Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/2CB9DC088A9411F19A99A4F9CE1D38B0.roa
File: 2CB9DC088A9411F19A99A4F9CE1D38B0.roa (raw, json)
Hash identifier: oaKBGoRMDwTNiV9HPdcfvbUfbqccc1dM936/D4gdD4k=
Subject key identifier: BE:9B:D8:72:D8:E2:D7:68:24:FC:00:84:75:A4:DF:51:16:2C:14:31
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 055D
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/2CB9DC088A9411F19A99A4F9CE1D38B0.roa
Signing time: Tue 28 Jul 2026 14:54:04 +0000
ROA not before: Tue 28 Jul 2026 14:54:00 +0000
ROA not after: Fri 01 Mar 2030 14:54:00 +0000
asID: 33763
IP address blocks: 197.234.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Jul 28 14:54:00 2026 GMT
Not After : Mar 1 14:54:00 2030 GMT
Subject: CN=6a68c28c-e7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:2c:f0:be:46:d9:0c:ca:ba:a7:b1:b5:fa:
86:4b:c4:0d:5d:5a:42:79:2a:d1:bf:55:21:38:f5:
34:eb:cc:59:1b:3f:1f:e4:2f:ba:f7:0f:6b:9a:db:
30:15:4d:50:15:b8:c8:80:08:b8:44:4b:54:2c:7c:
58:08:2f:30:aa:a6:64:5f:a0:f5:ae:5f:f4:87:f2:
48:67:f7:f2:4f:2f:29:09:a6:d6:40:49:b5:9c:c6:
ef:23:5d:2e:c5:11:4c:e1:a3:50:92:dc:22:27:a8:
d0:b6:8a:f3:20:c6:cc:30:7c:d4:c4:0f:56:96:91:
48:fa:32:e0:41:7c:8b:2a:3d:8f:a6:92:64:9d:fb:
d3:7c:b9:4b:9e:55:59:b6:b1:d3:60:a6:a6:ff:29:
53:3f:f8:8e:17:f2:ef:6e:99:de:4e:2d:cb:57:39:
5a:f2:b4:fb:9e:e0:b5:e0:e2:5c:d3:ea:03:95:a6:
24:08:b5:ef:83:d5:32:26:46:1d:00:60:dc:aa:78:
85:b1:10:bd:9b:2d:83:13:81:ae:1d:1b:d0:c0:8c:
b5:e0:80:b9:63:0e:1b:5c:fd:b2:03:02:5e:c9:79:
62:8f:cd:4a:57:b6:42:20:66:43:1a:e3:73:01:18:
90:15:cb:11:96:b4:70:fa:20:c7:3f:94:f8:83:0a:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:D8:72:D8:E2:D7:68:24:FC:00:84:75:A4:DF:51:16:2C:14:31
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/2CB9DC088A9411F19A99A4F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.112.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:c1:45:a8:a5:c3:55:13:e3:a2:91:e8:25:b9:04:7c:06:5e:
4a:cd:fb:d9:c9:cb:77:2f:0e:7c:ff:8a:2e:11:3d:58:75:ff:
00:c6:60:fb:8e:c2:b9:69:eb:a1:9a:62:f7:9d:8d:57:d0:21:
f3:fe:f6:54:b5:86:cd:b3:e4:73:be:9e:46:1e:65:97:52:6a:
b7:91:1e:0c:b0:57:4d:af:7d:91:85:46:ae:ef:11:3c:83:4a:
30:fd:07:5c:77:fd:22:f4:88:56:74:16:e4:ad:15:3f:55:ef:
9a:b2:cc:bd:6b:52:df:d9:9f:0f:50:ef:86:48:f0:e9:c7:b0:
6c:8a:96:4d:c9:91:92:21:08:c5:8d:be:fe:fd:de:70:b5:d9:
d1:a8:58:e9:66:8b:36:c3:9c:29:58:ad:8a:95:1b:a8:0c:3a:
4f:0a:1a:a1:06:15:f8:53:ad:8d:b5:bd:e7:ea:f6:e5:93:34:
f8:f9:34:6b:5c:dd:e9:53:6f:89:b0:07:ab:12:2d:cd:2d:07:
f8:54:e8:d3:06:1e:13:ff:a4:87:63:b7:fd:cb:67:52:af:f6:
a5:18:9b:36:7a:c3:46:a0:e8:32:4e:ce:83:85:e9:2c:9b:75:
d6:f7:e5:13:70:cf:61:af:48:c8:0a:1d:6e:ec:65:fa:a8:3b:
6b:35:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:07 2026 by rpki-client