Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9F5FD3268A3E11F1A4838EEFCE1D38B0.roa
File: 9F5FD3268A3E11F1A4838EEFCE1D38B0.roa (raw, json)
Hash identifier: JGnLc1q0s8VH7esOIC3s8AGWu35pKiP7Xs1unrUYJcQ=
Subject key identifier: B0:FF:1B:32:A2:FD:DB:66:31:1B:C4:8D:04:EA:42:E4:D4:85:24:A9
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0A04
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9F5FD3268A3E11F1A4838EEFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:41:39 +0000
ROA not before: Tue 28 Jul 2026 04:41:35 +0000
ROA not after: Fri 31 Dec 2049 04:41:35 +0000
asID: 3741
IP address blocks: 196.28.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2564 (0xa04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 04:41:35 2026 GMT
Not After : Dec 31 04:41:35 2049 GMT
Subject: CN=6a683303-b873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:5b:9a:88:83:a1:b9:42:34:bd:47:ef:87:
c9:22:57:e9:a0:79:5c:c4:8b:2e:e6:89:37:ea:5d:
a9:e6:b4:d3:2e:2e:4c:fc:84:ae:c9:34:a0:ed:2e:
7f:4b:93:eb:9f:37:b4:8b:83:6a:db:ed:df:81:9e:
d2:49:65:64:69:77:78:6c:52:f5:1b:20:ce:e6:eb:
6e:bb:42:fe:db:c4:f4:76:15:58:72:e2:f2:5f:c9:
4b:8a:4a:54:4b:d6:98:c7:b0:21:33:9e:f7:ac:17:
f4:25:28:fd:ae:bb:56:b0:47:63:3e:48:1f:c9:7f:
49:0c:6c:8e:68:29:13:0d:f6:75:d5:92:78:7f:0e:
13:9d:7b:09:5b:55:2e:26:cd:be:f9:f0:a8:82:a5:
9d:83:3a:79:a0:47:4e:b7:f6:31:00:ba:cd:8b:58:
e0:36:da:72:0f:3c:c9:a0:d1:45:bd:d4:83:41:cd:
3a:eb:72:cf:ce:34:dd:a7:c6:6c:d2:d0:6d:32:28:
7a:2c:30:b9:17:30:c9:2d:95:8b:c5:49:f8:bd:c1:
a0:fc:31:e0:fb:a3:da:90:9b:9e:ad:aa:e2:4f:15:
9b:e5:88:44:1b:8a:7b:b6:9a:23:39:ce:bf:f5:78:
6a:71:b2:4f:4e:16:5c:b7:3b:84:ab:44:df:24:47:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:1B:32:A2:FD:DB:66:31:1B:C4:8D:04:EA:42:E4:D4:85:24:A9
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9F5FD3268A3E11F1A4838EEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.28.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:48:35:2e:c0:41:57:fa:ba:84:1b:d0:3f:ea:68:af:90:3f:
d3:2a:72:fb:ce:31:4e:b3:f1:65:a8:23:c9:16:45:dc:a7:b3:
55:4e:ee:b3:a8:13:18:c1:ab:43:cb:93:aa:f1:97:88:88:00:
94:06:9b:99:bd:88:30:8f:ae:b3:c1:1a:d5:22:35:90:75:82:
bb:c4:10:d7:16:0c:4d:f7:aa:23:69:59:79:48:5c:52:08:9d:
6a:06:a6:db:07:e8:15:83:2e:c5:7a:6a:b0:5d:e3:18:1f:dd:
df:1e:87:56:df:91:40:2a:21:f9:81:3d:a0:6a:a3:78:f1:d2:
4d:14:a6:7b:f3:1b:c0:a7:21:14:97:f7:10:43:27:1a:1f:2e:
0d:9a:a7:b5:f7:fd:d3:6d:f5:f9:aa:e6:96:29:27:6a:28:8a:
d8:9b:c3:50:9f:b6:9c:f3:1c:bd:34:bf:e8:87:23:62:14:00:
b6:4c:86:79:b4:5c:00:4d:eb:dd:b1:89:7a:43:38:66:45:95:
f8:ea:49:34:f4:ea:a5:34:a8:f8:8a:54:8e:07:7b:5f:1c:37:
f9:2a:25:d1:e2:95:9a:73:3e:d1:d7:22:45:cf:b3:42:3d:34:
85:df:87:97:5c:57:03:9e:cc:ec:b4:d5:f8:b3:5a:41:93:63:
e5:51:bd:83
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yNjA3MjgwNDQxMzVaFw00OTEyMzEwNDQxMzVaMBgxFjAU
BgNVBAMTDTZhNjgzMzAzLWI4NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjyFuaiIOhuUI0vUfvh8kiV+mgeVzEiy7miTfqXanmtNMuLkz8hK7JNKDt
Ln9Lk+ufN7SLg2rb7d+BntJJZWRpd3hsUvUbIM7m6267Qv7bxPR2FVhy4vJfyUuK
SlRL1pjHsCEznvesF/QlKP2uu1awR2M+SB/Jf0kMbI5oKRMN9nXVknh/DhOdewlb
VS4mzb758KiCpZ2DOnmgR0639jEAus2LWOA22nIPPMmg0UW91INBzTrrcs/ONN2n
xmzS0G0yKHosMLkXMMktlYvFSfi9waD8MeD7o9qQm56tquJPFZvliEQbinu2miM5
zr/1eGpxsk9OFly3O4SrRN8kRxCjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsP8b
MqL922YxG8SNBOpC5NSFJKkwHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4LzlGNUZEMzI2OEEzRTExRjFBNDgzOEVFRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEHF8wDQYJKoZIhvcNAQEL
BQADggEBAApINS7AQVf6uoQb0D/qaK+QP9MqcvvOMU6z8WWoI8kWRdyns1VO7rOo
ExjBq0PLk6rxl4iIAJQGm5m9iDCPrrPBGtUiNZB1grvEENcWDE33qiNpWXlIXFII
nWoGptsH6BWDLsV6arBd4xgf3d8eh1bfkUAqIfmBPaBqo3jx0k0UpnvzG8CnIRSX
9xBDJxofLg2ap7X3/dNt9fmq5pYpJ2ooitibw1CftpzzHL00v+iHI2IUALZMhnm0
XABN692xiXpDOGZFlfjqSTT06qU0qPiKVI4He18cN/kqJdHilZpzPtHXIkXPs0I9
NIXfh5dcVwOezOy01fizWkGTY+VRvYM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:26 2026 by rpki-client