Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/C22D8994634611F1A44F9016CF1D38B0.roa
File: C22D8994634611F1A44F9016CF1D38B0.roa (raw, json)
Hash identifier: dn0CiA4TD5hJ1aVLDN4K8BucDVCdQvAPyy7W2PdZhn0=
Subject key identifier: AF:A4:A5:62:67:B7:D6:5C:62:CC:04:0E:17:5D:C5:A6:A5:CC:7C:7F
Certificate issuer: /CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Certificate serial: 05EA
Authority key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/C22D8994634611F1A44F9016CF1D38B0.roa
Signing time: Mon 08 Jun 2026 14:31:38 +0000
ROA not before: Mon 08 Jun 2026 14:31:33 +0000
ROA not after: Tue 08 Jul 2036 14:31:33 +0000
asID: 30983
IP address blocks: 196.200.128.0/18 maxlen: 24
2001:4310::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0133AF, serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Validity
Not Before: Jun 8 14:31:33 2026 GMT
Not After : Jul 8 14:31:33 2036 GMT
Subject: CN=6a26d24a-549c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:f5:38:8a:84:b2:4c:77:29:25:e9:46:a5:
19:0d:98:fc:96:61:fe:3b:16:61:3b:5b:28:d7:55:
fa:43:33:09:da:66:0b:4b:0f:10:e4:d4:7c:7a:ba:
35:ec:02:ef:d4:5f:e6:99:14:92:4a:7e:00:ef:b3:
1a:c5:7c:d1:8d:9e:fb:24:df:4a:3c:66:e3:3e:ea:
c0:9c:38:74:37:6b:62:63:11:ba:9c:df:11:37:c8:
31:da:fa:b0:87:fc:34:53:67:53:de:75:b6:87:63:
db:ae:51:e6:da:be:b9:19:61:39:1a:fc:41:e3:af:
03:06:8a:cb:d2:d9:a3:55:bf:a6:cc:7f:33:b4:8a:
78:95:e4:ae:9f:b2:22:4e:a3:97:a9:77:e0:70:78:
83:73:34:72:7d:83:b3:ff:c2:20:7d:cb:d4:10:cd:
53:d0:57:9b:67:ae:d2:d1:dd:df:7e:5f:43:77:68:
e6:0f:45:99:8c:b4:05:bb:d6:09:10:2d:32:22:5d:
bc:be:2a:0c:5f:1f:04:2a:7f:b9:31:b6:e0:77:e2:
67:a8:6c:86:65:9e:4e:13:13:21:60:0d:5c:2b:85:
a3:e4:10:73:b1:9c:4e:2d:c3:5b:a9:19:b2:e5:8c:
25:6a:be:00:24:fa:a0:d4:5c:1f:65:42:86:77:5e:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:A5:62:67:B7:D6:5C:62:CC:04:0E:17:5D:C5:A6:A5:CC:7C:7F
X509v3 Authority Key Identifier:
keyid:66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/C22D8994634611F1A44F9016CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.128.0/18
IPv6:
2001:4310::/32
Signature Algorithm: sha256WithRSAEncryption
4d:8b:6e:82:c7:03:ea:6f:22:d0:ba:1c:7d:19:12:46:28:c7:
57:3b:fa:96:6a:59:86:96:27:ef:36:5f:db:42:50:0e:95:1e:
20:fb:0f:14:a3:57:70:cf:3e:82:82:68:a3:1a:a2:17:dd:46:
96:0f:ee:31:8b:09:c6:17:26:8a:fd:10:49:f3:e1:bc:f0:7b:
5d:97:60:21:51:e9:02:3b:c2:e5:1b:59:b2:80:07:b4:f0:83:
aa:d0:f7:f4:8e:32:70:3c:24:77:ca:b3:38:ad:93:fe:b1:56:
c5:8f:0d:30:6d:5f:42:27:a8:ee:23:f1:d4:37:40:ef:af:29:
26:7e:94:91:7e:5c:92:6f:65:f0:7f:44:54:b5:6a:48:fa:10:
cd:81:24:54:a3:a0:e9:4c:92:15:1b:1e:8a:ea:0a:7d:98:6e:
a5:88:cf:82:f6:2d:e2:34:0f:89:8b:d1:93:cf:34:a5:79:00:
b2:78:58:08:77:87:a5:20:b6:ff:e1:3e:d6:cd:83:7c:43:54:
39:e9:59:e2:75:f5:0a:4b:41:32:80:d2:96:76:e1:fa:12:b8:
36:71:9a:4e:1c:ff:1e:24:81:1e:3f:de:84:45:67:38:88:f7:
72:89:cf:22:5f:cc:ac:b7:d4:f0:4d:01:f4:89:35:29:fd:ee:
2d:b2:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:16 2026 by rpki-client