Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/ED6720888A4D11F18B3C7BD3CE1D38B0.roa
File: ED6720888A4D11F18B3C7BD3CE1D38B0.roa (raw, json)
Hash identifier: fy03gYHL7JTAVtW+hjgr7RCIr18BTRSjeQ/qFlmp6EA=
Subject key identifier: 2B:BD:A7:70:D1:14:EA:4A:1B:6D:18:F0:81:AC:62:42:4C:68:CD:1D
Certificate issuer: /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial: 05BA
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/ED6720888A4D11F18B3C7BD3CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:31:13 +0000
ROA not before: Tue 28 Jul 2026 06:31:09 +0000
ROA not after: Wed 01 Sep 2049 06:31:09 +0000
asID: 329105
IP address blocks: 196.49.88.0/24 maxlen: 24
2001:43f8:1681::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 06:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1466 (0x5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Validity
Not Before: Jul 28 06:31:09 2026 GMT
Not After : Sep 1 06:31:09 2049 GMT
Subject: CN=6a684cb1-09a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:92:f1:4b:12:bf:b2:0a:1d:91:a2:50:82:
d9:b7:ea:78:2e:82:58:9e:99:48:30:19:d7:9f:76:
73:5d:e3:b6:ea:40:d0:04:b2:e5:0f:3a:9f:75:05:
a3:ac:de:90:17:a0:58:80:d3:82:bd:8f:83:dc:51:
a5:76:6a:77:df:b3:02:17:d8:3c:1f:24:98:a0:ae:
7c:15:91:5a:10:03:b8:06:2a:44:1b:9c:59:7c:87:
59:a7:66:47:76:b0:9d:f7:04:14:e6:5b:61:51:0a:
76:6c:c3:5d:da:a9:cd:a3:87:f3:f2:0d:91:bc:d2:
35:7a:35:21:2d:fc:fb:f8:84:e1:c4:39:3e:55:16:
1b:ba:e6:e5:ef:57:b8:3d:02:f3:fa:40:70:b1:c4:
10:5d:74:5a:02:db:02:46:b9:97:ed:22:df:56:be:
2a:fe:fc:a9:d0:ec:ff:bf:2b:c3:7f:fd:92:56:ee:
d0:92:be:44:9f:25:21:34:0e:73:0f:46:06:a1:ee:
b2:e7:3b:55:5b:6a:66:6e:5d:6d:70:ea:8b:5c:83:
1b:6b:ce:e2:73:b7:bd:6e:37:c5:2a:8e:b6:11:b3:
89:8b:cf:5d:bf:10:3c:d2:e7:ac:4e:b9:d1:f9:ff:
fa:d8:2c:4e:d8:a9:7d:75:ed:69:51:86:35:95:17:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:A7:70:D1:14:EA:4A:1B:6D:18:F0:81:AC:62:42:4C:68:CD:1D
X509v3 Authority Key Identifier:
keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/ED6720888A4D11F18B3C7BD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.88.0/24
IPv6:
2001:43f8:1681::/48
Signature Algorithm: sha256WithRSAEncryption
28:55:00:55:0f:3a:25:c0:72:93:18:67:42:21:f0:bb:23:4f:
3f:11:08:9f:6c:4f:c9:67:83:31:3f:74:2f:67:f2:14:40:be:
0f:6a:31:04:df:26:a4:d5:7f:0b:82:88:ab:d5:9b:08:d8:13:
60:45:1a:22:05:0d:00:78:d4:2c:97:47:6a:f2:37:7c:19:c6:
c3:62:7b:51:74:dd:4f:0e:1c:e3:73:ac:a4:1b:56:c3:0a:96:
da:6a:ff:26:42:51:bd:bc:29:7f:a6:52:98:45:74:51:6c:b1:
b0:69:6f:33:c1:a1:e2:e9:db:cc:61:67:6e:49:c9:d8:ac:b8:
74:05:ab:82:13:0a:32:53:df:8d:31:36:1a:c5:df:0a:a7:ed:
5c:8e:a7:02:7a:0b:d1:39:4f:62:01:9c:ad:e7:8b:fd:0a:91:
e7:49:10:f8:6e:12:dc:10:ff:c0:a2:1c:fd:7c:51:5a:45:b3:
68:6b:68:5c:f0:fb:80:04:ff:2d:ce:e5:d4:1c:21:45:c2:1a:
bb:df:bc:d9:15:43:49:0f:c6:b2:f5:42:71:07:b0:e4:d3:8f:
63:62:1d:b0:f4:44:5e:30:97:03:50:f5:2b:31:eb:be:8d:13:
83:cf:14:67:14:c1:1c:69:3b:9e:3a:a8:10:1b:95:aa:7d:f8:
85:9c:2e:b2
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBbowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM2MzJBRjExMC8GA1UEBRMoNUY2QjM0MTIxNjYyM0Q4NUE3NEYyQ0U4QTVFMjlC
NUVFQUNGQTI1MzAeFw0yNjA3MjgwNjMxMDlaFw00OTA5MDEwNjMxMDlaMBgxFjAU
BgNVBAMTDTZhNjg0Y2IxLTA5YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgIpLxSxK/sgodkaJQgtm36ngugliemUgwGdefdnNd47bqQNAEsuUPOp91
BaOs3pAXoFiA04K9j4PcUaV2anffswIX2DwfJJigrnwVkVoQA7gGKkQbnFl8h1mn
Zkd2sJ33BBTmW2FRCnZsw13aqc2jh/PyDZG80jV6NSEt/Pv4hOHEOT5VFhu65uXv
V7g9AvP6QHCxxBBddFoC2wJGuZftIt9Wvir+/KnQ7P+/K8N//ZJW7tCSvkSfJSE0
DnMPRgah7rLnO1VbamZuXW1w6otcgxtrzuJzt71uN8UqjrYRs4mLz12/EDzS56xO
udH5//rYLE7YqX117WlRhjWVF6I1AgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUK72n
cNEU6kobbRjwgaxiQkxozR0wHwYDVR0jBBgwFoAUX2s0EhZiPYWnTyzopeKbXurP
olMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNjMyLzM2NEM0RkY4MkU5NTExRURBNjU5QkI3REYxMjIyNDY4L1gyczBF
aFppUFlXblR5em9wZUtiWHVyUG9sTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1gyczBFaFppUFlXblR5em9wZUtiWHVyUG9sTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlDNjMyLzM2NEM0RkY4MkU5NTExRURBNjU5QkI3REYx
MjIyNDY4L0VENjcyMDg4OEE0RDExRjE4QjNDN0JEM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADEMVgwDwQCAAIwCQMHACAB
Q/gWgTANBgkqhkiG9w0BAQsFAAOCAQEAKFUAVQ86JcBykxhnQiHwuyNPPxEIn2xP
yWeDMT90L2fyFEC+D2oxBN8mpNV/C4KIq9WbCNgTYEUaIgUNAHjULJdHavI3fBnG
w2J7UXTdTw4c43OspBtWwwqW2mr/JkJRvbwpf6ZSmEV0UWyxsGlvM8Gh4unbzGFn
bknJ2Ky4dAWrghMKMlPfjTE2GsXfCqftXI6nAnoL0TlPYgGcreeL/QqR50kQ+G4S
3BD/wKIc/XxRWkWzaGtoXPD7gAT/Lc7l1BwhRcIau9+82RVDSQ/GsvVCcQew5NOP
Y2IdsPREXjCXA1D1KzHrvo0Tg88UZxTBHGk7njqoEBuVqn34hZwusg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:16:21 2026 by rpki-client