Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/CB35195C8A3911F1AB7C88CFCE1D38B0.roa
File: CB35195C8A3911F1AB7C88CFCE1D38B0.roa (raw, json)
Hash identifier: tw5dwF3AB9wgjdXeoUkNC9NJI2HrNjzVH+/nWTFJb/c=
Subject key identifier: D3:5A:C2:78:38:2A:C8:68:B8:59:8C:6E:E7:85:21:43:C5:55:D6:38
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09F2
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/CB35195C8A3911F1AB7C88CFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:07:05 +0000
ROA not before: Tue 28 Jul 2026 04:07:01 +0000
ROA not after: Fri 30 Sep 2033 04:07:01 +0000
asID: 3741
IP address blocks: 196.1.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2546 (0x9f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 04:07:01 2026 GMT
Not After : Sep 30 04:07:01 2033 GMT
Subject: CN=6a682ae9-e7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:3c:42:ed:b4:08:59:0b:dc:7e:8b:8e:85:
60:fb:36:de:cd:cd:91:e5:b2:29:93:d5:a5:69:93:
de:a8:3a:09:30:ad:cd:cf:d5:33:f8:ba:f1:27:19:
ce:69:52:4e:ea:c3:dc:4a:80:ac:bb:33:5d:e8:eb:
b8:2c:df:e0:68:ed:cf:a6:1a:e8:5e:43:4f:48:47:
aa:7e:37:2e:2f:a0:df:32:07:f4:d1:67:16:89:fe:
88:f7:4a:a5:5b:0e:84:28:e5:a6:52:7e:bd:85:cb:
05:e8:ca:3e:67:c7:78:de:d9:ec:f7:aa:da:39:f6:
c3:aa:63:bf:51:66:ff:84:e9:ad:ad:db:90:92:56:
d7:be:ca:88:c6:ee:c6:85:2e:97:9c:5c:88:4d:3c:
51:86:c9:0f:a3:8c:e2:b4:bc:25:40:c0:47:ca:71:
f0:ff:de:20:1b:12:96:b9:1b:54:fe:9e:cc:39:0c:
ab:24:eb:8e:5a:f7:84:15:c4:99:ff:07:2d:0e:77:
fd:ef:74:05:4f:6e:65:8f:5d:2e:96:bd:49:95:45:
db:9d:6c:2d:b4:ed:a4:80:a5:99:de:c3:8e:f9:c4:
9f:11:04:8d:eb:b6:0d:ed:9f:b6:d8:59:d8:a7:fe:
93:b6:a8:47:cf:7a:7f:7f:62:c8:2f:11:98:0c:b2:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5A:C2:78:38:2A:C8:68:B8:59:8C:6E:E7:85:21:43:C5:55:D6:38
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/CB35195C8A3911F1AB7C88CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.81.0/24
Signature Algorithm: sha256WithRSAEncryption
de:94:f6:de:ae:2c:a5:46:0d:e5:86:d8:bd:ef:ea:5b:f7:0b:
46:be:51:d0:05:0b:56:b0:47:59:6b:9d:91:bb:07:82:ab:4b:
5e:d1:3d:5b:d1:98:4e:8b:3d:1a:4f:61:d1:96:61:43:90:16:
a5:f0:05:3a:1d:f7:47:dc:f2:a3:05:a0:b0:fd:c7:cc:96:8c:
1d:c6:00:ef:5f:28:70:f2:7b:60:de:50:16:d3:94:8d:2f:21:
e9:d8:5a:fc:33:e7:75:85:98:64:de:76:9a:bd:ce:2e:12:c8:
97:4f:65:f2:b3:a6:08:4f:f0:2c:bc:2d:5a:ae:68:01:15:20:
ed:d6:0b:ef:2b:b9:15:c3:72:64:cd:ce:ca:e1:5b:5c:8c:52:
2d:f6:2a:eb:e0:5c:ff:f2:fa:cd:f8:38:04:ed:74:61:24:bf:
92:21:25:80:d4:be:40:6c:08:a3:2b:d0:d2:6f:1a:45:28:0c:
7a:96:ef:c5:06:f4:20:6d:bb:96:28:f9:40:d2:9a:8d:e0:a1:
c2:f7:d0:60:43:a2:42:9c:b5:a4:7a:eb:a1:53:73:3d:bb:29:
b8:04:e6:e7:69:41:8f:e2:8d:c5:19:5b:9b:39:13:33:3f:d5:
b3:31:be:0e:ed:c9:52:63:15:bc:18:5e:61:18:46:a0:9e:16:
a4:d7:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:23 2026 by rpki-client