Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/00230F4A8A7E11F194E4C2F4CE1D38B0.roa
File: 00230F4A8A7E11F194E4C2F4CE1D38B0.roa (raw, json)
Hash identifier: ouAf8y6OSko2UADKPq7JrVEddFidh4Xbou8xnB2P8FI=
Subject key identifier: B4:6F:DA:73:E3:A3:B6:57:9A:4D:41:72:FF:61:A4:0A:FA:E6:48:43
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 0629
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/00230F4A8A7E11F194E4C2F4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 12:15:20 +0000
ROA not before: Tue 28 Jul 2026 12:15:16 +0000
ROA not after: Sat 31 Jul 2032 12:15:16 +0000
asID: 37294
IP address blocks: 41.78.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Jul 28 12:15:16 2026 GMT
Not After : Jul 31 12:15:16 2032 GMT
Subject: CN=6a689d58-210f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:c2:fb:b5:88:02:e0:3d:d1:0e:78:a8:2e:
1d:4d:26:f9:27:df:c8:9e:c6:db:f4:51:98:29:bc:
6f:e9:af:ad:50:d7:75:5d:a4:2d:bf:04:21:e7:0b:
d0:c4:2b:2d:d1:ca:5a:90:45:f4:7a:57:fb:bf:35:
22:18:28:0d:ce:8b:54:48:9d:81:d2:9b:a4:e7:d6:
f6:46:8a:7a:58:13:8c:7d:03:de:f9:86:f6:e5:f8:
e6:88:7a:63:e6:a2:36:b8:26:62:92:f2:5b:fe:6e:
c7:ac:42:b3:3f:2b:aa:b4:51:0f:50:0f:df:36:67:
12:75:bf:4e:cf:7e:bf:1d:9c:40:31:2a:b1:28:5f:
c3:6d:25:64:b4:01:79:03:28:be:31:5c:ad:66:76:
53:f1:51:af:2c:fc:01:18:73:9f:0c:6e:81:43:98:
d0:f3:5d:f8:f6:d3:a7:cd:35:97:e0:b9:7e:5d:d0:
0b:e0:a0:0f:50:dd:ef:5f:4a:96:2c:46:b8:b8:a6:
da:9f:39:3b:70:71:11:fc:2b:2c:1d:14:bb:5f:1e:
51:c4:ad:52:4c:bc:f1:b1:25:aa:e2:ec:66:8f:ff:
1f:c8:4f:48:da:75:47:d5:59:ea:e2:de:1b:66:48:
1d:4f:15:b0:78:db:38:0a:fa:e1:2c:67:f4:79:8b:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6F:DA:73:E3:A3:B6:57:9A:4D:41:72:FF:61:A4:0A:FA:E6:48:43
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/00230F4A8A7E11F194E4C2F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.248.0/22
Signature Algorithm: sha256WithRSAEncryption
27:2f:25:b4:8a:f5:9f:a7:da:d4:03:76:16:d8:ab:84:77:56:
87:f1:2b:2f:c1:0a:6d:e3:21:ab:2b:a8:80:66:ef:8f:34:97:
ae:ab:8e:02:eb:97:65:d0:02:70:c3:cc:7d:63:38:a6:2f:84:
da:62:46:80:84:cb:51:c8:fc:66:6c:b1:ab:bd:fc:ed:ad:f6:
06:36:8b:58:99:80:a0:f2:1f:c1:05:98:ef:82:f6:e3:24:21:
12:ef:e7:02:32:82:4a:d4:c9:01:48:90:fb:39:8c:27:59:29:
ea:41:9b:c5:1f:c1:72:77:d5:52:d0:9e:d8:04:65:74:89:39:
47:33:97:6d:30:2a:ff:49:c1:53:b8:50:6e:1f:68:45:85:b9:
e8:55:8d:5b:c7:cb:5d:8e:94:2d:ce:fc:99:27:13:28:a8:06:
2d:69:61:ce:b5:72:c2:88:96:64:85:26:1e:96:2f:f5:68:35:
7b:44:b9:36:ba:6a:ed:fa:88:10:a8:b2:b2:f0:5d:07:71:39:
ae:9b:52:af:cb:18:02:05:b0:dc:71:de:fa:32:2f:68:14:59:
d0:a9:94:74:23:18:a1:00:d9:6d:b1:ad:bb:f1:48:ba:70:cc:
ed:54:53:3d:d4:59:40:04:c1:a7:34:57:3a:5c:b0:03:03:7c:
21:e8:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:34:41 2026 by rpki-client