Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/412027728A3C11F18CC72DE1CE1D38B0.roa
File: 412027728A3C11F18CC72DE1CE1D38B0.roa (raw, json)
Hash identifier: wMbGPM+zuNIU83bCTKX7dP3b69M6CpEjvcWnSnXxAFQ=
Subject key identifier: 80:01:ED:04:F7:B4:E2:91:D9:CA:9F:3F:CE:FF:6D:BB:2C:CE:C1:D5
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09FA
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/412027728A3C11F18CC72DE1CE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:24:42 +0000
ROA not before: Tue 28 Jul 2026 04:24:38 +0000
ROA not after: Fri 30 Sep 2033 04:24:38 +0000
asID: 3741
IP address blocks: 196.1.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 04:24:38 2026 GMT
Not After : Sep 30 04:24:38 2033 GMT
Subject: CN=6a682f0a-1fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:aa:8c:95:c3:7b:d9:cb:4f:ba:c5:8a:1d:
19:98:2d:fb:46:7f:76:aa:2d:db:d0:2c:ab:1c:7b:
49:6b:b5:23:9a:ad:82:a4:b6:0b:4e:b1:14:3d:f2:
17:a5:10:95:af:71:e9:fc:30:77:0f:6b:28:b6:3c:
a1:d9:cd:59:aa:ce:a0:d7:82:12:af:2a:97:ff:e6:
57:16:8b:e7:a6:62:e3:d1:a3:c9:57:98:b3:f1:82:
eb:03:0c:da:fa:13:81:ab:d6:c7:cd:cb:1c:57:b9:
c7:d1:7a:46:39:73:be:16:bf:b1:39:f0:f5:0a:22:
3f:e6:6f:ab:b2:f1:2b:c7:56:ae:d1:ec:f2:1a:bc:
28:f2:0a:88:32:15:17:c4:82:f4:fc:92:80:39:b1:
1c:39:67:7a:0c:57:40:6b:43:a5:a2:50:1b:6d:cd:
7c:4b:a3:31:f8:5c:66:46:31:5c:6a:f4:b5:1e:df:
c4:43:d8:de:72:fc:b6:b8:17:a1:f1:18:ae:97:9f:
4a:26:3c:71:d9:fa:63:60:11:6a:50:f6:ca:17:3a:
f3:24:4f:c9:d1:43:0a:c4:f8:2c:f1:8b:6b:5e:e3:
cf:76:ce:f5:79:ab:3e:e6:5e:bd:fe:17:64:2d:3f:
60:e6:4f:74:98:fa:a0:6c:7e:f3:6b:e9:13:85:a4:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:01:ED:04:F7:B4:E2:91:D9:CA:9F:3F:CE:FF:6D:BB:2C:CE:C1:D5
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/412027728A3C11F18CC72DE1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.75.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ba:ed:8e:58:9b:ec:58:0b:cb:9d:5f:71:64:ec:6d:de:0c:
7d:4a:a4:ba:2b:bd:71:16:07:3b:23:7b:fd:5c:34:7a:8b:77:
51:d8:e3:4c:4b:c3:3a:04:89:88:e4:90:bc:f9:53:76:25:17:
b5:e8:ac:62:01:0b:a0:e6:90:90:ce:a0:ff:be:54:3e:89:b6:
28:e1:62:c4:b3:30:42:95:d6:3c:f7:5c:fa:a1:8d:32:a2:7e:
c2:3e:f4:22:96:31:74:73:7d:4d:20:a6:22:55:93:fe:ab:12:
d9:96:5f:93:eb:ee:b0:22:72:d5:73:e8:d1:4e:12:d3:e0:fa:
6b:42:49:3c:70:28:15:cb:be:e7:00:8a:5e:73:5a:7e:be:c4:
1b:c3:39:0c:9d:3f:67:00:65:01:00:fe:7b:37:e7:e0:f3:f8:
01:25:5f:88:c5:9a:d9:af:96:cc:7f:39:99:ac:66:52:6e:75:
9b:0a:aa:14:1d:83:25:23:09:57:84:ac:df:28:50:6d:11:4e:
0e:97:e3:c0:fc:9b:26:c0:04:62:a1:8b:22:8f:e9:b8:df:45:
83:ec:44:a3:7c:f2:e2:e6:8b:f6:b8:6f:67:93:48:8c:6e:85:
fc:aa:f1:14:e8:43:ab:1e:71:5e:68:f5:c9:78:4a:52:5c:43:
00:78:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:23 2026 by rpki-client