Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/23A83E28876C11F1ACFF04B8CE1D38B0.roa
File: 23A83E28876C11F1ACFF04B8CE1D38B0.roa (raw, json)
Hash identifier: P1ljFPj37ieoclgRDE0P5h78cKyi0Wyet7pgn+E570I=
Subject key identifier: D8:3D:3B:ED:80:53:4C:E9:14:6C:5E:9D:AF:79:77:7C:FF:9A:46:A7
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09D7
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/23A83E28876C11F1ACFF04B8CE1D38B0.roa
Signing time: Fri 24 Jul 2026 14:29:55 +0000
ROA not before: Fri 24 Jul 2026 14:29:50 +0000
ROA not after: Wed 31 Dec 2036 14:29:50 +0000
asID: 3741
IP address blocks: 197.80.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2519 (0x9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 14:29:50 2026 GMT
Not After : Dec 31 14:29:50 2036 GMT
Subject: CN=6a6376e3-5cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:6d:6d:e7:f4:ff:ca:94:34:f2:78:12:ca:
2d:b4:f7:f7:c6:6e:fe:b8:3c:a9:69:e2:6a:07:7f:
7d:46:68:29:4f:e2:1c:37:2c:70:50:27:84:70:7b:
57:ca:00:49:ef:18:f2:03:8b:b5:4e:f1:b8:b0:4e:
fa:ba:5a:c2:58:69:b3:99:6a:8f:ce:68:94:77:3c:
16:d8:c5:c2:c6:17:3b:2b:2a:fd:b9:26:45:53:00:
0f:56:9f:78:db:b4:18:50:30:0e:1b:ad:6c:84:25:
b0:8a:a6:0d:6a:d7:d2:2b:0b:44:b6:fa:0c:60:a1:
72:9a:06:f9:34:6d:47:35:ea:42:93:a3:88:22:1a:
a6:e7:54:21:d0:31:9d:99:8d:f0:ff:73:b7:1c:ee:
6a:43:82:0d:dc:a9:d8:46:b9:09:f6:f2:f6:9e:99:
6f:dc:3f:a5:b8:b1:2b:45:55:c4:9b:6e:01:15:cc:
2b:f6:2b:38:cc:da:21:fe:8f:7f:a8:6f:6c:5c:9b:
2f:e2:13:7c:13:07:57:aa:36:a8:39:30:88:34:3f:
7d:15:f7:f5:a0:e3:f4:ad:ac:26:ad:96:2f:4c:93:
cb:30:a5:66:25:a2:7d:97:16:c6:c2:1b:fe:34:7b:
9f:64:32:2a:b7:8c:f0:52:cf:99:92:b2:d8:bf:d2:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3D:3B:ED:80:53:4C:E9:14:6C:5E:9D:AF:79:77:7C:FF:9A:46:A7
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/23A83E28876C11F1ACFF04B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.80.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8e:10:d1:c9:98:1b:96:c4:82:61:fc:0b:dc:84:48:8c:e3:
49:88:53:98:50:c0:a7:97:0d:df:8e:1c:5e:51:a2:24:b9:7d:
4d:f2:2b:11:4b:e5:c2:d0:74:d6:c9:bc:54:4d:10:b7:d4:cf:
ac:16:72:6c:1d:e8:bb:a4:66:68:99:46:d9:97:d1:20:74:65:
e2:22:d7:d1:8e:5d:a3:0a:45:ce:0c:ad:d3:c1:f8:83:ec:16:
78:cb:b4:03:dd:b3:64:b3:c1:b1:a2:e5:85:db:5a:03:f2:07:
73:15:9c:83:c4:94:aa:d6:f2:11:51:6f:1b:eb:c5:af:99:9b:
03:84:1c:18:01:33:fc:12:3c:b5:e5:0b:2e:da:9c:1f:af:b2:
fb:61:70:71:a8:14:3d:03:15:6b:96:3f:27:f9:9b:2a:8b:6a:
21:df:a0:31:15:cf:5f:6f:ec:8b:62:ee:2a:42:6f:46:06:00:
bb:12:c6:fb:43:cb:39:c3:bf:6e:a5:19:e9:bb:c2:91:7d:6f:
27:17:2a:bf:da:4f:fb:6f:d9:e4:f0:fe:58:15:3b:25:ab:8e:
f5:dc:32:8f:a9:29:b3:92:69:bf:1b:4e:d3:16:f7:a3:4b:8e:
e7:c5:89:b7:63:15:56:68:c0:49:8e:94:7f:a8:74:d0:fd:e9:
3e:9e:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:25 2026 by rpki-client