Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/F245933689D611F18F3B7BEECE1D38B0.roa
File: F245933689D611F18F3B7BEECE1D38B0.roa (raw, json)
Hash identifier: Qc7x7IRzSjOGOYnYrylu0eYZUXVTdtXRFT3T/mxU+I0=
Subject key identifier: E5:8F:E9:59:EB:42:77:2A:CD:96:89:CA:C2:4C:A3:EE:EE:F8:46:F2
Certificate issuer: /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial: 060C
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/F245933689D611F18F3B7BEECE1D38B0.roa
Signing time: Mon 27 Jul 2026 16:19:31 +0000
ROA not before: Mon 27 Jul 2026 16:19:27 +0000
ROA not after: Mon 05 Oct 2026 16:19:27 +0000
asID: 37028
IP address blocks: 41.183.0.0/16 maxlen: 24
196.10.112.0/22 maxlen: 24
196.10.116.0/23 maxlen: 24
196.11.125.0/24 maxlen: 24
196.11.126.0/23 maxlen: 24
196.11.128.0/22 maxlen: 24
196.11.132.0/23 maxlen: 24
196.11.134.0/24 maxlen: 24
2c0f:fdf8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1548 (0x60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F854AAF, serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Validity
Not Before: Jul 27 16:19:27 2026 GMT
Not After : Oct 5 16:19:27 2026 GMT
Subject: CN=6a678513-f384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:58:47:19:c9:ce:40:f7:77:d8:a3:34:ce:
e8:01:2f:bd:6e:67:b5:a5:04:1e:a6:4c:a4:44:9f:
da:3a:e7:d2:99:66:ab:f6:92:27:ae:ba:8b:ef:4c:
99:53:29:93:83:f5:8f:c0:38:20:24:99:b5:fd:04:
c9:1b:89:8d:bc:8d:6d:62:23:d2:7e:9b:54:c8:1e:
d4:d5:30:2f:81:79:5c:66:12:cf:ba:9e:b3:1d:54:
19:85:da:9b:96:86:df:7d:5e:ef:cf:3b:14:ff:e1:
c0:05:4d:05:79:d3:f6:67:23:51:cd:d4:3f:68:d0:
ed:57:74:b0:8b:16:ad:b9:5f:4a:7c:24:5a:ed:b9:
81:c8:5c:45:9d:df:23:b9:06:87:6e:ee:00:1d:5d:
47:ff:da:46:27:e7:04:d3:53:bb:e1:14:f7:60:10:
9e:c6:78:d8:04:1c:5c:b0:3c:d5:55:47:14:83:29:
c0:9b:7c:7f:71:fe:80:10:f2:53:92:71:26:45:af:
34:ff:26:a8:44:70:fe:e6:4b:0f:ef:a1:2c:87:d2:
a4:bc:4d:64:3c:ce:47:da:fc:02:6d:c8:19:92:4a:
0d:fc:b3:c2:ab:05:3a:5a:58:d5:55:71:22:b5:f6:
2e:4f:4b:59:30:c1:14:5e:a9:03:2b:e5:7e:54:ab:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:E9:59:EB:42:77:2A:CD:96:89:CA:C2:4C:A3:EE:EE:F8:46:F2
X509v3 Authority Key Identifier:
keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/F245933689D611F18F3B7BEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.183.0.0/16
196.10.112.0-196.10.117.255
196.11.125.0-196.11.134.255
IPv6:
2c0f:fdf8::/32
Signature Algorithm: sha256WithRSAEncryption
47:2b:b5:f4:c4:fc:89:6e:57:a2:66:15:99:49:71:c6:b4:17:
b1:93:34:f5:a1:ca:cb:12:7b:74:d3:34:e0:2c:21:f2:7e:ea:
f0:b2:74:44:25:42:9f:48:75:82:55:7c:f7:68:c1:ed:3e:66:
67:65:94:77:06:c1:f4:22:a3:d2:e8:f5:a4:5d:1b:d5:ee:94:
b2:f5:e3:21:57:eb:e0:fc:7c:59:77:fc:5b:92:cf:53:74:99:
4d:5f:a0:9f:27:f9:51:8f:c8:9d:9b:02:f0:87:89:1f:59:64:
60:44:bd:48:b2:89:e4:02:9f:4b:39:b4:53:16:6e:d4:53:1e:
de:b7:5a:59:3b:9f:ee:69:a9:2a:47:be:ce:85:6f:5b:df:62:
6d:04:67:e0:10:0d:ea:b8:d8:c5:56:d2:a7:c2:8b:8a:5b:5b:
5e:3a:13:3b:30:9b:bf:58:1c:a5:a0:97:2a:86:2a:4b:30:3e:
fc:bc:a8:8a:72:57:4d:a7:e0:69:0c:dd:22:80:cf:8b:1e:50:
2f:3d:d5:2e:92:3c:ca:92:d5:3f:dc:9a:69:7c:bb:e0:c1:54:
cd:64:38:5e:49:30:86:f5:48:40:f3:3e:38:26:23:a5:07:aa:
e4:ef:70:f4:df:ea:c9:0e:c5:e4:a8:2c:f9:a5:f9:61:20:5f:
3b:01:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:36 2026 by rpki-client