Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/6A3D42E489B911F1BE2734BFCE1D38B0.roa
File: 6A3D42E489B911F1BE2734BFCE1D38B0.roa (raw, json)
Hash identifier: xFggCMOp+wX+72NPjHT5Q9DwGoQjc5rzY3XRbug6TNk=
Subject key identifier: 22:7C:B8:EB:90:85:4A:2E:94:41:EA:46:74:98:AB:C5:A1:49:6B:83
Certificate issuer: /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial: 0A7C
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/6A3D42E489B911F1BE2734BFCE1D38B0.roa
Signing time: Mon 27 Jul 2026 12:48:07 +0000
ROA not before: Mon 27 Jul 2026 12:48:03 +0000
ROA not after: Wed 31 Dec 2036 12:48:03 +0000
asID: 20473
IP address blocks: 197.231.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 01:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684 (0xa7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Validity
Not Before: Jul 27 12:48:03 2026 GMT
Not After : Dec 31 12:48:03 2036 GMT
Subject: CN=6a675387-5684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:bb:26:89:ce:82:9e:21:72:67:5a:a6:14:
5b:72:ef:ff:c4:8e:0d:e4:38:e5:03:15:2b:88:6c:
07:81:f6:0c:10:96:5f:95:9a:2d:9f:c6:07:42:ba:
47:b6:34:cf:9e:78:37:6c:54:94:30:4e:dc:b9:d7:
7b:8a:b2:22:a2:9b:6f:8a:16:3e:1f:c4:50:97:a6:
d4:4a:99:33:83:02:60:23:1a:d0:fd:5a:88:fc:c9:
57:36:33:5c:bb:d8:be:4f:3a:2f:81:ce:9d:5d:fa:
05:ba:8c:1c:8c:a0:75:89:64:ea:ed:a3:2a:65:de:
c0:ee:38:b2:64:17:e2:5a:b7:26:a0:36:f0:96:62:
60:92:54:7b:da:e8:d5:ca:bb:c6:12:a0:9e:09:82:
cf:ea:0b:1a:00:e5:e2:28:5f:16:7d:92:c7:29:69:
3a:0c:62:a1:2b:c8:6f:10:0a:07:5d:e6:e9:eb:8c:
2f:6e:c5:e8:6d:20:d3:8d:b1:96:20:1f:78:55:a4:
1f:dc:a4:6c:8b:5d:04:f5:6d:90:7e:26:0d:7a:50:
e5:d0:4b:57:ad:49:87:0e:b0:4b:b8:ba:3b:ec:14:
04:66:aa:99:f9:18:62:86:9e:55:b1:53:86:53:3b:
d5:af:ab:8a:37:0a:49:93:e1:17:32:cb:3f:f1:e2:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7C:B8:EB:90:85:4A:2E:94:41:EA:46:74:98:AB:C5:A1:49:6B:83
X509v3 Authority Key Identifier:
keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/6A3D42E489B911F1BE2734BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.231.233.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b8:88:22:0f:42:47:25:27:e1:24:c6:5a:85:d9:32:69:df:
34:50:1a:8c:44:c6:f1:a4:63:e9:cc:48:24:ce:d9:7c:3c:b0:
80:e6:25:b2:ed:a9:51:0a:b0:21:c5:89:b6:c9:36:8e:a8:68:
6e:e5:23:ca:d9:6b:28:fa:55:3f:cd:0c:92:9c:0d:f5:b0:f7:
a9:dc:4a:a6:22:bb:29:ab:bc:01:72:3d:3c:2f:29:aa:4a:bf:
7e:b7:9e:d5:d8:f3:1d:ea:23:77:53:1d:8f:68:fb:13:c5:20:
32:39:f9:ef:36:de:aa:85:c5:c5:58:7b:d0:c0:65:ec:60:81:
47:6b:aa:f2:76:ae:19:2c:90:9d:c5:25:d8:88:b0:7c:7f:43:
61:fb:48:2e:1c:d1:67:44:df:51:71:2c:86:23:65:bf:fc:ca:
38:dc:0c:88:a2:89:e5:f6:d6:81:31:5f:4c:d2:92:6b:c7:6f:
e5:0e:5b:a3:35:ce:a8:1c:f3:46:30:94:bb:65:a5:4d:b5:3e:
81:de:97:09:c6:2e:25:24:14:76:7c:19:12:eb:2b:02:d9:d0:
5c:56:60:e0:23:83:53:a5:e5:88:1a:49:05:db:af:41:37:25:
a9:93:04:ea:f6:39:16:42:dd:df:51:52:d1:1e:5c:5b:6b:d4:
1e:47:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:07:59 2026 by rpki-client