Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8A64889E8A3A11F19B4F29D4CE1D38B0.roa
File: 8A64889E8A3A11F19B4F29D4CE1D38B0.roa (raw, json)
Hash identifier: C01zjOEKY4yrvNRFyZpcHX6+dj6Mgl8MvxPEn+Krmnk=
Subject key identifier: D0:DF:1A:EF:3D:F9:CD:FD:BA:57:E4:A1:9B:F1:45:E8:8D:0C:27:F7
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09F6
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8A64889E8A3A11F19B4F29D4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:12:26 +0000
ROA not before: Tue 28 Jul 2026 04:12:21 +0000
ROA not after: Fri 30 Sep 2033 04:12:21 +0000
asID: 3741
IP address blocks: 196.1.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2550 (0x9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 04:12:21 2026 GMT
Not After : Sep 30 04:12:21 2033 GMT
Subject: CN=6a682c2a-cbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:37:89:af:59:2e:b1:59:ed:e8:78:13:cc:
a0:a5:61:50:d1:35:e4:aa:70:25:17:ee:4f:20:23:
cc:be:f6:8d:05:54:82:6e:fc:15:a7:e8:1f:99:81:
db:33:0d:25:9e:49:67:6b:9f:ab:d6:c2:8a:58:63:
91:11:42:17:fe:7d:60:73:17:6f:30:04:79:ea:e3:
87:b2:43:ed:07:c2:3b:6e:77:7c:ca:67:94:f8:5c:
49:19:28:89:64:a4:e2:51:e3:6c:a7:b7:70:91:af:
9a:dc:7d:2b:0f:7a:48:13:6e:7c:34:36:b5:41:8d:
d2:3c:ee:77:bc:0e:3c:87:22:6b:fc:4c:d1:86:a0:
a7:64:59:6c:6f:e6:56:ac:a8:05:ed:23:e3:52:4f:
c8:ce:ef:95:bd:1c:21:be:4c:91:b2:ce:44:4f:9c:
f0:c0:69:2e:e9:bd:1b:0a:53:4e:1e:cf:6e:89:46:
30:d1:06:b4:f0:1e:5b:de:59:19:51:0d:29:b4:32:
34:06:13:12:6f:39:90:b2:09:14:d0:c0:1d:55:59:
c0:27:b7:93:b2:80:64:de:5c:cf:7d:cd:93:d6:45:
f7:4e:4a:14:07:16:15:a4:3b:40:52:06:d6:27:f7:
b7:f5:8e:81:c3:66:82:68:a5:93:55:39:3e:09:7c:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:1A:EF:3D:F9:CD:FD:BA:57:E4:A1:9B:F1:45:E8:8D:0C:27:F7
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8A64889E8A3A11F19B4F29D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.16.0/21
Signature Algorithm: sha256WithRSAEncryption
29:7e:0e:1e:b0:3f:f4:0a:50:4e:67:6c:43:df:32:c3:1c:bc:
62:ab:c3:51:03:9c:22:ba:1e:5a:64:6a:d7:c8:50:d0:ea:36:
a2:b4:11:80:0a:72:cb:bc:6d:ea:0b:aa:30:13:1c:7d:bc:9f:
ac:e2:19:b3:f8:5c:01:56:ae:4b:92:d1:0c:a3:08:9d:61:41:
9d:57:57:bc:da:8b:85:40:0a:97:e1:08:f3:c2:3d:0a:2c:81:
dc:69:63:62:cc:81:50:1c:9f:ee:18:2f:ea:cf:dc:25:d8:7f:
f9:e5:81:36:43:ef:64:e0:74:a4:2e:48:df:02:81:a3:b4:8e:
a5:ce:d2:d7:2d:6e:0c:67:a4:61:1f:05:b3:bb:c6:6b:a8:49:
3e:da:c4:11:90:ad:24:50:5f:b9:1a:77:8c:e0:6d:5b:4c:d0:
ce:ba:59:5d:47:ac:ae:72:81:1b:2a:a6:8b:cc:83:e1:b3:25:
43:fb:bb:d7:62:12:a0:da:41:f5:dc:29:0f:60:c4:eb:6b:7d:
a5:ba:b5:e0:bc:9c:ec:6c:b0:cf:af:18:f0:a5:c0:10:ff:ca:
1f:41:84:63:b4:b3:27:a2:84:e7:f4:c6:de:17:5e:24:45:5a:
61:61:c5:71:fc:39:15:34:57:fb:b2:d4:cf:46:46:34:70:42:
53:de:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:23 2026 by rpki-client