Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/394C14068A7E11F1A4D6DEF4CE1D38B0.roa
File: 394C14068A7E11F1A4D6DEF4CE1D38B0.roa (raw, json)
Hash identifier: vSDt4zl37RwqgZMYebDjfzUw1LP8T1XqYFXWyiWhQbE=
Subject key identifier: 87:31:93:A8:3D:C8:3B:94:22:8D:07:0C:61:33:F9:9F:3E:9F:04:CA
Certificate issuer: /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial: 052D
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/394C14068A7E11F1A4D6DEF4CE1D38B0.roa
Signing time: Tue 28 Jul 2026 12:16:56 +0000
ROA not before: Tue 28 Jul 2026 12:16:52 +0000
ROA not after: Tue 14 Nov 2028 12:16:52 +0000
asID: 37148
IP address blocks: 197.211.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 12:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1325 (0x52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Validity
Not Before: Jul 28 12:16:52 2026 GMT
Not After : Nov 14 12:16:52 2028 GMT
Subject: CN=6a689db8-58d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:de:78:47:8d:7b:3f:d7:9c:ba:bc:1d:49:
e0:90:0a:fb:ee:77:ad:22:55:57:e5:d5:17:e7:6a:
82:b3:f9:de:90:0d:e8:f5:a6:d2:d7:78:39:19:3f:
39:e2:24:93:66:5b:5c:6e:53:de:93:ab:08:23:58:
87:74:51:5d:ca:e4:52:22:16:9d:32:8b:8c:f3:89:
b8:25:09:f8:97:fa:bb:24:65:d0:30:4d:19:67:41:
91:41:d6:7e:9a:65:87:a7:6f:60:06:30:28:7f:ac:
9b:c9:47:12:c7:57:4f:a3:9d:61:0c:ac:5d:bf:6a:
0f:9f:11:71:3e:8f:e8:0f:3d:ad:28:b5:fb:0f:90:
16:a2:0d:8d:c7:85:21:50:d9:d3:c5:f6:0a:91:50:
b2:ef:84:54:64:99:b5:10:f5:58:97:6b:ff:49:40:
87:3c:4a:87:28:31:19:c0:b8:76:e9:9a:3b:32:81:
c9:a6:32:be:67:b8:a8:5f:71:9f:b4:3c:dd:64:48:
93:c7:79:87:5f:82:ba:c9:09:16:e5:41:04:e2:3a:
da:38:92:38:15:2f:e6:4b:af:4e:d8:f3:1b:90:ee:
9a:80:a7:a5:2c:00:76:2f:53:69:ee:4d:a5:5e:f4:
44:16:89:ec:60:d6:21:41:84:8f:e4:66:c8:e5:6c:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:93:A8:3D:C8:3B:94:22:8D:07:0C:61:33:F9:9F:3E:9F:04:CA
X509v3 Authority Key Identifier:
keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/394C14068A7E11F1A4D6DEF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.211.32.0/19
Signature Algorithm: sha256WithRSAEncryption
35:d7:f3:0b:5b:ab:69:d7:ae:c7:2e:5e:e5:04:9f:37:b8:9d:
e7:71:c4:52:27:c3:84:01:51:47:da:79:ae:81:38:4c:5e:a9:
cf:c1:f0:b6:30:97:53:27:c0:c4:06:b3:cd:f3:2b:1c:c0:2f:
cb:7e:de:f1:20:bc:1a:bb:f7:ab:87:50:0b:bc:ec:d5:a1:6b:
ba:19:a4:dc:fa:72:8f:45:33:0b:7c:4f:1f:e9:6e:cb:2c:70:
ff:85:ea:c0:a8:86:09:5e:d2:26:fd:bc:1f:b7:44:25:dc:87:
f8:99:24:8c:bc:ba:d2:fa:07:2f:19:6f:74:ac:fb:d5:5c:6e:
4e:84:91:65:f2:5e:63:a9:ed:12:ad:39:df:ce:20:a3:ca:00:
9a:9f:8e:e8:cf:e3:4e:03:df:d3:ea:ed:73:d3:c1:23:1e:a8:
54:d8:18:68:7d:2b:13:cc:f6:f3:89:48:bb:77:f0:ce:d8:76:
51:3a:ff:8c:a1:13:c1:52:70:6d:db:32:88:56:ac:d8:94:12:
10:e6:d3:44:bf:b8:a5:c4:68:6a:7b:ac:04:83:ba:15:46:f8:
a1:b0:26:40:dc:84:bf:90:31:41:e6:c2:03:4f:af:bb:ab:41:
5e:52:88:0c:23:70:06:c3:22:06:8d:8e:75:6d:82:c2:6b:85:
31:de:37:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:37 2026 by rpki-client