Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/136264948A4111F1AAD3B7FFCE1D38B0.roa
File: 136264948A4111F1AAD3B7FFCE1D38B0.roa (raw, json)
Hash identifier: l9tPXd5PIw8Caba0foe8eNLmSzVDNfZcXDHlsYOrIgs=
Subject key identifier: 9E:46:FB:53:E8:68:11:16:44:D9:D8:4E:19:DC:17:F2:01:4B:EF:CB
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0963
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/136264948A4111F1AAD3B7FFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 04:59:13 +0000
ROA not before: Tue 28 Jul 2026 04:59:09 +0000
ROA not after: Wed 31 Dec 2031 04:59:09 +0000
asID: 19905
IP address blocks: 196.201.208.0/20 maxlen: 24
2c0f:fe38::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 04:59:09 2026 GMT
Not After : Dec 31 04:59:09 2031 GMT
Subject: CN=6a683721-8626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6a:4c:35:d6:45:1e:f1:64:d2:bd:02:7c:4f:
55:3c:c4:0d:27:31:7a:ae:c0:34:f6:37:30:21:5d:
26:2a:e1:eb:da:9d:77:b8:3f:fc:44:cd:be:11:ce:
87:47:60:c7:37:dc:26:a9:b2:ca:8c:dd:0a:cb:c1:
d1:ff:09:17:e7:14:97:99:5a:40:2b:f0:f7:15:03:
36:ef:cb:d0:9f:43:27:b5:99:a5:aa:c5:46:85:3e:
e7:59:3a:da:2e:55:7e:c5:ce:4b:9c:01:5e:99:b6:
08:02:d1:03:59:24:34:80:9a:0c:fd:57:2d:be:8c:
15:45:56:cf:42:2b:8c:87:a9:9a:7c:1f:22:d2:e0:
70:83:d1:a3:f5:00:35:20:ed:df:34:7a:b8:50:3f:
99:22:80:ff:ae:d3:98:98:ab:18:1f:d7:84:b4:1e:
49:5f:43:f4:d1:de:00:17:38:50:aa:84:a3:7a:05:
73:5b:9e:d8:55:a5:fd:aa:1c:ec:7e:b4:a4:44:f4:
87:af:38:09:c3:bb:ad:c0:29:75:b7:2a:2e:a5:5c:
0f:2b:90:48:e6:78:06:cd:24:39:93:b4:6a:65:0d:
01:8e:a0:8e:31:7d:26:5b:09:75:00:14:84:9a:d5:
0e:88:39:7c:9c:d0:a2:2d:13:d5:99:51:b9:e6:6e:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:46:FB:53:E8:68:11:16:44:D9:D8:4E:19:DC:17:F2:01:4B:EF:CB
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/136264948A4111F1AAD3B7FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.201.208.0/20
IPv6:
2c0f:fe38::/32
Signature Algorithm: sha256WithRSAEncryption
1a:24:5d:0d:77:fd:30:5f:98:55:fc:f4:83:fa:a7:1e:f7:ae:
b2:82:ff:db:09:9f:be:34:d9:23:6e:4c:28:43:5d:bf:d8:d4:
60:35:d9:8f:65:28:75:38:2a:e9:23:78:09:95:13:24:24:72:
9e:11:94:15:90:db:9d:4f:0a:77:be:e0:de:e3:72:a0:21:13:
24:30:26:08:30:3a:85:d1:07:42:db:a1:ff:8e:ce:f3:44:3d:
2c:43:3f:04:d2:a7:f0:b1:ab:dd:1f:c5:1d:8b:9e:03:7a:66:
5d:b5:dd:30:6a:c1:4c:6d:26:0c:76:b7:cc:c7:7f:4b:2e:a2:
30:84:05:d5:35:e3:ef:be:0f:1e:c4:d7:7a:c9:d4:99:9e:d5:
e2:02:fb:d2:2c:e1:06:e8:2a:5e:6b:9b:05:98:13:bc:0f:f7:
64:e6:23:9a:03:ae:1b:fe:fa:a0:02:f5:26:75:58:02:a1:6b:
09:35:6b:97:2f:b7:18:a3:f4:85:a0:be:49:b1:78:0f:e8:42:
57:f1:e4:f8:3a:35:af:79:92:a4:4f:d5:37:29:79:54:3b:df:
e8:ed:53:a1:1c:1a:d1:f6:30:01:6a:b9:46:dd:c8:ff:ce:ac:
ea:69:05:d6:38:cf:d3:ce:75:24:60:53:6c:fc:52:b9:10:d5:
2b:b0:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:55 2026 by rpki-client