Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DCE331A2876411F1B6029408CF1D38B0.roa
File: DCE331A2876411F1B6029408CF1D38B0.roa (raw, json)
Hash identifier: 9DPTE05mwNLRGtleD524Hboh66q3LIlpxzUyqbM0Hvw=
Subject key identifier: 19:8C:2E:20:66:75:78:A1:77:CE:72:08:A6:84:C8:FA:4E:91:08:80
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09BF
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DCE331A2876411F1B6029408CF1D38B0.roa
Signing time: Fri 24 Jul 2026 13:37:50 +0000
ROA not before: Fri 24 Jul 2026 13:37:45 +0000
ROA not after: Wed 31 Dec 2036 13:37:45 +0000
asID: 20011
IP address blocks: 2001:4308::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2495 (0x9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 13:37:45 2026 GMT
Not After : Dec 31 13:37:45 2036 GMT
Subject: CN=6a636aae-ee44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:6f:09:69:20:eb:e3:88:a0:00:c7:fc:8b:
a7:df:57:1f:37:42:ba:57:a6:df:09:52:cf:8b:2b:
df:52:82:d9:08:b5:20:fe:ed:6a:a2:67:c4:e4:c0:
14:12:5b:8c:1a:4d:87:28:3e:1b:2c:5f:46:e9:a4:
c5:46:8a:10:b6:90:1b:21:9e:d2:fd:fe:d4:55:dc:
64:e4:75:53:f8:2c:72:d9:3d:99:8d:da:0f:51:87:
6c:cf:4f:c5:94:f3:d7:bf:ba:c9:97:c3:3d:8c:33:
52:e9:48:22:52:61:89:e6:23:9f:0e:84:cd:6f:ec:
10:59:96:db:0b:65:37:e6:a7:28:08:db:f5:44:e7:
53:d7:03:93:76:84:19:4d:c1:0a:96:fa:2a:94:89:
b0:42:78:3f:b3:d5:4b:ea:5d:1a:a9:24:e2:9f:55:
f7:e8:2a:6b:a9:1b:1b:14:52:b0:b8:ce:e6:a9:5c:
84:c6:d8:4c:d3:52:a4:5b:7b:2b:08:7b:c8:73:e5:
46:d5:e8:c6:c7:98:90:49:49:43:da:91:d5:41:e5:
37:94:0c:b3:6c:4b:0f:b7:5b:a6:71:e8:23:e1:fa:
e2:5f:91:b4:40:5f:48:75:60:40:ce:d7:93:33:db:
9a:39:72:3a:96:28:51:a9:b1:e3:fb:ac:52:32:9c:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:2E:20:66:75:78:A1:77:CE:72:08:A6:84:C8:FA:4E:91:08:80
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/DCE331A2876411F1B6029408CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4308::/32
Signature Algorithm: sha256WithRSAEncryption
af:6e:64:77:22:89:c6:81:8a:0d:89:d6:c0:ab:46:52:e4:98:
3f:90:81:b2:23:a5:93:b9:2a:bb:4a:2d:0d:4e:d4:28:8a:6e:
e4:8b:8f:0d:68:84:86:8e:aa:fc:f8:c0:a6:da:2f:88:58:87:
94:95:53:46:54:82:b3:98:21:50:b4:98:00:04:ca:b8:c9:13:
61:e7:75:9f:37:61:52:d3:b6:fc:f9:b8:a7:97:fe:a8:5d:de:
3c:25:4f:0c:6c:a8:d7:16:d3:f5:b9:9c:b3:6a:c7:da:95:9a:
73:3f:1b:c5:43:d4:78:77:05:7f:53:1b:a0:ca:d3:72:8b:34:
30:57:0e:38:1b:e9:11:37:2a:7f:96:74:df:f5:8c:60:2e:6d:
1a:20:d8:20:a9:3a:92:81:79:93:43:81:cc:39:da:e2:37:ea:
22:26:2b:f0:44:a7:ed:3a:98:08:59:d9:ec:01:c6:78:82:c0:
f2:2e:e0:c5:85:b0:b5:84:b2:bf:72:b9:22:ef:5d:a5:de:a9:
60:dd:f9:0c:69:01:7c:03:df:c9:28:9a:eb:2d:3c:9e:80:a1:
c6:b8:86:12:c5:cd:8b:68:85:41:2f:6a:ab:b2:d5:c5:59:ce:
66:b9:ae:4f:46:41:ef:24:f0:2e:79:1e:b3:35:11:80:be:b9:
10:e1:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:25 2026 by rpki-client