Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/846F0D64876111F19A83F6F5CE1D38B0.roa
File: 846F0D64876111F19A83F6F5CE1D38B0.roa (raw, json)
Hash identifier: amWylc2I36glTVxeAojfxs25rYeTC1MymDOTvrU7yog=
Subject key identifier: 26:12:AE:35:E9:83:12:70:6B:E7:7C:3C:DE:C8:B5:1B:55:B7:8F:C2
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09AE
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/846F0D64876111F19A83F6F5CE1D38B0.roa
Signing time: Fri 24 Jul 2026 13:13:53 +0000
ROA not before: Fri 24 Jul 2026 13:13:48 +0000
ROA not after: Wed 31 Dec 2036 13:13:48 +0000
asID: 20011
IP address blocks: 41.132.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478 (0x9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 13:13:48 2026 GMT
Not After : Dec 31 13:13:48 2036 GMT
Subject: CN=6a636511-374c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:48:8f:7b:bb:57:c1:f2:03:01:d1:a1:62:
34:a3:ff:99:a6:06:2e:cd:2b:79:48:a3:d3:7d:b9:
ae:81:5e:66:c2:39:2f:0b:71:b9:21:75:94:cd:45:
c8:aa:b4:cd:84:29:df:29:08:89:31:64:c9:61:9f:
05:5b:c4:67:34:a8:7a:31:3b:59:af:de:2b:f2:3e:
06:28:4d:c7:a9:6f:2b:55:c3:cb:de:b3:3a:8b:11:
b4:ab:a7:d7:b9:1e:dd:cc:3c:a2:4e:df:7a:24:0c:
e3:85:38:67:c4:db:0c:ef:28:a8:51:56:bb:a1:8f:
de:bb:af:7c:9b:d8:12:63:36:c1:81:ea:9e:5a:c6:
b8:29:93:76:9f:ad:23:cc:a6:7c:a7:13:95:2f:4f:
73:71:8f:92:06:3b:27:46:d1:a4:c3:cf:eb:47:bc:
89:65:95:cc:f9:09:27:d3:2b:eb:2b:e6:4d:83:cc:
a3:3c:c3:3d:f5:cc:97:60:07:4a:2f:c3:bd:45:d2:
a4:a2:01:13:4c:28:33:14:29:d2:52:ab:67:92:8b:
31:ff:8e:af:a6:88:23:43:f9:37:c1:41:bc:51:b4:
cb:08:d9:48:1b:84:a1:1a:34:fa:a8:e9:86:67:6d:
d0:bd:23:28:3d:b7:e6:3b:d5:fc:57:8f:73:a2:48:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:AE:35:E9:83:12:70:6B:E7:7C:3C:DE:C8:B5:1B:55:B7:8F:C2
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/846F0D64876111F19A83F6F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.132.64.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:f6:3f:15:00:ca:b1:c9:65:ab:99:d1:00:fe:ca:de:5c:98:
1a:50:5f:38:34:e5:1a:a1:fb:ff:84:8f:59:74:3f:2f:bb:0e:
19:af:93:5d:0e:87:3f:67:ea:90:2c:06:89:e8:bf:64:3f:cf:
12:5f:c7:65:b7:3c:8e:59:d7:5e:91:40:ad:9c:a3:34:1c:db:
1c:a9:f0:4d:b8:3c:37:5b:b2:0b:e6:9d:a4:2e:43:3c:90:d7:
b5:c6:e0:2a:ad:8f:7c:80:79:8d:8d:8b:c7:8e:62:a3:57:be:
6d:20:e2:9a:df:86:55:7e:a9:46:97:2e:c5:8d:af:2d:7a:7b:
a3:27:be:bf:d0:bc:7a:08:6d:ef:6f:df:ff:0b:65:04:d5:2d:
17:cf:1a:23:f4:b1:cc:40:c6:da:bc:ae:94:f6:e3:ce:47:58:
20:d9:be:79:bc:5d:57:e9:af:bc:30:32:32:6e:d6:bd:11:92:
99:90:b6:a9:b8:92:72:7c:e1:c2:a6:bf:4e:8b:50:4f:f4:30:
73:68:5a:8b:12:c2:86:c8:0e:19:9f:7e:b7:12:16:6a:69:ae:
4d:71:55:47:3c:0f:d9:66:9f:bc:8d:7d:4d:4c:72:1e:87:1a:
17:c6:8a:e5:02:ca:a4:c1:80:10:13:8d:7a:22:e3:f2:4d:a9:
e8:cb:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:26 2026 by rpki-client