Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/682E97C2899711F19F9341F5CE1D38B0.roa
File: 682E97C2899711F19F9341F5CE1D38B0.roa (raw, json)
Hash identifier: rbfOhYq8VLN+kcDtAjr99tjl/9Nwedu05DLdKCoHF/M=
Subject key identifier: 7A:7A:E2:37:56:5B:89:91:52:1A:A6:C7:86:1C:D0:30:5D:D4:90:17
Certificate issuer: /CN=F36F1706AF/serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
Certificate serial: 02
Authority key identifier: C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/682E97C2899711F19F9341F5CE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:44:41 +0000
ROA not before: Mon 27 Jul 2026 08:44:37 +0000
ROA not after: Sat 27 Jul 2030 08:44:37 +0000
asID: 327724
IP address blocks: 154.72.192.0/19 maxlen: 24
2c0f:f750::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 05:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1706AF, serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
Validity
Not Before: Jul 27 08:44:37 2026 GMT
Not After : Jul 27 08:44:37 2030 GMT
Subject: CN=6a671a79-f86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:12:03:4d:a6:37:3d:48:be:a1:4e:87:da:
2b:9d:40:08:a8:a8:a2:24:d5:0f:7e:83:27:ae:13:
4d:76:1f:ad:14:91:c4:3d:de:38:98:11:6e:8a:e4:
73:a7:4e:5d:3c:0c:3e:3d:08:09:ca:e6:46:ec:e1:
50:e4:08:69:04:50:28:cb:1b:86:f9:58:94:f5:ed:
6f:10:cd:29:56:c3:8b:26:d8:47:00:da:06:bb:41:
e5:bc:c5:15:1c:13:51:4e:a0:40:f3:43:27:56:e5:
67:a5:68:2c:91:7a:d5:2b:23:8f:cc:df:cc:78:91:
8a:34:8e:8c:52:48:11:2c:51:51:fa:99:dc:d4:78:
9c:2e:25:e1:79:bd:ac:e8:88:ad:84:6d:fa:5a:88:
69:59:e2:57:48:e1:b2:ea:90:4f:cb:d6:2b:9b:a1:
84:5f:bf:c3:98:c7:36:ea:f9:8d:ba:99:66:05:e2:
87:e3:45:aa:dc:1c:78:01:20:43:1f:08:a3:74:ff:
cd:d6:c6:6f:bb:6b:9e:56:ca:89:97:fe:d2:78:87:
6a:3e:01:16:17:5e:cf:95:03:ec:9a:56:95:f9:dd:
6a:23:50:c6:1e:72:bc:dc:5b:39:09:00:43:03:b7:
81:ec:3a:27:d9:1f:d5:9c:78:a8:3e:9a:e0:08:74:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:E2:37:56:5B:89:91:52:1A:A6:C7:86:1C:D0:30:5D:D4:90:17
X509v3 Authority Key Identifier:
keyid:C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/682E97C2899711F19F9341F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.192.0/19
IPv6:
2c0f:f750::/32
Signature Algorithm: sha256WithRSAEncryption
9e:4f:24:58:ad:c1:3b:99:ea:05:c0:f3:48:ba:11:e0:da:32:
ec:1c:77:cb:ca:ea:5b:12:ed:df:94:30:f9:bc:d3:ed:fd:d8:
dd:55:d1:b7:0c:1f:0f:48:a3:a4:7d:68:c6:31:22:c8:72:8b:
eb:8f:83:6d:f0:44:b9:7d:c4:c8:5f:2c:50:87:17:90:ca:9f:
fd:b1:77:cd:15:c5:d3:41:7e:8c:31:4e:82:f5:98:86:85:c9:
e9:bf:80:38:2c:16:f7:4e:47:b1:3a:0c:52:c2:52:16:42:15:
94:7e:8a:a9:20:46:09:ef:c2:00:06:65:16:2d:f1:bd:6f:f4:
1f:c4:f1:30:d5:6c:28:f8:c5:b0:18:72:2c:c6:19:24:98:24:
fa:68:b4:bf:74:c6:0b:83:cb:f5:d2:ed:96:39:14:b0:fa:6d:
38:67:9f:17:ed:ec:57:5b:6f:ce:85:87:be:57:0d:f9:12:a4:
51:f0:24:3a:1a:ea:8d:f5:b0:43:88:d8:9e:8e:b9:7c:f3:ba:
7e:4d:96:03:fa:98:23:17:ed:d0:61:ff:e6:4c:3a:fb:81:9b:
98:bf:e4:9a:3b:c4:bc:f5:fd:5e:24:f5:88:8e:03:e8:f8:5c:
87:47:83:20:12:85:db:77:a6:bb:70:aa:ce:3b:48:df:01:20:
79:15:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:27 2026 by rpki-client