Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/B0ED4524876911F19D08F8A7CE1D38B0.roa
File: B0ED4524876911F19D08F8A7CE1D38B0.roa (raw, json)
Hash identifier: Z+3FYCQ/8xFjHawozWaAtYADdIVBW5NMbV5nN+NYl0o=
Subject key identifier: 17:9F:C8:4F:F9:2E:06:43:39:50:38:B1:8F:9D:8D:65:7C:04:7F:AD
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09CD
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/B0ED4524876911F19D08F8A7CE1D38B0.roa
Signing time: Fri 24 Jul 2026 14:12:24 +0000
ROA not before: Fri 24 Jul 2026 14:12:19 +0000
ROA not after: Wed 31 Dec 2036 14:12:19 +0000
asID: 3741
IP address blocks: 196.1.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2509 (0x9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 14:12:19 2026 GMT
Not After : Dec 31 14:12:19 2036 GMT
Subject: CN=6a6372c8-14ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:d9:c2:e7:1e:5b:c7:8c:69:1b:64:f0:4c:
8d:04:8a:fe:1f:c4:99:0e:fc:f0:4b:79:01:d5:85:
06:07:31:b2:71:42:b6:4b:74:bb:1b:51:b3:7f:8a:
4c:78:56:d5:d5:9d:9f:5a:1a:a1:ef:03:70:a7:80:
16:98:b6:d6:04:fa:ec:ee:00:1d:5a:cd:bd:93:65:
97:dc:68:51:45:53:1f:11:ce:dd:4f:c4:91:81:97:
7c:b0:70:1f:87:7f:93:ed:29:54:9a:c6:db:bd:21:
8b:f7:d2:00:c9:4e:85:12:69:24:29:4a:bb:23:52:
2b:75:8c:85:06:c9:b3:6c:af:bc:02:0e:f4:fa:ca:
e7:47:eb:f3:97:60:6a:8d:ef:2b:45:b4:ba:bf:cc:
e3:8f:73:ad:7d:f3:99:23:ab:80:38:9d:8d:55:bb:
94:4f:3b:7b:2e:76:ea:25:d2:9b:29:c0:86:29:e3:
af:85:2a:3c:da:9b:ab:0c:d6:ff:ea:27:d2:ae:96:
ed:7c:f7:cc:4b:26:ce:a8:92:df:42:8a:31:1d:78:
fc:b6:b2:44:0d:87:6f:80:25:8b:46:23:b4:2f:55:
06:ad:89:4f:14:c1:28:8a:76:f9:08:e5:59:86:aa:
96:6c:40:70:f2:75:ed:37:51:1c:7e:d8:27:86:11:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9F:C8:4F:F9:2E:06:43:39:50:38:B1:8F:9D:8D:65:7C:04:7F:AD
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/B0ED4524876911F19D08F8A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.76.0/22
Signature Algorithm: sha256WithRSAEncryption
53:54:14:d7:c5:9e:ba:e1:6d:97:38:e5:64:e4:a6:06:37:3c:
61:65:cc:e0:05:95:fd:bf:73:c1:e9:70:02:98:db:d6:44:b7:
a4:e1:3e:06:b7:bd:2a:6b:96:af:6d:b1:52:0f:12:16:e0:24:
23:f9:f1:e9:49:fa:cb:dd:45:0a:b0:f0:3c:ed:6c:a7:0f:92:
b6:d4:b8:f4:fc:11:64:fe:79:83:a6:10:d3:58:0b:9c:18:47:
55:83:6f:79:00:6c:b4:80:7a:d4:1d:85:b8:d8:d3:cd:e8:30:
e0:1e:41:09:18:ea:8d:35:18:94:63:9c:69:dc:34:d3:a1:01:
e1:5a:5e:e2:22:83:d0:75:5c:ee:03:1b:95:21:48:43:35:11:
92:82:a0:55:a4:20:c9:2e:5c:b4:32:fc:77:ae:d9:a3:a1:18:
d1:f9:e4:31:68:03:d3:07:47:d5:e5:cf:ea:55:39:1a:51:8b:
54:a8:3c:72:ba:fa:45:5e:cd:10:a8:08:73:76:fa:a3:bb:59:
4f:f2:0c:2c:aa:c8:bb:8d:c3:df:cb:e4:2b:1b:b8:e8:9f:ab:
3b:33:b6:65:80:92:81:fc:02:81:4f:c6:6f:f7:a8:d9:1e:db:
f6:c6:20:af:d2:e4:e3:c6:cf:dc:0a:40:41:a3:05:88:01:32:
52:e7:72:51
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yNjA3MjQxNDEyMTlaFw0zNjEyMzExNDEyMTlaMBgxFjAU
BgNVBAMTDTZhNjM3MmM4LTE0Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5JNnC5x5bx4xpG2TwTI0Eiv4fxJkO/PBLeQHVhQYHMbJxQrZLdLsbUbN/
ikx4VtXVnZ9aGqHvA3CngBaYttYE+uzuAB1azb2TZZfcaFFFUx8Rzt1PxJGBl3yw
cB+Hf5PtKVSaxtu9IYv30gDJToUSaSQpSrsjUit1jIUGybNsr7wCDvT6yudH6/OX
YGqN7ytFtLq/zOOPc61985kjq4A4nY1Vu5RPO3suduol0pspwIYp46+FKjzam6sM
1v/qJ9Kulu1898xLJs6okt9CijEdePy2skQNh2+AJYtGI7QvVQatiU8UwSiKdvkI
5VmGqpZsQHDyde03URx+2CeGEZdnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUF5/I
T/kuBkM5UDixj52NZXwEf60wHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4L0IwRUQ0NTI0ODc2OTExRjE5RDA4RjhBN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALEAUwwDQYJKoZIhvcNAQEL
BQADggEBAFNUFNfFnrrhbZc45WTkpgY3PGFlzOAFlf2/c8HpcAKY29ZEt6ThPga3
vSprlq9tsVIPEhbgJCP58elJ+svdRQqw8DztbKcPkrbUuPT8EWT+eYOmENNYC5wY
R1WDb3kAbLSAetQdhbjY083oMOAeQQkY6o01GJRjnGncNNOhAeFaXuIig9B1XO4D
G5UhSEM1EZKCoFWkIMkuXLQy/Heu2aOhGNH55DFoA9MHR9Xlz+pVORpRi1SoPHK6
+kVezRCoCHN2+qO7WU/yDCyqyLuNw9/L5CsbuOifqzsztmWAkoH8AoFPxm/3qNke
2/bGIK/S5OPGz9wKQEGjBYgBMlLnclE=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:25 2026 by rpki-client