:36:
d1:79:bd:fe:97:c1:06:ba:66:b0:9f:83:8d:6d:0a:cf:ee:62:
cb:aa:6f:38:ad:31:53:ea:0b:6c:55:42:1d:8d:28:2d:68:8f:
3e:7c:c3:ef:5a:d0:a1:18:48:3b:98:9a:8d:5c:21:30:f6:68:
bb:a7:3a:94:e5:5c:90:6a:21:20:a9:d3:22:bf:7b:20:d3:e7:
0c:a0:8e:95:6d:fb:36:9d:8a:79:be:2a:be:e1:0e:d6:02:28:
a9:56:00:88:10:53:8a:34:5e:89:d6:4d:c9:4f:7a:0c:01:29:
75:97:2a:a5:a0:a8:eb:f0:4d:d1:5d:9e:17:42:17:5e:46:78:
73:24:41:72:7d:d5:c0:ac:3e:da:37:cb:5e:ea:f9:b7:16:34:
eb:22:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:00:25 2026 by rpki-client