Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/9727295C8A4D11F1AF7D2AD1CE1D38B0.roa
File: 9727295C8A4D11F1AF7D2AD1CE1D38B0.roa (raw, json)
Hash identifier: gnUznLVBJQoJLLODckjNn7stwWgqRcBoFzmwFmu5Uy8=
Subject key identifier: 19:DF:C0:D1:F0:AD:BA:E4:B8:A0:53:C8:84:16:49:41:3C:21:3C:CB
Certificate issuer: /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial: 05B8
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/9727295C8A4D11F1AF7D2AD1CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:28:48 +0000
ROA not before: Tue 28 Jul 2026 06:28:45 +0000
ROA not after: Wed 01 Sep 2049 06:28:45 +0000
asID: 0
IP address blocks: 196.60.94.0/24 maxlen: 24
2001:43f8:1680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1464 (0x5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Validity
Not Before: Jul 28 06:28:45 2026 GMT
Not After : Sep 1 06:28:45 2049 GMT
Subject: CN=6a684c20-484d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:e6:30:0e:23:94:92:88:9b:20:63:11:dc:
09:1d:98:85:c4:e1:cc:eb:c0:47:22:8e:07:64:4f:
60:b8:eb:e9:12:c9:9d:29:ca:15:df:3e:0b:b0:f8:
95:cc:96:e2:06:11:9b:68:e2:6d:ac:c6:e3:c5:ca:
ac:b6:07:27:09:b5:af:3b:9b:b6:55:57:73:d1:9b:
58:08:b2:ec:20:58:fd:68:5a:fe:e3:81:70:57:c0:
e8:c0:73:1d:7e:c0:f1:7d:e1:64:0e:54:2c:cc:55:
0e:e2:17:c1:82:ac:45:d2:4c:31:2c:31:4a:55:04:
33:ca:06:d8:65:f7:ef:8a:ee:ae:b4:bb:c0:84:e4:
37:00:c2:25:7b:fc:16:6c:7f:0c:ec:98:8d:a9:c4:
07:90:59:1c:b7:dd:ad:f4:f1:b2:86:d5:45:1c:4a:
67:76:82:8b:53:d8:62:6c:60:83:82:7a:01:12:14:
62:91:b0:7f:a0:19:8e:fd:00:dd:b3:5e:22:66:90:
19:72:15:e2:c1:86:72:b4:0c:10:60:60:b6:6f:5b:
12:14:96:b9:71:e8:34:ca:b9:a3:ce:3e:5f:fe:0b:
5f:8f:8a:c0:9e:9b:70:80:3a:3d:0f:50:7e:ec:f3:
81:00:53:24:60:cc:6d:c3:cb:a9:3c:43:d5:20:55:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DF:C0:D1:F0:AD:BA:E4:B8:A0:53:C8:84:16:49:41:3C:21:3C:CB
X509v3 Authority Key Identifier:
keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/9727295C8A4D11F1AF7D2AD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.94.0/24
IPv6:
2001:43f8:1680::/48
Signature Algorithm: sha256WithRSAEncryption
8d:e5:b2:6f:01:b9:21:5a:54:8e:97:ed:da:ab:42:a2:24:f3:
8a:bb:d9:a6:2d:0c:5a:41:8c:50:60:80:7f:6a:0e:08:01:4a:
13:5e:f5:f4:87:91:22:49:63:54:4f:58:7c:ca:97:1d:a7:15:
5b:f2:b4:06:7a:11:6e:0c:75:7f:b8:41:a5:27:f6:02:56:1f:
46:81:69:72:a3:af:a8:a9:17:a7:ff:9f:ca:e8:9a:80:d2:7b:
ef:ac:16:41:ff:9a:d0:02:56:5c:f1:f8:85:d1:41:8e:88:02:
11:09:4a:22:cd:34:35:1d:6e:63:67:19:eb:3d:14:e7:1c:b8:
a8:b6:c1:4a:ce:2e:7f:c6:50:98:ab:0b:72:88:04:48:91:9a:
d5:f0:08:f9:c3:6c:a3:eb:4c:f7:db:b9:c9:c1:d5:d2:65:8d:
86:72:78:cc:01:23:7f:c6:a5:80:0b:16:ea:d6:59:fd:65:43:
ae:bb:72:a9:f5:9d:45:d8:86:5a:c2:ad:61:65:52:4f:93:44:
55:67:df:1c:40:c2:c6:7e:3e:1a:d3:77:95:3c:79:f1:9b:3e:
9b:b6:4a:c8:5a:16:05:96:a7:98:f9:d4:2d:bc:7a:a6:0b:42:
75:e6:9b:1c:10:a8:e8:4d:92:14:d6:25:75:0f:ed:f4:da:db:
0d:75:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:53 2026 by rpki-client