Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/C4DECBDE8A4311F19F345010CF1D38B0.roa
File: C4DECBDE8A4311F19F345010CF1D38B0.roa (raw, json)
Hash identifier: 9qzrv0z0up9hG0YxeA3JsDrQkz673sG89pHN/ZEXEqI=
Subject key identifier: 93:03:A7:C3:A3:16:0D:3C:92:49:28:F6:BF:FD:CB:17:03:F8:EB:F8
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 0973
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/C4DECBDE8A4311F19F345010CF1D38B0.roa
Signing time: Tue 28 Jul 2026 05:18:30 +0000
ROA not before: Tue 28 Jul 2026 05:18:26 +0000
ROA not after: Wed 31 Dec 2031 05:18:26 +0000
asID: 19905
IP address blocks: 197.248.0.0/16 maxlen: 24
2001:43d0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419 (0x973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 28 05:18:26 2026 GMT
Not After : Dec 31 05:18:26 2031 GMT
Subject: CN=6a683ba6-81b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:ce:b1:3e:86:26:2a:dd:62:2d:d6:13:1d:
47:99:ee:2d:6b:48:73:d9:bf:d3:3e:2b:fb:b8:14:
e0:fb:fb:5b:a9:0f:5a:73:e3:dc:24:0e:89:0a:00:
e2:94:32:71:60:cd:4c:b8:8e:52:a0:76:58:0c:72:
e6:da:c5:e4:58:cd:06:fd:ba:70:2c:50:79:93:9d:
46:5b:da:c2:6f:cc:c1:86:b6:c6:db:ce:80:ff:4f:
05:1d:f9:c4:85:9a:7f:a1:7e:ac:d9:91:eb:a4:11:
ef:f5:04:68:60:4d:ab:db:61:da:fa:4e:13:43:47:
14:3c:ec:c9:22:4a:c9:95:1a:e1:e6:77:13:7b:6c:
c8:72:71:8b:32:62:93:0c:96:8b:87:60:a3:02:97:
ef:a0:b2:6c:ce:86:81:cf:24:bc:84:4d:ae:e4:67:
e2:91:70:f6:69:82:25:c6:c5:b5:5e:17:c2:dd:45:
77:d6:76:da:72:4e:92:21:32:01:d6:c2:54:0b:f0:
77:6d:46:b1:52:c4:75:e8:4a:a0:40:7d:10:f9:a2:
bf:c3:d6:a6:ea:10:97:50:2e:9d:32:07:80:6a:8e:
04:df:b1:d6:96:52:15:c6:15:f1:10:89:0d:7f:5b:
db:5f:d3:32:a1:9e:b1:9c:d6:f6:e5:07:a6:c6:65:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:A7:C3:A3:16:0D:3C:92:49:28:F6:BF:FD:CB:17:03:F8:EB:F8
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/C4DECBDE8A4311F19F345010CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.248.0.0/16
IPv6:
2001:43d0::/32
Signature Algorithm: sha256WithRSAEncryption
c7:1c:a9:6c:bf:7a:56:d3:c5:bd:ce:82:0d:af:5a:48:36:e1:
47:2d:67:81:7f:8d:93:d1:6a:a3:39:be:2e:a3:ae:b3:c2:90:
2c:49:36:f6:36:b6:74:14:f0:7c:ab:ca:f0:a6:5b:9f:e2:25:
af:e7:80:e2:60:09:c8:eb:a2:d8:02:02:94:e7:3e:09:2f:ad:
d5:5f:37:f5:5f:eb:21:12:c0:1f:6c:ef:92:52:77:87:91:ce:
a9:cb:d3:41:a9:94:8b:9e:44:93:30:b2:03:55:9e:21:fd:01:
03:91:7b:7e:56:a0:4e:20:21:67:95:91:c8:60:ba:af:95:ee:
3b:d2:e3:95:79:7f:45:d9:14:bb:cd:b1:fc:89:d8:af:0a:c2:
13:db:29:b5:84:77:52:f7:2e:a9:e2:e4:bc:35:8c:56:ed:80:
46:68:36:89:ef:95:3c:a1:f0:17:50:7b:6c:e2:34:03:77:cd:
55:50:f8:16:27:b5:0c:74:11:7a:69:13:3a:ef:da:e6:7d:d9:
cb:95:ce:1d:2b:1d:ca:a7:01:89:23:2d:36:6f:0b:87:e1:6d:
64:f7:c4:26:da:67:7b:b8:26:cb:9e:a1:d9:d6:30:70:cc:4d:
68:03:cd:73:04:a5:d9:1e:62:f2:b4:4e:b3:b9:df:16:6c:32:
08:a4:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:48 2026 by rpki-client