Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/652EE2308A3611F1B18EACB8CE1D38B0.roa
File: 652EE2308A3611F1B18EACB8CE1D38B0.roa (raw, json)
Hash identifier: tCOiWJWSpKgymTUvkxDdXQHju2oR7qSVTbT9EIaHWbg=
Subject key identifier: 04:D4:F5:76:B6:F7:06:E5:33:2E:D8:C7:14:F4:EF:05:28:81:1D:81
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09E4
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/652EE2308A3611F1B18EACB8CE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:42:46 +0000
ROA not before: Tue 28 Jul 2026 03:42:41 +0000
ROA not after: Wed 31 Aug 2033 03:42:41 +0000
asID: 20011
IP address blocks: 41.135.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 03:42:41 2026 GMT
Not After : Aug 31 03:42:41 2033 GMT
Subject: CN=6a682536-28ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:19:36:e9:ec:f6:a1:01:c0:06:58:36:5e:52:
cc:ba:e6:18:01:7b:7a:02:f6:bb:19:02:ea:3b:c0:
80:5e:db:10:d0:b7:28:55:e0:11:bb:3a:dd:4c:87:
57:84:ca:e1:6c:fc:7d:22:ac:04:2c:2b:f9:65:c2:
33:c7:0c:cf:e7:f1:23:06:98:fc:d7:d1:2c:6e:b6:
18:db:79:72:39:01:45:7c:3f:12:8c:21:77:f8:59:
e8:c5:0a:c4:da:24:a3:7c:13:09:cc:68:3c:2d:69:
ff:e6:aa:5e:ff:76:e4:14:2b:0a:ee:75:6b:af:96:
fc:c9:d0:75:f8:66:d7:c6:fd:90:62:8f:fd:46:8b:
ee:a5:e1:9f:34:38:5f:5c:4e:0f:de:c4:fe:7f:50:
f0:03:19:94:36:d3:a0:5b:8d:bc:4d:46:d9:a5:20:
fb:7d:cc:a7:e3:cb:fd:55:86:7d:c9:6d:62:59:9e:
4c:5a:e6:a7:58:a1:5d:bc:6c:28:23:e0:ce:27:d1:
fd:1a:72:fd:d1:c6:d0:fd:1b:75:d1:fb:d8:91:18:
01:aa:f9:d8:81:ae:ce:bf:13:25:1f:06:e4:d7:99:
a7:a9:26:3d:5f:be:bc:87:4b:f8:b3:40:5e:bc:cb:
05:b6:44:f1:03:39:98:01:74:ab:a7:d1:f3:06:3d:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D4:F5:76:B6:F7:06:E5:33:2E:D8:C7:14:F4:EF:05:28:81:1D:81
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/652EE2308A3611F1B18EACB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.135.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:8c:54:eb:d5:69:3a:cb:38:15:4d:79:29:e0:61:95:c9:49:
d0:44:48:0b:56:c0:d7:d0:eb:8d:12:48:36:ba:00:86:79:40:
62:fa:b4:0c:14:df:77:aa:b6:37:1e:b1:42:af:0d:2a:ca:db:
6d:e8:43:f2:d7:b8:a8:ab:a3:12:20:ef:29:03:7f:d6:27:46:
ac:fa:9e:36:b3:8d:04:c2:82:64:f1:68:47:3e:95:e6:0d:ba:
e3:10:fa:b5:c2:b2:97:59:84:25:d9:be:4d:f4:93:5b:f8:e3:
b2:ed:3b:21:fc:2e:77:c0:06:d4:b5:75:08:b3:8f:79:1b:c9:
15:fc:13:b4:d4:5e:ce:ae:ee:fe:50:17:32:fd:87:43:95:2e:
65:85:d2:3c:d3:2d:96:45:ad:5e:2f:8c:83:8e:12:f9:da:07:
33:15:17:67:d0:c7:07:1f:1c:bf:4c:75:b8:91:91:f0:27:63:
69:61:a0:8e:fd:0e:f8:c8:eb:bf:bf:2d:70:6e:c3:d8:3a:15:
15:a8:da:21:1d:e3:85:aa:40:d7:d5:ca:17:93:11:25:f9:75:
12:ac:67:0b:e6:df:8b:d2:78:d1:80:bb:5d:4f:f6:88:55:d7:
be:b9:f8:a8:b4:4e:26:63:51:82:4a:6a:b5:5a:70:a8:d1:58:
bf:7e:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:24 2026 by rpki-client