Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/C30FE1AA8A4111F18F845804CF1D38B0.roa
File: C30FE1AA8A4111F18F845804CF1D38B0.roa (raw, json)
Hash identifier: 0w2pBxJGHrWLLP5IlGjUNIzw0pKRBe3sWcp7KEVqGbU=
Subject key identifier: 01:58:76:38:F0:52:F5:D6:D7:51:E8:03:01:E8:68:80:3C:35:B3:1E
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0967
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/C30FE1AA8A4111F18F845804CF1D38B0.roa
Signing time: Tue 28 Jul 2026 05:04:08 +0000
ROA not before: Tue 28 Jul 2026 05:04:04 +0000
ROA not after: Wed 31 Dec 2031 05:04:04 +0000
asID: 19905
IP address blocks: 196.96.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407 (0x967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:04:04 2026 GMT
Not After : Dec 31 05:04:04 2031 GMT
Subject: CN=6a683848-7456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:b3:9c:b9:74:d1:ec:e5:af:d7:71:71:a0:
7c:a6:82:10:e9:fe:bb:f0:8b:5c:ab:3d:3b:ff:f4:
a4:99:fa:ad:99:c0:8c:b4:ac:35:61:ff:fc:8c:09:
c1:36:14:66:e2:0a:58:59:d7:8d:c6:d1:bf:e0:fc:
39:15:1c:e1:06:3a:17:36:3b:70:fe:38:55:5b:20:
b3:70:1c:4a:77:1e:bf:53:04:f4:83:d2:7e:27:b2:
08:92:ac:4e:8d:08:62:0b:cf:e0:ec:08:53:8c:4b:
bc:88:72:fa:bd:0c:f1:96:42:5f:86:a3:96:1a:d3:
42:1d:9f:a7:c5:5f:99:5b:96:3f:33:67:c7:c4:b1:
c1:79:06:a1:ee:36:6b:16:09:2f:65:25:94:99:18:
85:a3:58:94:4a:51:20:f5:01:e5:65:e5:d4:87:11:
7f:ff:01:dc:39:a0:36:75:95:8b:b9:11:19:e1:ff:
dd:fc:24:23:4d:c1:59:7c:71:cb:c8:c1:41:8e:5a:
02:8b:70:58:dd:51:58:30:d8:4a:58:a5:27:41:20:
83:ce:72:7e:b1:bd:d8:33:21:4c:62:36:15:ca:a5:
d6:64:a2:06:3e:be:35:b9:e8:ae:b6:fa:8e:92:9e:
bc:9f:fb:1e:f6:34:bd:d3:1a:6b:62:41:5b:4b:57:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:58:76:38:F0:52:F5:D6:D7:51:E8:03:01:E8:68:80:3C:35:B3:1E
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/C30FE1AA8A4111F18F845804CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.96.0.0/12
Signature Algorithm: sha256WithRSAEncryption
26:f9:62:43:88:59:ce:5c:e7:5b:9d:b5:7a:8c:46:b8:a5:f4:
ba:70:12:b2:27:5c:8a:7c:d2:aa:d9:ea:14:b8:f1:d1:ad:23:
8d:9b:e6:69:da:e0:83:b5:dc:ca:fb:f3:7b:de:78:59:06:b4:
6b:94:86:48:af:24:7e:40:cf:56:bd:35:d7:5b:4e:cc:10:e1:
a1:50:73:3f:96:2d:de:2b:c3:4f:62:34:4f:cc:86:67:86:e7:
f5:bf:2b:68:96:c9:7b:5c:a5:dd:15:be:c2:8d:22:53:fa:ab:
b8:3e:e6:3e:e2:91:7a:75:25:96:f6:a9:ce:f7:ad:d8:96:35:
1b:70:fc:b7:f9:3e:b2:2e:4d:c2:54:1b:a4:9e:a4:25:cf:8d:
4f:93:26:09:6f:bc:fd:fc:3a:ca:70:55:55:13:a4:e6:ce:bc:
de:d2:d0:52:22:e3:2f:61:09:13:a7:0d:27:16:80:d8:fc:50:
c2:f9:f6:61:0b:f8:8f:0b:a0:b4:e1:8e:0b:7e:f0:6f:b9:b7:
a8:bd:49:3c:ae:c8:8f:b8:11:ad:ca:c3:f2:2f:c8:d6:e9:e6:
28:6a:e0:7f:71:21:cf:ee:35:e3:b3:04:3b:c7:ad:55:ee:6c:
15:ca:9d:0b:24:60:3a:cb:01:c0:3f:4a:49:db:ba:0f:99:09:
49:46:fc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:36 2026 by rpki-client