Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/7D22477A8A8511F1A99EB9A2CE1D38B0.roa
File: 7D22477A8A8511F1A99EB9A2CE1D38B0.roa (raw, json)
Hash identifier: ZbW6dhsJ+JcM68l7CncdThQ0Y6a4BW/oPDMIrWsfNYg=
Subject key identifier: 26:13:70:6B:EA:B8:9C:88:CC:16:57:41:40:21:57:84:5B:99:8A:C3
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 0635
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/7D22477A8A8511F1A99EB9A2CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:08:56 +0000
ROA not before: Tue 28 Jul 2026 13:08:52 +0000
ROA not after: Mon 28 Jul 2036 13:08:52 +0000
asID: 36913
IP address blocks: 196.216.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Jul 28 13:08:52 2026 GMT
Not After : Jul 28 13:08:52 2036 GMT
Subject: CN=6a68a9e8-6d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:b8:0e:c2:b4:19:fe:5f:41:c8:6f:ca:ee:
9b:3a:8e:8f:13:ef:b3:7c:e1:bb:d3:b7:c0:84:2f:
f2:f3:36:13:ef:0d:04:88:78:72:74:11:a4:df:6e:
e8:23:0b:81:f8:7b:2a:de:57:fa:c3:f0:8a:12:76:
24:af:12:b4:99:a7:18:3d:8e:65:e2:6a:88:4b:4a:
06:95:ad:1f:74:bb:ad:4a:1d:c6:df:85:70:1f:15:
af:6f:4c:a8:1b:3e:92:66:e8:e2:1c:1a:4a:fc:41:
10:fe:5f:b3:02:15:b6:d8:49:32:d1:11:0d:58:df:
c8:81:df:55:d6:f7:3c:8a:17:e9:b7:77:e5:bd:69:
00:ca:7d:5f:ba:2d:3d:86:49:37:49:06:a2:ff:7a:
e5:37:c7:47:c6:35:20:4b:59:cb:aa:80:c9:bc:17:
af:00:b7:69:74:c8:b7:d1:ae:b0:69:ef:8b:3f:ec:
f1:41:94:8e:2c:10:5b:a1:f3:8d:43:fc:f5:dc:5f:
94:79:d6:9d:72:b5:23:f7:0d:7f:50:83:7c:1a:9f:
d2:1c:d4:53:79:c4:28:2d:d4:aa:02:0a:1b:9a:2e:
7d:ef:59:dd:fd:ba:a7:cb:d0:d8:44:66:19:e7:d8:
7a:fa:7c:3c:b5:85:ac:82:0a:df:78:d7:3a:e8:4e:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:13:70:6B:EA:B8:9C:88:CC:16:57:41:40:21:57:84:5B:99:8A:C3
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/7D22477A8A8511F1A99EB9A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.8.0/21
Signature Algorithm: sha256WithRSAEncryption
27:63:2f:90:8d:a2:9a:ce:20:d6:57:51:c4:c8:d9:2a:cd:c5:
aa:92:b6:e2:5c:1b:c1:fa:f7:6f:0b:95:1f:ad:95:41:4f:80:
5e:15:4e:18:b0:41:94:61:23:af:11:b1:37:ba:76:3f:c4:8d:
12:9c:43:9a:7d:9f:c0:e9:ff:b8:fd:c3:68:2a:d4:4e:21:23:
00:c4:d7:a7:9c:4c:67:7e:2e:21:dd:26:ca:e5:58:b0:a7:6a:
e4:f2:9a:66:2c:2a:18:10:c2:b7:18:dd:e1:79:05:b0:32:a7:
33:b0:19:63:b5:8c:4e:8a:44:f6:18:64:2e:3e:9b:d2:d8:80:
70:d2:ce:2a:2a:21:c6:e0:63:e5:0b:a3:1b:45:47:14:12:fb:
d0:c5:73:0b:d5:4c:57:17:fd:0b:fc:10:80:bc:c9:d7:33:65:
a6:5e:96:9e:ad:ab:f7:06:fc:2a:a7:6d:28:fc:8c:72:66:c5:
a6:4a:02:41:11:fc:47:b6:26:01:c8:f1:db:ae:13:ba:2c:51:
47:a8:b5:49:0e:de:b4:a2:5d:8a:80:1f:88:2c:a5:3d:36:d1:
d9:42:12:b7:01:1d:70:5a:2a:a5:77:37:f3:d4:69:55:a8:39:
62:96:1b:84:ba:e6:49:9c:51:52:30:3b:3c:25:e3:cb:ba:db:
47:5e:37:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:09 2026 by rpki-client