Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/12FA27E489D811F19701BFF4CE1D38B0.roa
File: 12FA27E489D811F19701BFF4CE1D38B0.roa (raw, json)
Hash identifier: LY+NWD1EssK+6oNG5KycNAcxR9ZpdqwYoH7grfnnA3A=
Subject key identifier: 05:A4:7A:5D:2F:8B:E2:78:55:4C:FF:2C:26:0C:68:28:B2:43:5F:6F
Certificate issuer: /CN=F36CA1C4AF/serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Certificate serial: 074E
Authority key identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/12FA27E489D811F19701BFF4CE1D38B0.roa
Signing time: Mon 27 Jul 2026 16:27:35 +0000
ROA not before: Mon 27 Jul 2026 16:27:31 +0000
ROA not after: Wed 20 Aug 2031 16:27:31 +0000
asID: 37356
IP address blocks: 102.177.0.0/18 maxlen: 24
196.6.242.0/24 maxlen: 24
196.11.63.0/24 maxlen: 24
196.61.16.0/20 maxlen: 24
197.155.96.0/19 maxlen: 24
197.221.160.0/19 maxlen: 24
2c0f:f390::/32 maxlen: 64
2c0f:fa58::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA1C4AF, serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Validity
Not Before: Jul 27 16:27:31 2026 GMT
Not After : Aug 20 16:27:31 2031 GMT
Subject: CN=6a6786f7-0667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:cd:95:8c:c0:e5:d6:5e:b7:3b:a7:67:25:
51:1e:d4:7b:d7:81:a1:77:d9:f2:0f:c9:ca:8f:0d:
51:67:95:de:78:5b:7e:5a:1c:3e:75:8e:cf:f0:e4:
1f:e8:73:93:27:d3:5d:43:21:d8:ca:35:d1:b8:dd:
43:b0:c4:6e:73:08:7f:fb:91:d3:ac:68:28:40:07:
6f:20:19:82:9f:31:05:ba:da:e4:15:8d:3d:a3:38:
02:92:67:d5:ac:9a:5b:57:d5:c5:c0:3d:bb:05:f3:
af:ca:21:9e:ae:b8:1d:e9:bb:9e:19:81:44:13:53:
dc:01:d9:94:c7:ac:ca:47:3a:a6:8c:5e:0d:bc:3e:
35:a3:86:de:0c:da:10:19:2c:45:a0:91:b9:4a:42:
71:02:cb:0b:a1:35:19:61:ee:da:20:14:9e:ca:78:
9c:4b:c6:3e:a3:d7:c1:11:48:09:ff:76:48:1d:3c:
c8:67:80:95:50:21:f3:3b:7d:77:a9:3e:fa:03:95:
5e:af:cd:fd:95:42:bc:5d:ac:1d:c9:50:d9:b0:e6:
78:96:3d:3c:08:09:e3:3c:f2:71:cb:dd:f5:01:bd:
62:9f:ce:bf:bd:f3:6a:e8:66:ef:42:5f:6c:c5:d8:
89:25:07:a1:ab:07:3e:58:52:99:7c:76:eb:24:a9:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:7A:5D:2F:8B:E2:78:55:4C:FF:2C:26:0C:68:28:B2:43:5F:6F
X509v3 Authority Key Identifier:
keyid:63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/12FA27E489D811F19701BFF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.0.0/18
196.6.242.0/24
196.11.63.0/24
196.61.16.0/20
197.155.96.0/19
197.221.160.0/19
IPv6:
2c0f:f390::/32
2c0f:fa58::/32
Signature Algorithm: sha256WithRSAEncryption
8e:77:3d:17:c8:ac:20:f5:5d:07:da:84:7c:8e:ec:0a:5f:37:
b6:4b:1b:94:74:a2:c8:48:a1:89:df:ac:fa:8d:a4:c4:48:da:
c1:2a:32:a4:05:b3:d8:e7:02:e5:67:e3:13:25:fe:18:36:65:
5a:1f:87:ec:1f:26:e0:55:2e:bb:9b:be:38:64:a5:e2:59:3a:
c4:a3:e9:d0:15:a6:bf:a6:26:48:59:e6:2f:5f:07:60:f0:f0:
75:8d:06:c8:bd:fc:8c:e5:02:2f:e5:3a:50:f4:b9:fb:3d:68:
d4:94:1f:65:9f:6d:b1:60:23:ba:ec:89:33:fc:e2:6b:67:05:
48:7c:e3:96:73:5b:43:8c:1a:8a:68:4e:69:0b:f8:8c:98:c3:
df:b7:67:1e:d9:6d:d3:87:21:02:08:a3:ac:99:95:41:be:16:
d6:14:b7:d4:9f:bd:7b:32:e3:b4:5c:9e:45:e2:47:da:80:61:
d3:f2:f8:a7:9a:9a:2e:8d:3a:43:e3:bc:d3:b6:be:5a:7b:58:
17:d5:6d:eb:06:3a:1a:89:f4:92:2c:10:19:e9:34:c2:0a:8b:
e8:d2:d7:12:e3:6e:10:f2:40:cc:6c:89:e1:84:c5:fc:a8:c7:
f5:ea:ea:43:a5:72:bb:1b:50:55:ad:9c:90:46:9d:91:57:39:
a2:b2:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:45 2026 by rpki-client