Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/D380DA288A9411F1976AF7FBCE1D38B0.roa
File: D380DA288A9411F1976AF7FBCE1D38B0.roa (raw, json)
Hash identifier: uTjYz9/X9gCbOTJlU7RYAGsETCEB37t1llBGHImuB9g=
Subject key identifier: C0:6C:B9:59:78:9D:E0:C2:15:17:68:FB:21:E3:F9:10:98:2A:27:EF
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 055F
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/D380DA288A9411F1976AF7FBCE1D38B0.roa
Signing time: Tue 28 Jul 2026 14:58:44 +0000
ROA not before: Tue 28 Jul 2026 14:58:40 +0000
ROA not after: Fri 01 Mar 2030 14:58:40 +0000
asID: 33763
IP address blocks: 197.234.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1375 (0x55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Jul 28 14:58:40 2026 GMT
Not After : Mar 1 14:58:40 2030 GMT
Subject: CN=6a68c3a3-11c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:a4:7b:35:43:b4:24:aa:37:b5:f0:8a:66:
93:42:a3:21:35:3e:9b:00:ef:64:4b:8d:f3:94:77:
e9:12:25:97:e3:d1:dc:c9:96:e6:f7:56:9c:b6:2e:
35:fb:f1:7a:d6:53:99:01:b1:e4:a0:49:b8:f3:69:
a6:c4:af:8a:fc:22:4c:35:40:75:c0:8a:e0:a2:cc:
7f:4d:2d:35:29:ed:fe:ce:62:56:75:77:72:83:99:
47:3d:d7:9c:ac:8a:bf:65:15:f0:bf:72:ec:d9:38:
0c:5a:5b:e6:c1:8e:81:d0:91:c1:0a:31:a7:9d:49:
b2:93:03:8b:62:96:af:48:31:d0:b2:2a:6d:cb:a4:
2b:66:fa:65:32:ac:96:34:90:86:2f:c3:db:68:38:
35:ce:95:a9:21:84:73:61:ab:92:3c:0a:62:5a:f0:
64:ff:6c:45:a6:e8:6c:48:42:9f:7c:23:5c:40:68:
d6:b4:d5:d9:af:f3:51:02:8c:81:0f:ea:05:45:2d:
6b:db:b4:38:47:71:d2:cf:ce:b3:f4:16:57:7e:1d:
69:0c:eb:5e:f4:05:dc:73:cc:9a:eb:bd:6a:07:f9:
3c:c3:ed:db:19:03:3c:fb:36:98:c0:27:6a:b5:0f:
08:8e:d5:c0:6a:4d:65:b7:d1:69:04:24:68:1d:a5:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:B9:59:78:9D:E0:C2:15:17:68:FB:21:E3:F9:10:98:2A:27:EF
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/D380DA288A9411F1976AF7FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.64.0/20
Signature Algorithm: sha256WithRSAEncryption
89:2d:02:f0:f5:27:d9:12:70:e1:d7:f6:95:18:9e:9c:43:b6:
4d:1b:dd:8a:93:7a:9d:4f:fd:be:84:35:41:52:34:f5:50:a0:
c4:47:14:6f:8b:d0:a2:7f:fa:ba:77:1f:d3:09:e0:73:89:d5:
d9:59:15:8d:bd:c4:24:5a:fc:ae:b1:b1:a2:38:ad:71:b5:b4:
39:45:aa:3a:64:10:de:e1:ba:76:3d:8b:24:a8:5e:12:3f:43:
3a:bc:2d:7d:66:ff:f3:34:5b:97:c6:c9:61:23:4d:d6:67:cd:
b0:f7:e8:58:36:21:65:d4:56:b2:a5:e3:42:ac:1e:01:aa:30:
75:de:cb:b1:af:b7:ad:dd:65:58:ac:bd:99:7c:d9:53:ed:84:
33:17:9a:77:29:97:51:f1:eb:60:28:f4:ad:33:22:64:d4:9d:
41:b3:d0:16:8a:f9:80:fd:66:67:6f:89:d0:6f:aa:8e:34:03:
7f:16:72:64:f8:10:25:ae:f5:f8:7a:22:a7:4e:7b:5d:3f:51:
9b:91:fe:d0:fd:9d:d0:25:a3:6c:e1:9d:c0:55:91:21:ca:93:
89:7b:47:f9:c3:aa:7c:d4:14:53:57:ef:43:99:74:1b:91:30:
6b:2d:06:0a:5b:6f:77:b2:9c:4a:00:c6:f8:a7:dc:57:5f:0f:
13:89:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:19 2026 by rpki-client