Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/67D5973C8A3511F1A765CFB3CE1D38B0.roa
File: 67D5973C8A3511F1A765CFB3CE1D38B0.roa (raw, json)
Hash identifier: ZiUgYaBHKSREzTtNFtJ7C09hwgSf+lgVie1lBz4Iqws=
Subject key identifier: F9:29:C5:60:E9:03:D9:1C:51:58:EC:48:15:AA:86:1D:DE:87:5F:56
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09E0
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/67D5973C8A3511F1A765CFB3CE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:35:41 +0000
ROA not before: Tue 28 Jul 2026 03:35:36 +0000
ROA not after: Wed 31 Aug 2033 03:35:36 +0000
asID: 20011
IP address blocks: 41.132.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2528 (0x9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 03:35:36 2026 GMT
Not After : Aug 31 03:35:36 2033 GMT
Subject: CN=6a68238d-e176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:4e:a3:fe:96:e2:c0:de:18:b7:17:ce:5a:
e9:f3:a2:77:34:28:2c:b3:90:14:a8:ba:a0:bc:91:
e2:5b:9b:24:85:53:f2:6e:d6:ed:67:ec:e9:b3:d9:
14:f7:ef:bc:42:e3:9a:5a:93:ae:ea:4f:38:6f:0f:
b6:22:d5:01:4a:0f:74:7f:0c:75:6f:59:56:16:b2:
42:cc:50:76:3a:c1:0a:d8:0a:16:9b:7b:fe:45:e0:
90:03:8b:b8:74:a9:46:0f:da:f9:2d:e9:f6:07:24:
11:e3:83:ea:46:ec:61:d7:67:ab:3c:1d:70:2c:6c:
ad:fa:91:24:22:c4:cf:1a:47:6a:fa:6f:fd:6a:1b:
92:e4:7c:0c:14:8d:dc:c0:0f:66:b0:a5:9b:fb:2f:
0a:51:78:21:c8:a8:6a:ec:a5:22:36:5a:fc:c8:f5:
d5:90:93:a0:48:89:7b:dc:fb:ab:10:43:62:42:19:
0f:50:96:e4:18:d9:4e:bc:07:66:42:15:91:d1:4f:
6f:d4:d0:44:7e:35:03:ce:03:6d:7b:39:2a:e9:7a:
d8:0d:e2:96:d1:42:52:72:e8:04:fd:19:6a:e9:3d:
79:5e:06:ec:bc:7f:4f:cb:75:aa:e2:f2:ff:4e:7b:
29:97:e3:36:97:d9:a1:ff:bf:54:91:10:9e:a5:7d:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:C5:60:E9:03:D9:1C:51:58:EC:48:15:AA:86:1D:DE:87:5F:56
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/67D5973C8A3511F1A765CFB3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.132.64.0/21
Signature Algorithm: sha256WithRSAEncryption
64:6f:34:8b:9c:c5:8e:6f:24:7d:f3:c3:e6:ef:01:03:b5:71:
bf:1f:cf:dd:49:54:b3:5b:cd:4a:f6:66:5b:30:ba:73:89:43:
23:16:43:e7:a7:0b:b8:be:57:be:b0:d3:d7:bf:eb:ab:34:7e:
6e:cf:00:ee:b3:e3:93:dc:fb:ac:1e:0f:c3:57:42:91:b2:da:
24:16:75:a7:7d:34:a7:ad:71:89:3f:ad:5f:47:d9:6e:49:b5:
4a:ce:bf:5b:73:6b:9f:62:12:45:59:26:8a:71:05:d0:a6:d0:
c0:fb:38:be:e8:c8:65:f2:69:ef:6d:d6:8c:00:6d:21:51:5b:
64:29:65:c6:5f:78:4a:7a:b7:f8:13:3f:79:71:51:29:c5:88:
52:7d:20:1e:3a:ce:2d:d8:64:e3:dd:a4:03:f5:de:f9:5b:37:
63:1c:6b:f1:a3:fc:67:f4:8c:cd:c0:62:73:1e:26:15:80:e3:
bc:c6:29:33:ef:f1:99:90:14:7b:e1:37:16:53:bf:3c:47:0a:
71:6e:29:2b:77:62:33:fb:7d:e5:6b:14:f5:5f:4a:2d:da:a9:
b8:41:aa:2c:7d:ad:8e:ba:4b:77:e8:0b:d0:3b:25:a3:15:ee:
ff:b6:5b:34:a4:8b:a2:34:ba:0b:13:57:b5:9e:77:ef:45:29:
f0:0d:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:24 2026 by rpki-client