Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A60140068A3011F18639B10ECF1D38B0.roa
File: A60140068A3011F18639B10ECF1D38B0.roa (raw, json)
Hash identifier: 2Y0zpe70ikIjXy3NB17TB9AMHxSgii27ThUaV+Iu43E=
Subject key identifier: 49:62:90:A7:9A:0F:0B:89:C7:16:B6:77:A0:48:EB:47:4C:78:E5:FE
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09DE
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A60140068A3011F18639B10ECF1D38B0.roa
Signing time: Tue 28 Jul 2026 03:01:38 +0000
ROA not before: Tue 28 Jul 2026 03:01:32 +0000
ROA not after: Sun 31 Jul 2033 03:01:32 +0000
asID: 20011
IP address blocks: 196.39.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2526 (0x9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 03:01:32 2026 GMT
Not After : Jul 31 03:01:32 2033 GMT
Subject: CN=6a681b91-cdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:61:bf:0a:ba:13:19:c4:2c:d2:24:f4:ad:
67:b1:c1:2f:81:b2:bb:29:a8:5f:67:ea:e9:7c:b5:
e6:62:b2:75:d5:61:ac:81:35:1f:ef:97:ad:c4:ee:
b2:5c:e4:57:08:9c:19:fd:c3:82:7d:04:e6:75:c2:
35:d2:51:47:05:f6:cc:b3:90:56:13:b1:2d:2a:36:
8e:48:c7:79:11:29:b8:1d:e1:d7:1d:0b:ea:71:9d:
4d:56:09:d3:de:d2:13:c2:4b:d2:97:f9:dc:f5:84:
ae:db:d4:67:81:f1:7e:cd:67:c3:c7:71:fb:70:18:
5d:02:6d:3d:43:4b:9f:17:bd:e4:91:2e:23:ea:34:
b5:2b:e2:9b:c5:e6:80:b3:30:c7:99:ee:e4:8d:fc:
30:4c:3a:a1:b5:79:90:7f:f4:32:04:32:7f:d2:b5:
9a:50:7a:dc:78:b0:70:82:a1:51:01:2d:f9:8e:1e:
48:c6:ee:e5:40:6a:94:bf:0e:b4:da:7e:60:2e:c4:
31:ab:cb:5a:6e:ac:77:f0:57:ea:93:28:44:56:79:
65:67:4a:e2:8e:49:74:b3:e7:db:45:c7:52:b8:d2:
8a:f5:17:8b:64:75:ac:f5:29:da:9c:96:3b:31:d6:
09:8e:1b:e1:0e:23:02:76:55:60:41:4b:a8:51:90:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:62:90:A7:9A:0F:0B:89:C7:16:B6:77:A0:48:EB:47:4C:78:E5:FE
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A60140068A3011F18639B10ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.39.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:fb:fc:d4:e1:08:b6:3d:b2:5e:4f:aa:1b:8e:97:3b:16:b6:
c2:f4:3e:ce:8a:f4:6b:fc:94:65:a5:9f:52:58:11:e9:be:9c:
b1:3e:f0:93:88:70:ec:3f:31:f9:5b:b8:33:f5:70:2b:03:1f:
9f:77:d6:bf:50:74:5b:34:4c:c3:7b:47:d8:fc:0c:60:14:84:
86:d4:de:2f:d3:78:5d:e6:97:42:cb:28:dc:f7:9e:bc:be:f1:
c1:c9:04:f4:91:23:2f:34:56:cf:a1:73:38:e5:bb:0f:17:09:
a2:f8:9d:85:f3:fa:29:5b:ea:34:5e:c2:a1:50:c7:3c:31:ab:
39:fb:61:f7:1c:94:63:1a:76:42:35:ad:41:af:1b:20:52:f4:
d7:7b:3e:45:09:fe:c5:65:66:89:5f:47:b9:e1:b5:9f:34:77:
c1:12:48:ec:ab:52:4d:a4:06:1b:b2:99:39:47:25:e1:05:6b:
19:ff:f9:32:53:29:ac:ec:97:fc:6b:67:56:25:3a:45:49:e4:
f1:74:77:99:56:f9:59:78:cc:d6:f3:5b:76:3a:a4:43:3d:15:
23:80:1a:53:ef:29:bf:fa:ea:f3:3a:eb:43:5a:b5:32:93:0d:
0f:58:55:62:a8:47:4f:2c:14:75:38:3e:f6:26:e1:9f:c5:ff:
27:e0:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:23 2026 by rpki-client