Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8C520C22876411F1BFD88808CF1D38B0.roa
File: 8C520C22876411F1BFD88808CF1D38B0.roa (raw, json)
Hash identifier: nk4ZaAtwkdVjetRtqTND4JdyX+bpx7aWBN4KVgZC0fY=
Subject key identifier: F5:8B:D7:CD:AE:3B:7A:E9:5D:D1:B4:F0:08:60:65:BD:A8:7E:DD:20
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09BD
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8C520C22876411F1BFD88808CF1D38B0.roa
Signing time: Fri 24 Jul 2026 13:35:35 +0000
ROA not before: Fri 24 Jul 2026 13:35:30 +0000
ROA not after: Wed 31 Dec 2036 13:35:30 +0000
asID: 20011
IP address blocks: 41.132.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2493 (0x9bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 13:35:30 2026 GMT
Not After : Dec 31 13:35:30 2036 GMT
Subject: CN=6a636a27-2355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:3d:cf:a6:5c:63:a0:8f:eb:13:e1:ea:6f:
44:6d:9b:3d:08:e3:72:83:e5:a9:7f:82:ce:f3:3e:
c5:98:d4:e4:89:e6:51:b2:f7:0d:77:fa:c0:c8:0f:
ad:dd:75:45:c8:4c:53:b7:18:c5:fa:b2:57:12:08:
aa:7a:00:15:af:13:39:7e:a1:70:5b:6c:05:19:f1:
1a:41:4f:c4:3c:11:f1:9a:2c:dc:d0:4d:2b:32:0d:
d6:60:66:8d:37:41:d4:df:cd:91:ed:e9:ad:9f:d6:
09:32:d9:97:9b:7c:6e:72:ea:bc:f7:e2:62:b4:17:
d6:f2:a4:85:f3:e2:40:8e:c0:db:d7:cc:83:3b:29:
f0:d2:be:4d:27:04:ae:85:73:0a:3f:6f:93:fc:1d:
69:d5:f1:92:08:0d:f0:78:7c:79:21:f5:26:88:23:
c5:99:ba:8c:52:8b:77:f0:3e:b2:fd:2b:af:c1:bd:
ac:31:bb:d3:3c:ef:78:cb:b3:18:ff:60:90:6c:81:
0f:01:de:3f:f9:2b:37:41:89:06:75:d9:94:eb:e6:
c6:29:ac:3c:df:8d:f5:10:d3:1b:fd:05:22:1d:bc:
10:65:5e:dc:b4:53:6a:35:b9:32:3e:f3:c7:d2:32:
62:86:36:9f:20:36:71:c8:13:5b:c7:49:9b:a6:1a:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:D7:CD:AE:3B:7A:E9:5D:D1:B4:F0:08:60:65:BD:A8:7E:DD:20
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8C520C22876411F1BFD88808CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.132.0.0/18
Signature Algorithm: sha256WithRSAEncryption
cc:d3:ad:45:de:12:e8:ab:34:c6:49:5a:df:d9:e1:7b:13:74:
7c:c4:9e:11:84:55:24:d3:2b:c8:2e:b6:31:0b:7b:22:19:45:
ab:34:97:84:09:52:ca:92:d6:30:08:09:00:d0:ff:da:6e:c1:
63:24:8d:8c:5d:65:22:b9:95:77:4d:f1:11:4f:04:a9:fb:62:
ce:31:2d:e4:29:e4:c2:99:64:77:b7:d0:db:e2:8a:31:f5:c1:
e2:1e:5b:18:9f:6f:97:43:28:1e:a2:5f:09:84:7d:12:75:1d:
d3:a7:6a:42:b9:46:6a:c0:d0:f5:7d:d2:fe:35:36:d2:b7:68:
b1:a2:7a:1a:d3:ba:5e:45:5e:ad:c5:ca:45:a9:c8:b5:06:51:
e8:ad:89:0f:4a:a4:dc:ce:0a:59:05:f3:28:25:23:96:10:49:
5c:13:b1:e1:8d:cd:8f:61:f6:95:bb:c7:8a:71:73:2d:25:92:
a6:78:2b:3a:78:65:8b:95:38:c5:f1:41:06:19:6d:5b:17:68:
72:93:d5:31:94:f1:7f:d2:4e:73:e1:8d:30:cd:f8:40:f9:fe:
99:5f:33:0c:fe:35:ad:eb:0e:b7:9f:bf:6d:93:c9:89:94:b1:
82:56:39:26:7b:a5:16:67:80:8d:eb:90:f8:29:af:af:1b:a2:
0a:4f:82:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yNjA3MjQxMzM1MzBaFw0zNjEyMzExMzM1MzBaMBgxFjAU
BgNVBAMTDTZhNjM2YTI3LTIzNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCf2D3PplxjoI/rE+Hqb0Rtmz0I43KD5al/gs7zPsWY1OSJ5lGy9w13+sDI
D63ddUXITFO3GMX6slcSCKp6ABWvEzl+oXBbbAUZ8RpBT8Q8EfGaLNzQTSsyDdZg
Zo03QdTfzZHt6a2f1gky2ZebfG5y6rz34mK0F9bypIXz4kCOwNvXzIM7KfDSvk0n
BK6Fcwo/b5P8HWnV8ZIIDfB4fHkh9SaII8WZuoxSi3fwPrL9K6/Bvawxu9M873jL
sxj/YJBsgQ8B3j/5KzdBiQZ12ZTr5sYprDzfjfUQ0xv9BSIdvBBlXty0U2o1uTI+
88fSMmKGNp8gNnHIE1vHSZumGsS/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU9YvX
za47euld0bTwCGBlvah+3SAwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4LzhDNTIwQzIyODc2NDExRjFCRkQ4ODgwOENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYphAAwDQYJKoZIhvcNAQEL
BQADggEBAMzTrUXeEuirNMZJWt/Z4XsTdHzEnhGEVSTTK8gutjELeyIZRas0l4QJ
UsqS1jAICQDQ/9puwWMkjYxdZSK5lXdN8RFPBKn7Ys4xLeQp5MKZZHe30NviijH1
weIeWxifb5dDKB6iXwmEfRJ1HdOnakK5RmrA0PV90v41NtK3aLGiehrTul5FXq3F
ykWpyLUGUeitiQ9KpNzOClkF8yglI5YQSVwTseGNzY9h9pW7x4pxcy0lkqZ4Kzp4
ZYuVOMXxQQYZbVsXaHKT1TGU8X/STnPhjTDN+ED5/plfMwz+Na3rDrefv22TyYmU
sYJWOSZ7pRZngI3rkPgpr68bogpPgpY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:25 2026 by rpki-client