Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/84C26C968A3811F19C6868C6CE1D38B0.roa
File: 84C26C968A3811F19C6868C6CE1D38B0.roa (raw, json)
Hash identifier: FMHixZfMJ6Z9dA0wapUdMMVTUGAdn0r1A0FuLH1XmZg=
Subject key identifier: 4D:DC:9A:E2:56:59:72:01:D2:5E:D8:AF:B5:51:92:66:58:06:79:46
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09EC
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/84C26C968A3811F19C6868C6CE1D38B0.roa
Signing time: Tue 28 Jul 2026 03:57:58 +0000
ROA not before: Tue 28 Jul 2026 03:57:53 +0000
ROA not after: Wed 31 Aug 2033 03:57:53 +0000
asID: 20011
IP address blocks: 41.132.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2540 (0x9ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 03:57:53 2026 GMT
Not After : Aug 31 03:57:53 2033 GMT
Subject: CN=6a6828c6-3ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:49:05:ae:54:2f:a5:bc:3f:ac:b0:ed:05:
69:b2:e6:4a:7d:47:b7:6e:a5:60:df:91:d5:53:70:
75:c3:d9:22:95:53:f2:1a:11:2b:0a:7c:ed:db:50:
d9:48:76:e7:ae:1f:b7:24:34:68:0b:fd:a2:1e:15:
0a:0a:30:15:ce:79:ef:5a:7d:85:2e:9d:e3:66:cc:
24:a2:4f:ea:fc:97:66:58:ce:78:d2:a7:4c:a0:0d:
98:af:79:02:b6:62:fb:bd:fc:71:75:13:bb:3e:5f:
9a:8e:be:2a:ed:fb:57:b1:89:53:56:20:1a:9c:74:
09:34:2c:29:db:77:81:d2:f5:60:11:6c:9a:3c:57:
b7:41:f6:87:69:95:a2:c6:89:24:47:98:c7:e5:58:
31:a8:e9:49:b6:10:53:f9:b8:2f:da:16:8a:69:28:
d9:24:93:bf:8e:2d:58:64:42:5b:39:e6:e0:0f:6c:
62:a9:56:89:0a:90:5f:9f:ff:7f:23:81:a5:7c:2d:
fc:9f:3a:f1:00:4b:b7:93:d0:6d:21:92:ef:09:54:
40:2a:91:1c:4e:3e:5e:a2:ad:28:5b:86:d9:87:67:
0a:ac:30:b4:34:aa:03:0a:e1:1e:f8:60:0a:74:30:
ab:8d:0d:d0:81:12:57:d9:8f:3f:ff:fb:ab:67:00:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DC:9A:E2:56:59:72:01:D2:5E:D8:AF:B5:51:92:66:58:06:79:46
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/84C26C968A3811F19C6868C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.132.0.0/18
Signature Algorithm: sha256WithRSAEncryption
bf:fc:ef:31:9e:88:17:ef:94:21:a4:d1:e3:b0:6d:89:bb:e1:
5f:b8:f4:68:5e:46:f0:74:38:d9:14:31:10:cc:e6:68:04:ca:
da:2a:76:ae:f8:e7:95:62:9d:f6:2c:be:d2:1e:a1:09:87:21:
02:fd:4a:01:9d:26:68:8a:d7:49:cd:8a:4d:fe:d0:9d:db:47:
2f:7a:7e:f1:28:ec:00:7a:c8:99:db:53:c8:a2:7f:28:fb:ba:
ec:08:0f:e1:4b:f1:8b:a0:6d:2f:15:c6:56:87:1e:70:0e:9d:
16:bc:f8:60:b6:ee:19:f2:b8:ed:d3:97:e4:51:b6:99:22:e4:
9a:b3:11:19:89:19:08:0e:d7:92:a5:1f:e0:cb:4f:01:23:c6:
6f:f6:df:8d:d5:4b:76:b1:fe:b9:52:fe:58:a0:33:9d:cc:a9:
0d:57:e2:c0:29:f4:4a:ac:f4:a9:9e:ec:7e:a3:49:58:5d:67:
4a:fe:9a:e3:8f:a3:a5:21:85:35:68:3b:3b:e7:8b:bd:b7:bc:
ef:02:e7:2d:71:61:bd:b2:d5:fc:48:a1:04:d3:27:7f:3d:a7:
79:a4:c3:a8:f8:b3:a2:fa:39:22:96:78:2a:76:c8:20:38:51:
88:c2:f4:05:a8:28:75:f4:c9:f6:19:41:a9:26:9a:7c:1c:76:
90:6f:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:23 2026 by rpki-client