Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/FABD169A60AC11F1BE76D3CDCE1D38B0.roa
File: FABD169A60AC11F1BE76D3CDCE1D38B0.roa (raw, json)
Hash identifier: k55PhIufq/MeyxvA1lamTZ3k66D8nz3zhmTmmjbZpLk=
Subject key identifier: 5C:95:37:93:51:77:B8:9F:18:28:A3:5B:51:DA:85:56:5E:BE:61:00
Certificate issuer: /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial: 0898
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/FABD169A60AC11F1BE76D3CDCE1D38B0.roa
Signing time: Fri 05 Jun 2026 07:05:49 +0000
ROA not before: Fri 05 Jun 2026 07:05:43 +0000
ROA not after: Sat 05 Jun 2032 07:05:43 +0000
asID: 37239
IP address blocks: 197.234.16.0/24 maxlen: 24
197.234.17.0/24 maxlen: 24
197.234.18.0/24 maxlen: 24
197.234.19.0/24 maxlen: 24
197.234.20.0/24 maxlen: 24
197.234.21.0/24 maxlen: 24
197.234.22.0/24 maxlen: 24
197.234.23.0/24 maxlen: 24
197.234.24.0/24 maxlen: 24
197.234.25.0/24 maxlen: 24
197.234.26.0/24 maxlen: 24
197.234.27.0/24 maxlen: 24
197.234.28.0/24 maxlen: 24
197.234.29.0/24 maxlen: 24
197.234.30.0/24 maxlen: 24
197.234.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Validity
Not Before: Jun 5 07:05:43 2026 GMT
Not After : Jun 5 07:05:43 2032 GMT
Subject: CN=6a22754c-5708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:b4:f3:d0:2f:11:7d:18:48:5d:c5:1a:ba:
aa:42:c0:59:4e:5d:e3:c7:29:77:7b:c6:07:a5:bb:
06:58:e8:a4:11:05:09:03:45:0d:a1:47:2a:b6:93:
ca:2d:6b:d0:1b:5d:b9:7d:f5:e4:3c:d5:01:2f:19:
26:15:0e:81:aa:f6:a0:98:84:37:bc:46:04:8f:41:
ba:9b:97:54:e2:77:19:ed:4a:33:52:f6:35:d8:19:
87:a0:f4:4f:42:e9:73:3f:27:16:27:c7:a4:27:2b:
98:f4:fa:4e:1d:e6:5c:45:66:2a:5f:3d:28:a8:86:
83:5e:c8:03:95:87:99:a8:d2:52:4e:55:7d:43:76:
71:ea:84:05:f0:48:60:19:68:87:44:c4:c4:86:8e:
bf:06:71:d5:11:51:be:be:9b:27:f0:b1:af:1a:ee:
81:bd:81:21:a5:0c:b9:1f:53:e8:17:63:dc:24:15:
31:d6:0e:3b:07:c4:aa:f6:f5:95:3c:0c:14:11:23:
77:f7:69:a2:49:30:6a:a4:39:fe:be:d2:3b:79:e7:
35:fb:b1:0d:fa:4c:5f:43:88:97:5f:1a:ca:dd:fe:
8b:9f:54:0b:10:0b:e6:c0:7b:e6:4c:00:4d:c3:68:
1a:aa:3e:94:35:f9:5c:81:a7:fd:d9:7f:df:67:4b:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:37:93:51:77:B8:9F:18:28:A3:5B:51:DA:85:56:5E:BE:61:00
X509v3 Authority Key Identifier:
keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/FABD169A60AC11F1BE76D3CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.16.0/20
Signature Algorithm: sha256WithRSAEncryption
20:9e:7e:06:b3:d8:06:89:ae:e1:64:3d:26:7b:6b:69:8b:48:
b0:56:e8:37:b6:5c:88:9b:92:62:81:d2:f0:d6:bd:20:01:9d:
f9:58:c6:e4:24:8c:4d:f9:a3:14:f7:72:7b:29:ff:b4:bc:96:
42:4a:8c:d1:c1:f3:73:4a:45:6b:91:fd:a7:41:d3:41:8d:56:
ed:de:7b:40:2c:8e:96:2f:9d:a7:00:3e:a1:7e:8a:b1:ab:ee:
13:7d:de:3f:40:21:c3:5b:f5:56:ef:0b:36:d8:a7:9d:4b:58:
f5:34:6c:dd:c0:a1:99:60:1e:a8:df:b8:4b:97:79:71:65:07:
a7:09:18:89:6a:d0:df:6a:27:a9:0e:c8:14:21:db:e7:94:51:
16:47:a0:74:3c:fc:bc:64:85:48:b3:00:46:3b:a3:7c:2e:73:
23:0b:29:86:41:ea:39:cc:59:60:da:d7:5c:fa:29:a2:2a:95:
29:af:5e:fc:5f:82:c3:80:b6:08:e9:5f:6c:89:c4:b9:49:05:
a6:7d:79:a8:28:ed:1f:85:34:c2:33:b7:c6:1e:0e:51:a7:53:
9f:69:17:da:0b:f6:ba:9f:8a:b6:aa:5c:81:6c:d9:1b:4c:a5:
bd:81:79:a4:91:b7:88:f3:67:85:26:9d:54:89:bc:93:9e:a0:
cd:da:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:09 2026 by rpki-client