Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/794365BC8A4411F1AD15F715CF1D38B0.roa
File: 794365BC8A4411F1AD15F715CF1D38B0.roa (raw, json)
Hash identifier: EaXFvV0nbSRI+dWTnMCUBVPvSZbxEdHX8aL+blDZ2ds=
Subject key identifier: 22:03:39:F6:AE:CA:FB:A8:77:F6:8B:0F:91:DA:B4:9E:77:9C:04:3E
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0977
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/794365BC8A4411F1AD15F715CF1D38B0.roa
Signing time: Tue 28 Jul 2026 05:23:32 +0000
ROA not before: Tue 28 Jul 2026 05:23:28 +0000
ROA not after: Fri 31 Jul 2043 05:23:28 +0000
asID: 198949
IP address blocks: 196.96.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:23:28 2026 GMT
Not After : Jul 31 05:23:28 2043 GMT
Subject: CN=6a683cd4-f834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:9a:2a:af:41:e4:7a:bc:b2:bc:50:6b:9a:
df:da:db:31:ea:46:66:7a:0c:be:b1:11:2b:11:3e:
1b:81:4c:ee:74:38:6b:96:f6:1d:43:32:83:4a:11:
7d:ce:09:f2:b0:56:fd:29:e8:0b:fe:6c:f1:82:36:
ab:ac:55:52:0a:96:4e:9c:cc:b0:0c:21:f8:b9:d8:
d9:f9:61:81:be:1d:d8:ec:cc:58:87:42:c8:90:73:
6c:09:d9:f8:f2:82:ee:5f:ca:6d:33:c2:0a:2f:40:
ca:76:c0:ec:46:db:77:44:c6:e0:15:db:f2:1e:44:
cc:18:81:71:17:af:91:ac:3f:b8:85:f6:9f:44:f8:
b1:77:85:6e:5a:6c:bd:43:a8:90:6a:57:02:b2:d4:
8e:a4:25:71:32:01:45:84:a6:27:84:5d:12:93:05:
2b:d7:8b:ab:1e:82:79:93:ae:a9:3e:3d:05:5a:74:
d1:bf:e1:9a:c7:c4:ff:53:97:13:0b:38:7e:e5:12:
59:cc:93:68:71:be:89:82:71:cf:96:dd:cc:e8:3e:
9f:75:da:cd:34:17:b0:51:e6:b2:3f:d8:5f:7a:4f:
d6:a0:4a:e8:88:54:00:b3:8f:f3:44:3d:ae:08:d6:
44:68:a0:91:44:b9:6c:ba:ba:b6:00:91:de:11:fd:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:03:39:F6:AE:CA:FB:A8:77:F6:8B:0F:91:DA:B4:9E:77:9C:04:3E
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/794365BC8A4411F1AD15F715CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.96.0.0/12
Signature Algorithm: sha256WithRSAEncryption
35:29:0b:fd:2b:44:e7:43:af:81:a8:6d:db:03:15:ad:d1:41:
27:94:49:ac:a8:be:41:9c:80:95:d4:92:bd:f7:bb:bb:c6:65:
09:40:16:fa:69:4c:8d:07:e2:0a:2c:89:ba:b5:26:98:95:db:
a1:30:05:3f:1a:f9:ca:cb:7b:35:c9:bf:88:fa:05:97:07:9c:
da:9e:69:5f:f0:dd:f7:11:66:8e:73:78:06:5b:dc:1d:bc:92:
e4:bb:cb:c2:00:17:ba:12:57:2d:7a:aa:3b:cd:2e:b2:6e:ac:
22:3c:0a:ae:ff:fd:f5:9d:ed:a8:fa:45:f5:ff:e9:60:a1:f6:
22:72:20:2e:28:55:0c:33:3e:f8:c2:0a:7d:d3:8c:09:65:58:
ab:16:ff:d2:0c:8d:0d:21:84:0d:3e:d1:c4:64:5e:07:80:3d:
90:d6:38:c5:7c:cc:11:1c:e3:af:b9:96:e1:61:ee:00:74:12:
21:48:ea:52:9c:9d:79:01:84:10:c0:88:51:8c:c7:1a:75:8f:
57:35:b2:05:73:c3:aa:71:94:73:3c:dc:bf:33:78:f0:0a:3e:
64:89:a2:64:cc:44:1c:8e:c9:66:a7:3f:2e:8b:49:46:69:44:
83:f1:94:aa:2a:d0:f8:c4:53:75:eb:bf:85:9c:9c:2d:9b:19:
00:2c:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:07:05 2026 by rpki-client