Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/57E19A6E876B11F1AAA025B2CE1D38B0.roa
File: 57E19A6E876B11F1AAA025B2CE1D38B0.roa (raw, json)
Hash identifier: Kt+kpUBtLKVFlxcNjI+9KbjPYtpGyjj4BiKhpvFHeh8=
Subject key identifier: 05:AC:BD:5A:6E:90:DF:8E:31:AD:5C:EF:C9:E3:86:3F:F5:94:FD:58
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09D3
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/57E19A6E876B11F1AAA025B2CE1D38B0.roa
Signing time: Fri 24 Jul 2026 14:24:13 +0000
ROA not before: Fri 24 Jul 2026 14:24:09 +0000
ROA not after: Wed 31 Dec 2036 14:24:09 +0000
asID: 3741
IP address blocks: 197.80.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2515 (0x9d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 14:24:09 2026 GMT
Not After : Dec 31 14:24:09 2036 GMT
Subject: CN=6a63758d-11a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a3:09:03:c7:03:1d:77:23:10:0d:bd:0d:70:
7b:5d:19:4d:1c:02:01:f2:a9:74:ec:d1:9a:f8:1f:
c0:a0:46:48:4a:bb:f1:5f:e5:d8:a9:f0:5e:8d:9c:
2c:5d:20:36:a5:a8:f2:8a:91:d9:54:74:65:6f:f5:
e5:77:2a:be:4e:19:40:74:39:e8:f1:d0:0b:74:25:
b9:65:71:25:62:34:41:11:50:aa:83:df:25:ce:73:
44:61:7d:c2:c7:51:a4:33:cf:c8:0a:d7:32:da:85:
a0:76:c4:d4:9f:c9:00:39:b1:a9:cd:15:08:64:51:
0c:3a:61:3d:3a:27:b1:d4:fc:6c:9e:de:be:6b:c1:
0e:c2:ab:30:d0:d1:d8:34:05:c5:5b:1a:ce:b2:1a:
27:e7:b1:31:c7:4c:91:f5:96:0b:02:52:f6:1c:fe:
c6:4e:04:b9:02:2b:8e:54:f6:19:07:5b:b7:ef:c2:
55:92:87:79:c1:18:52:61:cc:1d:38:57:2f:5c:8a:
b3:3e:d9:31:af:d2:da:45:73:14:7e:00:89:28:12:
90:87:1c:82:de:b6:06:11:25:c9:8f:06:4f:f0:77:
16:45:55:f6:bc:9e:2a:2c:0c:eb:cc:72:c4:11:a0:
5f:2a:4a:ce:58:dc:d6:e4:d3:74:1d:4a:38:05:37:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:BD:5A:6E:90:DF:8E:31:AD:5C:EF:C9:E3:86:3F:F5:94:FD:58
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/57E19A6E876B11F1AAA025B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.80.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:07:54:d5:4a:81:a7:4e:72:9f:9f:eb:fc:60:5d:3e:b0:98:
95:4b:0f:82:46:65:55:a3:6b:b9:fe:01:3e:65:08:59:ef:84:
0d:a5:e6:f1:45:a1:03:0c:ca:80:1d:a3:d4:5f:f8:52:51:03:
48:02:b5:e5:86:66:ae:6c:41:14:2f:20:7f:03:3d:06:97:0a:
33:64:2a:88:e0:bc:97:bd:5a:46:89:72:fd:e3:bd:a6:3c:9f:
27:b5:9a:a0:7e:f8:6e:24:27:03:36:a5:b9:2e:c8:e2:8c:53:
76:b3:89:5c:23:1f:d9:6e:5f:ad:d5:0d:d2:f6:6d:a1:4b:7e:
a7:c4:89:a6:5f:2c:d5:31:51:0c:45:2c:c4:10:d5:d7:30:61:
ba:39:11:dc:28:90:32:34:2b:77:08:c6:cf:f8:fe:1c:db:d6:
8f:7a:8e:fb:0d:16:ae:07:04:8b:2f:ff:a1:33:b4:e5:3a:e8:
a8:1d:a0:a8:3c:85:c8:48:be:b5:08:6c:7d:12:d1:f9:ef:c6:
ac:78:49:e0:44:6e:26:b8:f6:5a:b8:7e:5e:0d:24:77:8e:58:
d4:bd:9f:0f:12:e3:c7:61:b5:48:e4:5b:da:9f:c3:c2:6b:7d:
c6:6c:83:4c:2e:a2:8a:18:a4:f1:2b:da:25:9f:9b:71:a3:a2:
96:f7:64:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:24 2026 by rpki-client