Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/D83034E68A3B11F1B32134DDCE1D38B0.roa
File: D83034E68A3B11F1B32134DDCE1D38B0.roa (raw, json)
Hash identifier: Yjnk6K4Rmk+daboX3UoA/bpEAwzUN3u22arcfXaVcXM=
Subject key identifier: 3E:78:D6:96:EA:B4:3D:32:68:78:0B:19:AC:26:9A:19:7D:79:B7:BE
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09F8
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/D83034E68A3B11F1B32134DDCE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:21:46 +0000
ROA not before: Tue 28 Jul 2026 04:21:42 +0000
ROA not after: Fri 30 Sep 2033 04:21:42 +0000
asID: 20011
IP address blocks: 196.210.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2552 (0x9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 04:21:42 2026 GMT
Not After : Sep 30 04:21:42 2033 GMT
Subject: CN=6a682e5a-9414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4f:ba:6f:78:ea:68:ae:71:5e:6a:14:af:8f:
3c:9a:d0:56:c4:fe:12:68:1a:e4:f9:48:ab:bb:26:
be:c4:05:79:6f:41:f1:4c:41:19:5d:92:25:e6:ef:
f5:3c:f0:a9:4b:e0:08:40:52:bb:06:eb:c6:b4:20:
bd:67:13:4f:10:46:3c:49:3a:96:09:ca:72:b5:c6:
31:33:57:e4:e2:9e:61:18:e3:fe:ea:9b:7d:96:1a:
9f:a0:42:79:38:8e:0e:ef:53:87:88:9c:8d:ab:50:
5d:e0:bd:79:25:71:db:a0:cd:74:36:16:d0:df:98:
c1:b9:5c:5b:8e:c1:43:68:69:e1:9c:1e:e5:40:75:
4c:32:92:82:b5:ad:5f:aa:70:a9:f9:4c:55:d0:64:
e1:fe:ae:80:ef:97:99:f6:16:33:86:6c:7a:63:1f:
77:71:86:b4:09:eb:62:b3:aa:54:64:76:b2:c7:3c:
d9:8d:de:0d:4d:96:71:1a:c5:f6:2b:d6:bc:92:45:
73:2c:f4:fd:a8:46:80:d3:7d:8d:ef:48:b3:67:2a:
d9:98:f6:e4:94:da:5a:15:f7:82:14:0a:d8:4e:cd:
65:1c:46:30:6e:4b:3b:97:c5:fa:1c:bb:eb:1f:81:
5a:22:23:9e:04:b4:c3:64:f1:bc:94:68:72:c2:40:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:D6:96:EA:B4:3D:32:68:78:0B:19:AC:26:9A:19:7D:79:B7:BE
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/D83034E68A3B11F1B32134DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:c7:ec:43:40:d7:bb:47:25:9b:0b:f2:65:bb:f4:50:56:4b:
cc:cf:98:16:ad:3e:14:b0:e8:96:b6:72:e2:c3:25:31:94:f7:
6c:89:79:64:4e:58:47:5c:aa:e1:3f:39:c3:34:97:5d:1e:15:
80:95:f9:f2:8d:eb:8a:1e:4f:6f:7c:8d:42:3d:70:d6:d5:3e:
86:4b:64:0e:09:33:a5:6c:19:e5:e9:a6:39:a5:6d:20:63:d0:
3f:1c:df:b3:09:34:97:66:72:c3:e6:49:85:a6:76:fe:5c:b1:
48:9f:56:f2:63:27:12:e0:ca:93:2f:c3:75:6e:7f:ce:bc:15:
05:78:0c:01:9a:3b:91:da:cc:76:ac:62:b4:90:bf:ff:b9:6f:
2b:e2:8a:0f:91:a3:3a:09:0e:12:94:64:b6:61:af:75:02:ac:
bf:44:b0:12:c6:8e:b0:c1:36:b5:e6:0a:27:e8:ba:0f:24:5a:
10:36:c7:f9:ea:23:e5:2c:df:e0:95:3a:43:47:35:9e:33:be:
62:00:8f:ad:7f:2d:df:c6:11:81:4e:a5:04:25:dd:fa:4d:7f:
0e:a0:16:00:1f:dd:a8:b1:d9:2d:b9:80:47:e7:9c:b2:1b:3b:
95:fa:36:72:b8:15:71:9e:67:e4:88:9a:ad:04:1f:d5:3c:45:
2e:b9:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:24 2026 by rpki-client