Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E6BA1F0C8A3D11F186C8F1EACE1D38B0.roa
File: E6BA1F0C8A3D11F186C8F1EACE1D38B0.roa (raw, json)
Hash identifier: DTLzHiI09ngAzX6y53l34UnCQCOsqyy3KaIBCN0Ujhc=
Subject key identifier: 7B:A3:09:AB:89:E3:C5:F8:68:D6:01:FD:E4:A4:66:97:57:BD:E5:CC
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0A02
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E6BA1F0C8A3D11F186C8F1EACE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:36:30 +0000
ROA not before: Tue 28 Jul 2026 04:36:25 +0000
ROA not after: Sat 31 Dec 2033 04:36:25 +0000
asID: 3741
IP address blocks: 197.80.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2562 (0xa02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 28 04:36:25 2026 GMT
Not After : Dec 31 04:36:25 2033 GMT
Subject: CN=6a6831ce-41b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:d8:8f:1a:fb:6b:3f:b2:24:10:8d:c8:4c:
76:46:83:16:9f:44:26:b2:3b:74:b5:f0:c2:c0:14:
eb:4e:0b:38:19:a9:ad:bf:3a:32:c3:e4:95:32:94:
35:b9:60:1c:c3:8e:25:2e:96:d8:6b:80:b5:0b:1a:
53:81:76:c6:26:57:fc:47:74:cf:dd:8d:65:34:72:
b1:50:6a:ee:f0:af:3e:d8:53:8e:5d:31:d7:13:ea:
86:6f:7d:04:88:47:4b:49:93:a6:19:fa:c5:c1:43:
dc:c7:bb:a9:7e:1c:b3:99:f5:19:1f:29:e6:e9:fd:
d6:58:42:db:50:e9:ef:b5:4e:eb:89:0e:67:86:ea:
eb:7c:22:88:24:5d:f6:a3:ca:f0:dc:ae:f1:43:c0:
3f:98:f8:0e:36:1d:8e:9d:31:ee:ad:4b:5d:37:c1:
e1:cc:4b:af:1c:8a:91:0b:57:73:17:65:c2:c1:4e:
35:f1:80:ec:e7:c2:f4:58:22:95:a9:63:f2:29:f5:
c1:96:e7:52:31:50:f0:c9:36:14:bf:80:67:dc:27:
7c:40:da:53:39:42:40:fa:61:85:53:c4:d8:95:c3:
d6:2b:54:35:b2:d5:7c:93:c8:1b:0e:62:65:66:24:
bc:7d:ba:48:b1:58:66:a3:c2:99:d1:72:e6:8d:24:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A3:09:AB:89:E3:C5:F8:68:D6:01:FD:E4:A4:66:97:57:BD:E5:CC
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E6BA1F0C8A3D11F186C8F1EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.80.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:68:43:92:c5:8b:d8:53:01:fc:ec:12:fd:b3:ef:76:5b:6e:
3d:94:c0:99:21:7c:eb:49:04:17:d9:36:33:2f:b5:ae:98:0b:
70:59:c4:6f:f2:cf:65:de:b2:3f:98:db:47:bd:a3:8c:a1:7e:
a1:0c:73:7f:b2:64:dc:18:16:2d:6a:62:3b:c0:4e:2d:4a:b5:
8b:7f:31:9a:3f:1d:fe:cb:83:ca:fe:99:ca:45:07:a5:88:66:
30:58:47:90:f8:fe:37:64:52:61:53:54:64:14:80:50:79:98:
6a:2c:8d:51:c0:a2:12:fd:b8:05:bc:9b:fe:07:b9:ce:0b:95:
94:20:f7:df:99:f9:fc:3d:ee:9a:fc:c0:a4:c9:25:68:ab:fe:
bf:81:15:94:25:2f:d4:c1:34:6e:dc:95:cb:27:cd:56:99:e5:
11:aa:bd:f2:9c:69:e6:31:b4:76:8a:cb:96:2c:86:df:82:58:
2a:83:db:9b:27:9f:19:90:41:d8:72:ee:d4:a4:6a:64:aa:b8:
4e:b6:e6:ba:9a:9e:fd:2c:ad:a7:e9:17:8c:02:40:a7:34:70:
fa:72:57:cb:1b:eb:ec:e2:4c:ff:39:c4:b3:eb:8a:5d:f0:06:
d7:66:3d:28:1b:83:57:c8:bc:1f:eb:4a:84:96:83:d6:28:c4:
f9:f2:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:26 2026 by rpki-client