Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E5C7A3E6876611F198F3D815CF1D38B0.roa
File: E5C7A3E6876611F198F3D815CF1D38B0.roa (raw, json)
Hash identifier: 6gi8Ytctwdpbf0ub/OQOiHsbZNnuvwi5AmMiIw3HqgM=
Subject key identifier: E0:B4:0F:B1:E1:F0:F8:A2:1E:59:28:10:01:8B:1D:17:32:04:9A:D2
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 09C5
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E5C7A3E6876611F198F3D815CF1D38B0.roa
Signing time: Fri 24 Jul 2026 13:52:24 +0000
ROA not before: Fri 24 Jul 2026 13:52:19 +0000
ROA not after: Wed 31 Dec 2036 13:52:19 +0000
asID: 3741
IP address blocks: 196.1.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501 (0x9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 24 13:52:19 2026 GMT
Not After : Dec 31 13:52:19 2036 GMT
Subject: CN=6a636e18-42a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:c1:fe:2a:3a:14:a0:2a:19:4e:ff:1a:23:
cc:b0:68:b2:10:57:30:06:8a:19:ca:37:a9:b4:ea:
16:45:27:2d:1b:f0:51:e4:06:2c:f7:1b:f3:f1:48:
7b:ff:01:76:16:80:50:b7:eb:d0:d1:ed:8e:4f:d8:
7a:b3:85:25:8b:45:1f:10:ee:d9:32:0e:ff:ca:8e:
a8:8e:a0:fa:2f:25:7b:5b:62:62:f5:ea:65:a7:9d:
6e:b5:0b:ea:b3:2e:eb:ad:30:fd:2c:dd:23:be:32:
88:f2:f7:2a:48:7d:5b:5f:ed:d3:cb:20:d9:b7:6e:
93:ec:fa:86:88:9f:a9:5d:86:3f:1f:2f:46:49:24:
0f:ff:59:e8:d7:4f:51:27:50:2a:2e:cb:aa:94:90:
56:f7:e1:12:d7:36:e1:f9:ed:62:69:56:be:dc:a1:
d7:f6:7d:bf:4c:de:7c:9e:44:78:31:0e:9d:f3:39:
ec:cd:7f:ac:ec:f8:a9:8a:58:e4:c2:af:92:31:8d:
df:06:29:df:b5:e7:d5:4b:7a:65:dd:6e:06:2f:92:
c8:2a:9d:0b:d1:e1:97:50:f0:3a:47:1d:0f:6e:75:
54:0c:ed:50:ff:60:29:b4:a5:d1:d8:9f:9e:59:28:
1e:2c:a2:6d:0b:cb:b6:ff:6e:3a:c6:8a:47:1b:06:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:0F:B1:E1:F0:F8:A2:1E:59:28:10:01:8B:1D:17:32:04:9A:D2
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E5C7A3E6876611F198F3D815CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:0e:e3:b0:48:ab:0d:4d:52:cd:fe:f3:3c:75:dd:8c:4a:f8:
f2:d4:79:7c:eb:74:df:ad:c0:18:6e:5a:b2:31:d0:3a:e9:63:
a6:9e:42:0e:74:00:d6:de:11:30:c1:3f:5b:6e:7f:7d:08:1a:
c6:33:9f:10:ed:15:e1:bf:c7:59:a9:b9:44:5e:f6:e4:cc:69:
7c:4e:ec:0e:46:a6:65:57:2a:7f:ef:fa:6b:bb:5f:3c:f2:82:
34:6b:ef:ea:b1:59:bc:03:72:dd:b8:c2:62:21:f5:f0:d9:69:
d1:fa:2d:bd:83:42:f4:ea:ca:b9:75:29:30:7c:4b:fe:27:3f:
0f:35:2e:9d:4e:2e:81:9b:da:70:c3:8a:94:14:31:a1:b8:89:
4f:5a:94:4d:ab:42:a3:13:a2:c9:e6:54:e1:55:eb:5e:50:80:
57:6a:3e:b0:36:f3:28:83:57:02:7c:ee:c5:49:e5:b2:53:aa:
d6:01:42:ed:c0:a3:e5:00:46:aa:29:95:1b:8c:de:d0:06:58:
a3:3c:9e:8c:8c:d6:72:de:4d:ca:35:98:f5:7b:b4:b6:b2:ae:
0e:83:cb:99:3c:d7:ca:ab:e2:cb:a6:ac:cf:5a:18:60:3d:b9:
76:25:32:76:26:ca:00:a3:26:27:85:52:ca:ca:16:af:82:6f:
58:10:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:23 2026 by rpki-client