Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/B5DB8BEC8A3C11F19A42EFE1CE1D38B0.roa
File: B5DB8BEC8A3C11F19A42EFE1CE1D38B0.roa (raw, json)
Hash identifier: z78+549hEppyqwkXOe7FsiY2STgV6LJe+jLQYg4OynM=
Subject key identifier: 67:CB:03:F1:42:35:B6:BB:67:CF:E4:34:C5:B1:F3:1C:57:14:9F:5F
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09FC
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/B5DB8BEC8A3C11F19A42EFE1CE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:27:58 +0000
ROA not before: Tue 28 Jul 2026 04:27:53 +0000
ROA not after: Fri 30 Sep 2033 04:27:53 +0000
asID: 3741
IP address blocks: 196.1.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2556 (0x9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 04:27:53 2026 GMT
Not After : Sep 30 04:27:53 2033 GMT
Subject: CN=6a682fce-d2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:51:8c:09:63:fe:65:2b:06:dc:10:be:7f:
e8:62:88:93:81:14:a4:19:7b:d5:c9:91:14:76:95:
72:7e:c6:d3:52:2c:10:1a:e6:98:08:51:30:37:6a:
6e:ce:14:5e:07:ee:6a:9f:9b:c7:30:47:e1:65:6a:
a4:5e:45:e1:f3:4e:5c:65:f5:07:f6:1b:41:a9:72:
79:cd:33:9f:e9:ec:c3:f3:12:7a:68:f1:ca:19:a6:
0c:63:70:4f:02:7f:b5:ce:1f:6b:37:96:c7:d3:0a:
01:a1:c0:6b:54:ae:96:ef:34:df:0a:71:18:45:5f:
8b:3f:ba:23:9d:bf:a6:51:bd:2b:00:ba:d6:41:0e:
95:28:17:52:6a:5b:ba:34:5c:83:43:f4:4b:e8:bc:
67:cf:1d:01:1a:23:99:47:a4:8c:93:07:8d:17:37:
db:ee:38:e8:ce:66:fd:c0:85:37:b7:c1:45:7d:22:
a1:7c:37:d4:5b:45:21:e6:5b:8b:60:3d:ff:32:59:
14:32:fa:07:b1:87:2d:c4:4f:8c:54:d0:d4:ea:68:
34:54:9f:eb:3d:ad:76:7e:bb:7e:f8:c0:4d:e2:53:
d2:78:3b:4b:8f:18:06:f3:6c:f4:22:de:90:f9:ea:
57:ae:62:29:39:f6:9b:e4:a7:2d:4f:2b:77:2b:92:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:03:F1:42:35:B6:BB:67:CF:E4:34:C5:B1:F3:1C:57:14:9F:5F
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/B5DB8BEC8A3C11F19A42EFE1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.76.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:75:e1:ef:08:13:bb:ab:e9:d9:b7:ba:fd:27:44:f2:2b:b2:
97:87:39:3d:c7:4e:b8:e2:24:96:63:1e:69:38:61:02:e4:45:
1b:80:ca:7e:6c:b0:b7:9a:78:83:f5:2e:41:27:4a:57:f6:4d:
62:77:bc:90:39:bd:0b:10:28:f9:a9:a9:5c:59:39:3a:23:79:
a4:e1:d4:c3:1f:2a:83:ca:50:87:ea:6e:00:d4:3e:5a:ea:23:
84:42:84:44:3b:18:9b:f2:43:79:e2:c9:f9:4f:12:cf:a4:7c:
4e:d0:79:02:19:b4:eb:86:46:98:8f:e0:08:8c:e0:98:9e:36:
b3:1e:05:d3:25:ed:9d:34:d5:69:c0:3c:38:38:14:d1:1e:02:
98:83:26:5c:46:cf:c8:28:ba:e8:a6:27:fb:3d:44:88:9d:4c:
07:c8:fe:71:ca:16:62:56:11:bb:78:19:d9:f1:54:08:09:6c:
5b:f8:dd:f5:7b:8e:3a:a6:e0:9f:56:05:7f:0e:dc:90:54:a3:
53:20:27:17:46:2b:4b:65:eb:e4:8f:74:42:5c:03:29:9d:12:
1f:12:c0:38:79:49:e3:6d:50:3d:43:7a:0a:85:31:4a:8d:e3:
ce:fc:90:5a:19:00:1b:a8:c6:b1:46:0a:0e:bb:61:31:76:97:
3c:dd:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:25 2026 by rpki-client