Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/153C88B2876211F19DB330F8CE1D38B0.roa
File: 153C88B2876211F19DB330F8CE1D38B0.roa (raw, json)
Hash identifier: +1enaEmIvs0GoEtu/GIe2WjxmBj7nPpyWV7tpa9LsaY=
Subject key identifier: 8A:2C:29:F0:61:1B:27:C6:6F:61:63:C0:7A:2D:CA:5C:25:C7:2D:5A
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09B0
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/153C88B2876211F19DB330F8CE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:17:56 +0000
ROA not before: Fri 24 Jul 2026 13:17:51 +0000
ROA not after: Wed 31 Dec 2036 13:17:51 +0000
asID: 20011
IP address blocks: 41.132.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 13:17:51 2026 GMT
Not After : Dec 31 13:17:51 2036 GMT
Subject: CN=6a636604-17f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:dc:c9:1c:b5:4b:67:5c:4e:17:15:4c:52:
a4:71:f1:85:73:30:0d:44:bd:65:dc:6c:24:c2:02:
af:d9:d6:8f:13:2b:cc:9d:45:9a:1e:02:11:72:80:
75:d0:48:fd:df:05:ec:8b:6d:85:15:f1:f0:b3:9a:
78:be:32:b3:60:9b:7c:8d:e4:90:9f:57:b2:fd:71:
4b:a4:d4:a3:7a:dc:97:d9:d6:a4:c7:7b:3b:45:9f:
45:01:42:b4:30:c8:e8:98:d4:9b:84:1e:be:15:0b:
7c:7e:6a:81:98:be:c8:b1:8b:0a:b3:db:c9:1c:6a:
31:b8:cd:be:09:d2:f7:73:2a:64:d0:66:14:c6:ca:
3b:70:18:cd:dd:19:14:a9:a5:27:06:80:8d:15:16:
79:5e:6c:a3:1c:36:e4:c8:5b:7f:6b:98:c8:b0:af:
4e:33:8b:ad:3a:05:92:b1:0b:a3:65:f1:b9:78:cb:
af:60:3f:af:28:03:92:e0:bc:d4:a3:e5:46:6c:11:
0c:48:8e:4c:6d:d7:1f:35:61:08:ba:49:7b:10:82:
4c:86:0b:36:69:b7:2a:da:e3:ab:a2:b2:87:96:cd:
34:40:f4:61:3f:24:d4:6b:d2:07:cc:8f:c7:89:20:
1a:2d:27:34:dd:2b:4e:18:9e:62:6f:02:c0:16:2b:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:29:F0:61:1B:27:C6:6F:61:63:C0:7A:2D:CA:5C:25:C7:2D:5A
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/153C88B2876211F19DB330F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.132.72.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:2a:0b:fb:34:ea:94:45:42:5e:7d:f6:be:e9:0b:be:79:bc:
d2:82:4f:00:44:08:fa:8b:e4:a1:72:ab:d5:15:2f:9f:ed:4b:
57:95:de:a8:34:b5:fa:d8:82:3c:18:b0:7a:68:a1:58:94:50:
fa:b2:e2:56:99:02:56:b1:f8:28:c1:03:60:89:50:58:2d:c5:
e7:9a:ab:1a:55:bd:91:28:1b:36:f1:84:30:b1:20:05:f8:fe:
e3:80:99:e7:42:b8:3b:1c:43:47:c2:6a:58:06:85:db:74:b5:
d1:a1:ad:1b:7f:45:7d:9f:dc:d8:be:95:ba:c7:e1:ed:2a:49:
8d:8c:d7:0f:90:57:3a:bd:90:d3:c5:e5:fc:0c:a6:36:dc:0d:
a5:97:e1:e6:8e:1d:8a:db:42:68:16:c1:be:5e:92:ba:21:73:
bc:71:ff:9f:12:5e:47:d2:c0:89:5b:fa:8b:9e:f6:5b:e1:76:
55:a0:08:8a:ac:0a:01:82:32:3d:6d:8d:5c:a5:26:4a:96:30:
ff:1e:40:c7:69:8d:3b:aa:be:6a:81:8c:09:6f:e3:1e:94:18:
5c:3b:ce:19:b3:0a:70:94:3f:a6:44:ba:1c:0d:d2:ea:62:56:
26:c2:dc:c8:67:6c:c0:e7:18:a6:ad:2c:6d:0b:6c:e2:03:32:
d7:ba:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:26 2026 by rpki-client