Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/994D97E4876811F18B5C64A3CE1D38B0.roa
File: 994D97E4876811F18B5C64A3CE1D38B0.roa (raw, json)
Hash identifier: B0pvxpFHrVVdCAXK1y1/MpObYg7Lb4bb6gc5oBj3bAU=
Subject key identifier: 37:FB:12:C6:E2:5B:35:87:F8:3B:EA:08:D3:EA:84:9F:DE:03:3C:5F
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09C9
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/994D97E4876811F18B5C64A3CE1D38B0.roa
Signing time: Fri 24 Jul 2026 14:04:35 +0000
ROA not before: Fri 24 Jul 2026 14:04:30 +0000
ROA not after: Wed 31 Dec 2036 14:04:30 +0000
asID: 20011
IP address blocks: 196.210.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2505 (0x9c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 14:04:30 2026 GMT
Not After : Dec 31 14:04:30 2036 GMT
Subject: CN=6a6370f3-4354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:f3:7c:d4:e9:b2:5f:6a:c5:c6:96:d6:87:
90:f4:b5:53:11:28:f9:59:67:a1:d7:e8:40:26:25:
5d:f6:33:bb:1f:b2:25:0d:0d:ee:41:a2:b6:63:75:
67:0c:ff:75:e3:f0:c2:a7:79:d1:d9:61:64:76:ca:
6c:c8:46:09:4a:21:20:68:41:b5:c5:6a:bc:51:fe:
03:1c:86:6f:0f:80:79:22:91:7d:c6:f5:a4:fd:09:
e9:4b:dc:03:15:93:3e:b4:72:f9:e9:72:b3:86:54:
40:9a:01:70:43:ea:8e:59:0f:32:b9:a3:30:10:a8:
6f:8b:0a:a7:21:4f:e1:bb:fc:0f:45:9c:8f:1e:f5:
ee:79:9f:2d:85:ad:ed:b1:95:29:a6:19:4b:65:6c:
63:62:7d:51:5a:23:04:a9:2c:e3:9d:47:58:25:52:
45:31:51:23:9a:10:87:12:ad:45:b2:df:82:4d:d2:
5d:61:22:56:3a:c8:82:7b:c6:a4:c9:e2:4f:d6:bc:
e0:e1:7f:34:ce:ed:db:7f:e2:b4:c1:17:33:e4:94:
89:da:41:81:cb:d5:3f:0a:2c:69:30:7c:22:6c:f7:
a0:6b:17:2e:8c:5f:5d:27:45:fd:9d:44:fd:78:5d:
9f:47:c7:48:e5:f6:c1:87:25:b4:48:3a:1f:a9:e3:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FB:12:C6:E2:5B:35:87:F8:3B:EA:08:D3:EA:84:9F:DE:03:3C:5F
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/994D97E4876811F18B5C64A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:99:c2:d2:7b:6a:c9:79:75:1f:d3:58:17:19:06:46:ac:f2:
11:46:7f:35:b3:88:51:a3:ca:c1:ee:fa:a0:19:8c:aa:f5:a0:
fe:0f:25:10:75:3c:d1:e4:73:31:70:1e:08:36:9a:01:b6:81:
89:18:1c:15:f4:bb:29:98:9b:34:77:cd:1b:07:29:af:50:a4:
52:a3:7e:27:06:b0:49:a8:13:47:f8:20:85:61:16:83:a8:17:
23:1e:d8:86:e0:5f:c6:66:81:fc:c0:73:08:79:62:93:14:38:
33:91:33:41:33:54:5d:21:e2:7c:88:d5:20:ae:86:70:30:1d:
56:a1:23:7d:08:21:31:27:92:cf:d8:c0:a3:8a:74:09:86:a5:
d6:81:3f:19:0b:77:2d:aa:7f:cd:36:6a:de:c2:a5:a0:86:e9:
67:5c:11:d7:91:fe:b8:25:e0:fc:9a:1a:0b:6d:f1:79:d1:b2:
d0:89:92:46:92:f6:fb:69:3e:68:1a:1c:66:40:7f:b1:07:a8:
6f:97:0a:d6:b4:4c:8c:de:a7:bd:16:13:ee:57:80:6f:42:a9:
32:c0:cf:a3:6d:ad:e5:ce:5c:df:da:b7:c3:f7:72:32:83:3d:
a9:a7:b0:76:21:07:78:60:4b:90:58:ee:a2:24:a3:f1:6b:9d:
50:a8:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:24 2026 by rpki-client