Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/690BFC26876611F1BF1A9913CF1D38B0.roa
File: 690BFC26876611F1BF1A9913CF1D38B0.roa (raw, json)
Hash identifier: WlueuG9+gt+BV6qcNIq5Vt4dhCFHfRvJh0PjvLVT2Mk=
Subject key identifier: E9:37:56:46:62:67:8A:F4:94:11:6F:D8:6D:88:8A:88:41:0A:06:85
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09C3
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/690BFC26876611F1BF1A9913CF1D38B0.roa
Signing time: Fri 24 Jul 2026 13:48:55 +0000
ROA not before: Fri 24 Jul 2026 13:48:50 +0000
ROA not after: Wed 31 Dec 2036 13:48:50 +0000
asID: 3741
IP address blocks: 196.1.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499 (0x9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 13:48:50 2026 GMT
Not After : Dec 31 13:48:50 2036 GMT
Subject: CN=6a636d47-12ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:89:99:a2:ff:ae:97:59:29:f5:84:ed:f1:
56:b7:3d:79:0d:1a:c2:fe:49:78:ea:ca:ed:dd:d8:
0c:0a:39:10:ce:95:43:e5:f7:54:77:8a:19:8b:0a:
fb:24:70:24:b3:98:85:c2:c9:0e:eb:34:df:d9:71:
8c:f6:ce:e6:e4:dd:7d:10:8a:82:0a:64:87:d0:2e:
a6:60:a7:8b:2f:45:fb:fd:f4:35:48:61:66:46:84:
ab:17:58:3e:5a:99:66:8e:07:66:ca:c6:8d:d2:91:
e2:5f:75:c3:f7:8e:10:9e:d4:e7:de:b9:75:33:b5:
76:87:94:ee:45:1f:ff:43:69:c6:d8:ef:a6:ce:cf:
22:2f:3a:87:17:8e:5b:6d:9a:1b:de:26:d3:c6:2d:
88:1e:b8:d9:bc:45:19:d4:69:10:b5:a1:01:6a:51:
55:c8:ef:3d:5c:1d:54:17:dd:1b:75:f0:9b:fc:5e:
0a:a7:31:03:17:6c:b4:e6:a6:48:7a:0d:19:01:d7:
d3:19:68:9f:42:b6:2d:9a:8e:52:d7:bd:66:1e:f6:
00:51:35:92:15:d8:6f:21:20:10:08:85:c4:83:78:
89:35:7b:df:4b:22:0e:bc:13:52:b9:22:f2:f4:22:
cf:38:14:cc:2e:c6:3b:47:44:c0:66:25:4d:e7:17:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:37:56:46:62:67:8A:F4:94:11:6F:D8:6D:88:8A:88:41:0A:06:85
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/690BFC26876611F1BF1A9913CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.81.0/24
Signature Algorithm: sha256WithRSAEncryption
33:50:9c:68:63:78:ba:4c:90:ac:3c:9a:9f:73:41:ef:50:4f:
43:09:1f:df:0f:9a:4f:02:ed:dd:89:77:e2:b4:ff:18:dd:f5:
18:c2:1f:27:5e:82:0f:0a:26:a4:05:32:95:f8:db:14:2f:1d:
94:cf:47:69:38:81:89:ee:7e:52:06:9d:cb:ed:4b:56:e6:93:
1e:44:60:f5:b9:c1:79:f7:fd:02:21:e7:44:20:eb:de:3a:a7:
26:44:da:16:50:f2:7a:f7:91:8b:58:09:03:6d:71:33:08:42:
3c:1e:89:72:e9:91:f4:f9:78:45:c6:84:ea:53:30:31:b0:55:
91:b7:b0:11:27:e9:85:94:84:39:b4:ff:8c:c1:08:c1:16:d0:
eb:bb:72:3c:4a:ce:64:1a:e5:23:18:89:67:fc:00:5f:ba:3a:
85:0f:51:45:48:f8:8a:98:f6:ec:81:ca:2b:93:89:c5:70:85:
21:bd:e8:dd:a6:be:e8:17:81:d3:98:a9:22:44:42:e8:c8:9b:
47:c8:58:11:a3:ce:95:20:eb:52:0e:16:e8:2d:64:a3:42:ee:
41:58:31:05:3f:79:36:4f:8d:b8:06:66:11:e3:55:46:00:eb:
ef:33:a6:66:00:78:cd:41:d1:e4:27:0c:5f:3f:a0:d8:53:aa:
0f:72:1f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:22 2026 by rpki-client