Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/88C66DCE8A8811F1BF25A0B5CE1D38B0.roa
File: 88C66DCE8A8811F1BF25A0B5CE1D38B0.roa (raw, json)
Hash identifier: 96MKY1wJO/ICMedmLmNPvybRZlM1IF+zskjNS4Rtcww=
Subject key identifier: 24:38:FB:87:48:45:35:AD:53:8D:6E:C0:8D:CB:75:BC:A4:88:53:E4
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 0639
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/88C66DCE8A8811F1BF25A0B5CE1D38B0.roa
Signing time: Tue 28 Jul 2026 13:30:44 +0000
ROA not before: Tue 28 Jul 2026 13:30:40 +0000
ROA not after: Mon 28 Jul 2036 13:30:40 +0000
asID: 37294
IP address blocks: 196.216.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Jul 28 13:30:40 2026 GMT
Not After : Jul 28 13:30:40 2036 GMT
Subject: CN=6a68af04-d2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:93:af:db:05:67:07:95:f0:97:26:28:6b:
f7:c2:53:b0:13:e2:0f:61:f7:85:9d:eb:71:0b:36:
2d:e1:67:62:68:4c:0f:5d:7f:7b:cc:bd:8a:e1:0b:
8c:e2:91:f6:9a:45:a1:48:ab:a7:5e:a4:83:c0:e6:
06:2e:05:17:aa:65:da:c3:a4:a4:1e:af:36:81:9c:
92:33:87:2e:26:4b:d1:85:09:b9:51:1d:4d:da:a2:
2e:5e:6b:a4:ac:f2:58:3e:d8:e2:9b:b3:77:0b:8a:
4f:21:f7:9e:f7:6f:2a:c4:04:b6:bc:b1:b0:62:24:
f7:bd:a0:99:c9:ea:09:6c:a1:6e:8a:f9:8d:b6:1d:
66:8e:fd:23:a3:c8:98:77:bc:4a:02:5c:32:16:7d:
9a:f9:c9:52:cd:cb:99:4c:c3:c9:39:a0:08:9d:15:
e7:55:54:9a:37:9a:77:0d:7f:e3:c0:8f:05:de:62:
7f:9e:75:25:7a:a2:fe:b9:c1:4a:ca:79:0e:1d:90:
90:63:05:21:c8:16:e8:c8:a7:cd:c5:ad:7d:fd:3a:
a8:57:6b:7e:dc:68:b7:56:f5:fd:22:d5:b2:f4:a7:
6a:6f:36:01:b8:e9:3f:9e:17:d6:4a:98:e3:c0:6b:
6d:53:fc:3b:99:8c:f4:f2:94:f4:1a:bb:49:9e:e0:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:FB:87:48:45:35:AD:53:8D:6E:C0:8D:CB:75:BC:A4:88:53:E4
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/88C66DCE8A8811F1BF25A0B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.8.0/21
Signature Algorithm: sha256WithRSAEncryption
86:1c:dd:ad:c9:c4:a8:0a:bf:ed:bd:e9:da:3f:38:cc:d8:bd:
ab:5c:f8:86:b3:d3:ac:5e:8e:cb:9b:be:10:0f:25:46:d2:5d:
ef:91:a6:24:6b:db:ca:e4:c4:db:76:3b:07:07:e2:72:55:67:
5a:26:d0:50:aa:92:59:f6:8a:1f:d9:18:e3:39:1d:24:91:2c:
8c:be:ef:32:7b:f0:ed:33:26:72:94:8c:0b:2e:3b:21:cb:07:
05:61:82:a9:e1:ce:5d:1c:cf:bc:44:a4:01:51:e3:7a:a1:d6:
08:66:0f:74:c6:96:21:47:ba:2d:3e:5f:9d:47:ec:5a:cf:2f:
97:99:b8:e5:6c:1c:b0:d3:f8:fc:9a:c0:52:50:9a:56:3c:04:
1b:09:32:c2:78:9e:37:bc:f8:da:e4:78:0d:25:4a:81:fe:e7:
a3:68:64:3c:c4:cb:12:16:85:34:85:68:3b:26:35:bf:b5:85:
8b:4e:51:28:3f:89:9a:db:ff:b6:81:93:1c:e0:4d:a2:de:7f:
dd:eb:50:95:e8:cd:5b:73:5e:ff:d6:bb:78:a7:36:3e:f4:df:
82:42:60:c1:18:ca:c9:9a:18:8a:ab:5a:b7:0a:7f:a0:4a:28:
a7:e7:d6:39:ff:78:3d:41:84:7a:fa:d8:27:ba:4b:05:4d:95:
87:f2:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:58:09 2026 by rpki-client