Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/235841308A4F11F18D3580DBCE1D38B0.roa
File: 235841308A4F11F18D3580DBCE1D38B0.roa (raw, json)
Hash identifier: 6xKGVfk7UGI0E4XQMdLh3B8fcITtYs2m7LJMHPvMuYs=
Subject key identifier: 45:F7:97:40:ED:DE:98:48:A6:EB:25:89:33:68:87:2E:80:68:B9:84
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0989
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/235841308A4F11F18D3580DBCE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:39:53 +0000
ROA not before: Tue 28 Jul 2026 06:39:49 +0000
ROA not after: Fri 31 Jul 2043 06:39:49 +0000
asID: 198949
IP address blocks: 196.201.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 06:39:49 2026 GMT
Not After : Jul 31 06:39:49 2043 GMT
Subject: CN=6a684eb9-ed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:c1:56:ff:d0:17:cc:b1:29:83:ed:5c:bb:
e0:c0:ba:62:2c:89:3b:31:c7:da:27:9a:90:07:40:
74:22:16:8d:5a:d5:ca:3a:2c:10:97:10:7e:f0:aa:
5b:35:d7:9f:56:e4:56:53:8a:a0:f1:55:66:4b:3c:
df:df:c9:fe:05:45:f4:1a:73:aa:dc:99:20:ba:ac:
5a:f6:85:09:b9:d2:5f:45:c4:7c:36:0d:49:3f:68:
13:87:cd:2e:fa:a2:29:02:ba:4d:18:8e:79:c2:47:
68:e3:a7:f6:be:e7:1e:b6:03:d7:87:49:61:cb:10:
55:0d:6e:e2:22:9b:53:2c:df:86:c9:b5:d2:9b:77:
00:80:f6:3b:df:80:a0:76:59:52:ac:fa:21:6c:94:
94:79:e6:aa:fb:06:f5:fd:28:da:7f:03:f2:05:2a:
cf:3a:9e:3c:15:67:32:37:18:2a:35:42:de:94:af:
26:ab:89:d3:cc:49:9c:a5:f3:6a:af:99:fa:5c:39:
58:7b:8c:a8:4c:e4:19:9b:6c:74:49:35:25:96:ad:
fd:69:10:d5:1c:82:0b:0b:8f:95:66:22:65:29:87:
b9:5b:45:83:98:f7:79:41:70:a1:12:b6:ea:c7:4e:
61:fd:46:b3:a5:a4:51:02:8c:22:9f:b7:f3:f0:68:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F7:97:40:ED:DE:98:48:A6:EB:25:89:33:68:87:2E:80:68:B9:84
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/235841308A4F11F18D3580DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.201.208.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:84:0f:b1:d5:dc:90:b0:23:16:fa:5e:53:f4:7f:79:33:e5:
9d:45:e0:3b:3e:a7:ab:a5:32:7e:6d:c5:8d:c0:c4:45:19:4a:
0f:f9:76:61:26:9e:7e:c2:22:47:bd:ab:2f:f8:2f:c7:92:06:
a2:f7:03:6c:30:cc:d6:a1:17:ac:90:b1:b1:ac:7f:20:e1:0a:
11:70:39:08:fc:30:a3:7c:3b:e1:a1:df:e7:c0:fa:c4:3b:fe:
04:66:11:64:33:b1:85:09:cc:80:ae:0d:44:03:82:48:1d:95:
7f:f4:86:f7:b2:f5:8d:eb:cc:65:17:b3:c8:01:d0:ae:a2:d5:
1e:6e:c1:ee:72:e0:23:09:a7:02:2c:2f:f3:51:73:1f:37:d5:
3a:76:6a:06:64:b3:32:d5:6f:cf:f4:ed:98:4e:3e:9c:3d:a4:
37:cd:6a:14:ab:51:9c:a1:e6:b2:d1:1b:fa:cc:41:b1:e1:04:
7d:a3:db:72:9d:a0:8b:bc:f8:3a:20:74:b4:af:5c:9c:b0:4a:
df:34:81:01:40:d2:f6:3d:1b:ea:96:26:a5:a4:47:c4:ef:a8:
5e:7d:c2:3f:e3:12:2f:81:c0:4f:da:dd:06:49:3d:a3:a7:1a:
ef:e5:d9:ec:b4:d7:68:f7:1e:f6:ef:20:28:79:41:b9:00:d1:
74:d0:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:16 2026 by rpki-client