Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5DA0AAAA875A11F18A2D45CBCE1D38B0.roa
File: 5DA0AAAA875A11F18A2D45CBCE1D38B0.roa (raw, json)
Hash identifier: X4NEKPocEQr7ZHdEpVyCOFDnpXCPsMPh/VdrLeIg5Y0=
Subject key identifier: 25:4C:12:D3:A5:41:1C:94:B2:BF:4F:9F:B0:B5:64:84:A5:43:B6:0E
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09AC
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5DA0AAAA875A11F18A2D45CBCE1D38B0.roa
Signing time: Fri 24 Jul 2026 12:22:42 +0000
ROA not before: Fri 24 Jul 2026 12:22:37 +0000
ROA not after: Wed 31 Dec 2036 12:22:37 +0000
asID: 20011
IP address blocks: 196.39.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2476 (0x9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 12:22:37 2026 GMT
Not After : Dec 31 12:22:37 2036 GMT
Subject: CN=6a635911-8206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:ec:cf:d4:c3:21:71:a7:57:53:de:3d:2a:
c4:dc:88:48:24:d4:cd:7e:f5:de:c8:21:b5:63:03:
42:db:97:2a:c1:10:dc:0a:ab:79:dc:74:31:48:5d:
62:bb:6b:9c:4d:d1:0b:51:e3:26:2e:7d:45:52:8a:
a7:89:5e:85:ab:72:ae:e2:f0:3f:bf:a7:81:9d:ab:
56:77:bc:a8:e8:90:30:b9:9b:45:03:a1:60:4b:c2:
e5:3d:de:57:e6:cf:7d:d5:08:d9:ca:44:dc:a7:04:
51:cf:61:40:56:af:9c:9a:16:f7:c1:64:e4:3c:87:
32:fa:88:50:7e:db:a7:ca:02:c6:63:7f:27:22:db:
b3:4e:23:3d:e2:a1:09:5c:8f:88:27:0f:12:67:dc:
ee:2a:40:b3:dc:57:94:26:55:ed:8f:36:c3:55:8e:
12:af:5a:15:d2:06:65:d3:a1:4c:d7:47:87:ff:38:
50:99:18:57:35:12:12:5a:8d:59:94:ee:ee:5b:8c:
6e:4d:03:20:d2:e3:cb:12:99:73:b7:fc:ea:b7:5a:
be:d1:8b:12:4c:40:40:23:72:25:0b:f4:3f:5f:4c:
ae:d1:8f:81:67:91:e6:c3:29:c8:b9:72:3a:f7:2c:
a2:06:19:93:23:65:24:c4:cc:98:d6:22:0a:90:f8:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:12:D3:A5:41:1C:94:B2:BF:4F:9F:B0:B5:64:84:A5:43:B6:0E
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5DA0AAAA875A11F18A2D45CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.39.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:ff:2c:fd:e2:68:71:34:6b:c9:d6:ac:a4:81:8c:c7:b5:9e:
26:74:a0:d9:6f:d3:a2:40:8d:3c:05:ea:64:62:1d:6b:66:e9:
08:3b:42:9e:17:65:8d:cf:f4:1b:e4:95:1b:b4:73:40:30:63:
6e:8e:5b:29:d9:34:bf:98:6d:88:d6:57:c2:3e:bc:49:11:1a:
3e:a0:3b:7d:51:ab:79:e3:33:67:f1:f3:bb:97:bd:c2:af:1b:
e4:61:04:cd:a6:63:14:92:bc:ce:b1:2a:66:63:95:c1:24:70:
8f:a2:9b:e9:d4:36:95:b5:32:2c:1b:a5:01:9d:7c:d2:19:6c:
0b:af:f1:22:1e:19:6b:4c:87:36:50:c3:32:ab:09:fc:c7:e1:
29:18:31:d8:f6:99:94:a7:c2:02:2d:b6:da:e4:5c:e9:9a:d5:
6b:ba:15:c5:0d:d2:05:4c:90:32:9c:01:fb:30:0c:98:da:1b:
65:74:db:21:90:3d:81:08:4c:df:61:47:b3:42:70:00:b7:7f:
77:4d:e0:59:bb:9b:21:50:ba:29:33:52:ac:12:9d:84:16:fe:
5b:28:dc:90:ce:ca:4b:cd:f5:f0:9c:4a:d3:8c:4d:7a:5e:dc:
aa:13:c7:e7:2a:0e:d0:93:b1:01:8d:d5:83:9a:a2:63:3e:11:
23:c6:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:25 2026 by rpki-client