Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/375BCD788A6811F1BF7143F0CE1D38B0.roa
File: 375BCD788A6811F1BF7143F0CE1D38B0.roa (raw, json)
Hash identifier: oVUo+t/et85fqSTTr6zsQae5fnGPc7bNZZM1y/Lf9V0=
Subject key identifier: 69:C6:C1:A2:10:AA:BA:2C:6F:96:3C:AC:B6:B8:E8:F4:B7:30:9B:BC
Certificate issuer: /CN=F36C7A1BAF/serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
Certificate serial: 051D
Authority key identifier: 21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/375BCD788A6811F1BF7143F0CE1D38B0.roa
Signing time: Tue 28 Jul 2026 09:39:24 +0000
ROA not before: Tue 28 Jul 2026 09:39:20 +0000
ROA not after: Wed 01 Dec 2049 09:39:20 +0000
asID: 329158
IP address blocks: 196.49.92.0/24 maxlen: 24
2001:43f8:16a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C7A1BAF, serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
Validity
Not Before: Jul 28 09:39:20 2026 GMT
Not After : Dec 1 09:39:20 2049 GMT
Subject: CN=6a6878cc-0367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:76:27:88:c6:e3:81:14:13:6d:28:db:0a:
db:5f:7a:c0:6c:3a:f1:d3:81:6a:f2:74:1c:f3:f7:
18:d7:fd:82:85:04:bd:57:83:1a:9d:ab:96:87:6e:
8f:c4:77:e7:e7:02:33:c8:c6:d1:73:19:ae:56:de:
f2:11:1b:95:fb:8b:5f:36:b9:31:1a:26:d0:d4:af:
eb:4d:5b:79:05:2e:c3:cb:6c:05:e9:07:74:83:00:
be:fd:6d:76:c4:27:7e:d0:c6:cc:a9:1f:98:86:ed:
8b:5b:02:3f:ff:ac:a3:fe:3e:55:74:ac:e7:a2:ad:
cd:13:16:00:6d:6e:86:0b:64:6d:71:a7:bc:2b:90:
ff:16:8e:ee:bd:19:2c:6e:fe:de:76:cf:f9:b7:3c:
37:a3:eb:c5:af:94:10:6a:0a:fb:2b:7b:80:73:67:
82:d4:fb:6a:15:b0:e2:d9:9f:53:53:68:68:40:7b:
44:22:0b:53:db:f7:7f:4d:b0:43:3c:1e:9c:84:39:
15:41:e1:4a:77:e9:64:7d:40:c6:29:95:23:3e:ea:
f6:6a:d8:45:94:48:23:22:9a:e3:9d:98:c9:82:05:
88:3b:71:05:52:b2:6e:6c:e6:84:da:da:aa:df:2d:
d9:02:d3:40:23:6d:e2:5c:fc:4e:73:2c:16:ce:6c:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:C1:A2:10:AA:BA:2C:6F:96:3C:AC:B6:B8:E8:F4:B7:30:9B:BC
X509v3 Authority Key Identifier:
keyid:21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/375BCD788A6811F1BF7143F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.92.0/24
IPv6:
2001:43f8:16a1::/48
Signature Algorithm: sha256WithRSAEncryption
36:10:99:28:b4:79:87:de:8c:19:f1:bf:bb:25:44:23:b4:c7:
0d:92:ff:4c:86:9a:e2:b6:0e:83:26:44:fa:fb:a9:a3:17:94:
8b:af:b7:da:ad:86:e4:62:b8:5f:d5:33:aa:b7:29:86:cb:17:
4f:83:54:a4:1d:2c:5f:5f:76:c2:98:0a:5d:8d:a5:bd:89:6c:
e4:e6:b1:be:ea:6a:c4:0f:63:81:e5:ac:c7:cc:25:1d:4e:f6:
39:45:ac:b4:67:31:f7:66:ce:78:24:92:3d:8d:56:b2:86:53:
23:20:ce:e7:e0:a2:9d:68:cc:bc:ad:0c:57:8e:20:fd:72:d4:
c9:30:8a:a9:fe:77:ff:12:8d:b3:93:2b:67:de:c1:ac:0f:08:
75:ff:0f:da:07:cd:4e:24:94:7c:f1:7d:91:a7:7b:ae:b0:86:
03:e2:48:d3:15:f7:71:25:c1:80:2f:f3:c9:3f:bd:f6:1c:14:
ed:6d:c1:60:5b:e4:fb:a3:cf:ee:08:3b:d9:bc:ec:60:ff:67:
a4:ca:03:32:b5:c6:5b:c7:fc:d5:7f:72:7d:ec:80:db:aa:35:
82:11:52:3f:49:08:fa:44:a7:23:6e:31:2d:a4:96:fe:a0:56:
fb:94:b7:5b:dd:a1:4b:c3:da:d4:11:00:a1:19:c4:d6:d2:16:
c9:22:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:18 2026 by rpki-client