Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1C20AD868A3A11F18327ACD1CE1D38B0.roa
File: 1C20AD868A3A11F18327ACD1CE1D38B0.roa (raw, json)
Hash identifier: f/XrCAmdsT0Mg1QqPxAP/+28obZPgy1sxNFfJuEHzpQ=
Subject key identifier: 1A:54:73:D9:CA:BB:C5:A0:44:0F:6B:DB:AA:79:47:9A:96:BE:4C:9A
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09F4
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1C20AD868A3A11F18327ACD1CE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:09:21 +0000
ROA not before: Tue 28 Jul 2026 04:09:17 +0000
ROA not after: Fri 30 Sep 2033 04:09:17 +0000
asID: 3741
IP address blocks: 196.1.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2548 (0x9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 04:09:17 2026 GMT
Not After : Sep 30 04:09:17 2033 GMT
Subject: CN=6a682b71-d6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:ec:e8:b1:96:bc:a8:7c:61:58:c9:d8:9f:
55:a7:69:27:31:8b:49:80:e2:bd:b5:b1:2e:fc:d6:
cf:d5:cc:a3:9a:9e:77:3b:1f:b4:2d:2c:3a:ca:ef:
c8:6a:89:c6:07:e5:9e:fa:6b:a0:d5:cc:92:7a:99:
62:f6:b0:ca:46:de:78:2f:d7:59:46:6b:dd:a0:07:
e0:96:86:98:ae:da:6a:81:e2:59:46:21:43:e2:6d:
82:6e:d6:10:a8:5b:3f:26:a0:a1:15:fa:b7:3b:97:
1c:b7:0b:a2:4f:93:c2:e5:e8:8f:c8:40:49:5f:db:
b5:12:27:bf:7c:51:c0:47:91:ef:fb:f0:39:ec:b5:
1d:d1:a2:21:0f:a7:46:60:30:b7:86:c6:38:23:a1:
f0:d8:43:a6:1c:a1:16:31:4d:7e:08:68:13:c3:f7:
a4:ad:83:80:4f:36:04:be:d9:d7:21:78:90:cc:2f:
61:3b:29:e7:b6:c2:2b:98:4a:69:88:58:51:d2:26:
ce:6b:f4:b9:9f:39:6c:45:f2:29:ae:5b:19:97:5d:
51:6e:42:b9:10:5d:52:31:48:31:2c:59:c6:b1:8d:
93:67:03:d5:1f:0d:fc:35:5b:91:45:b4:c2:48:19:
74:a8:b6:9a:08:57:0b:ef:a7:e0:d6:ac:87:40:21:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:54:73:D9:CA:BB:C5:A0:44:0F:6B:DB:AA:79:47:9A:96:BE:4C:9A
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1C20AD868A3A11F18327ACD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.8.0/22
Signature Algorithm: sha256WithRSAEncryption
50:f2:a6:83:7e:36:a6:72:de:eb:91:bb:01:fd:43:a6:68:15:
d6:97:68:a7:b8:af:35:3c:0a:d7:4d:7e:d1:a3:96:c0:5f:17:
e2:54:cc:a2:b0:bc:92:1c:cc:08:42:1e:f2:ba:53:90:2f:43:
09:fe:4e:ce:26:82:f0:84:54:a0:ad:76:44:d5:00:a1:02:1f:
98:82:a2:0f:84:e1:ba:d5:a8:5f:8c:b7:45:bc:4a:44:00:71:
4c:3b:ac:c2:37:18:c1:03:5a:37:4a:f8:38:c3:c5:5d:4a:f9:
73:1b:c3:4e:89:1f:a0:49:60:3e:52:eb:1e:00:0f:f6:c1:30:
32:f6:90:a8:56:00:01:95:95:17:7a:f5:43:d2:b9:70:d6:72:
9d:36:bf:d8:f7:bb:fc:ad:74:ac:ff:e0:ce:48:16:9e:40:e4:
b4:63:05:ae:0f:2d:d5:48:bb:54:00:7f:83:64:04:ed:f9:bc:
71:61:f2:26:ec:62:04:6b:8a:26:42:7f:ec:7c:d7:90:3d:7c:
c6:a5:4d:61:78:4c:cf:ba:cc:33:ae:e9:73:a5:64:b9:86:62:
cf:d1:24:fb:42:48:56:a1:74:a0:6c:8e:d0:32:27:a4:0e:44:
8d:22:1e:46:53:68:da:b8:81:ba:cf:7b:23:14:60:a4:09:98:
b8:b6:87:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:24 2026 by rpki-client