Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/1AB19F168B6E11F1A1EB54ADCE1D38B0.roa
File: 1AB19F168B6E11F1A1EB54ADCE1D38B0.roa (raw, json)
Hash identifier: R8Sbz6U/SzXNtZApqhf88rSoPdpiVfa6rtdX2EGlkKE=
Subject key identifier: CB:C8:60:20:7B:5C:7A:64:E9:40:C4:8D:21:36:CD:2E:17:A1:5F:7E
Certificate issuer: /CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Certificate serial: 0971
Authority key identifier: 22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/1AB19F168B6E11F1A1EB54ADCE1D38B0.roa
Signing time: Wed 29 Jul 2026 16:54:04 +0000
ROA not before: Wed 29 Jul 2026 16:54:00 +0000
ROA not after: Mon 07 Sep 2048 16:54:00 +0000
asID: 328358
IP address blocks: 2001:43f8:1320::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417 (0x971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623193AF, serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Validity
Not Before: Jul 29 16:54:00 2026 GMT
Not After : Sep 7 16:54:00 2048 GMT
Subject: CN=6a6a302c-02c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:98:5c:21:df:56:c4:4c:62:91:b3:c0:dc:
d4:58:3b:87:36:f8:d8:f5:81:05:41:a2:fb:81:73:
af:63:46:5a:ec:ef:0a:b4:1e:c5:e7:06:7e:fe:08:
e7:56:6e:25:f2:59:5d:bd:1a:90:3a:e5:e1:8c:29:
7e:84:cf:6f:2a:a6:2d:e5:63:15:90:ab:2e:68:d3:
07:42:3c:9d:08:9b:7a:a7:2e:e8:2b:fe:27:0b:65:
b8:5f:3a:0a:a9:e2:db:95:97:52:fd:9c:cb:c8:ff:
e9:8c:da:90:0f:6f:c5:7d:28:b1:9d:6a:fe:bb:82:
9e:77:e2:98:8e:44:96:c3:38:5a:d7:02:fa:a3:3f:
d1:ed:cf:9c:c2:b9:6d:b8:b7:64:a3:9f:47:a9:6d:
3f:3a:9e:21:0f:0b:c3:ef:82:25:92:22:1e:54:d2:
49:47:82:23:ed:98:8c:31:ed:92:6b:ec:77:1e:95:
fe:a1:64:4c:53:ca:68:20:7f:87:e1:58:a4:1c:29:
c7:60:5d:d7:08:89:03:e2:19:94:f0:f4:08:86:c1:
b4:ba:37:41:9d:72:66:38:53:6f:29:84:ae:a4:fe:
b2:bc:d9:1b:c8:69:86:7b:67:97:5e:28:21:a7:cb:
05:ec:c3:6f:8f:23:f9:d3:33:63:86:e5:6f:52:ea:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C8:60:20:7B:5C:7A:64:E9:40:C4:8D:21:36:CD:2E:17:A1:5F:7E
X509v3 Authority Key Identifier:
keyid:22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/1AB19F168B6E11F1A1EB54ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:1320::/48
Signature Algorithm: sha256WithRSAEncryption
4e:9a:fc:11:d8:be:25:04:0d:51:52:96:54:48:0a:55:af:3a:
bc:b4:d8:ed:25:91:7a:37:9e:91:09:7d:10:14:f3:60:2d:e4:
48:aa:f0:e8:bb:4f:ba:9f:e8:3f:a4:b0:b8:99:db:13:64:c5:
ff:9b:a8:07:a1:66:18:8d:03:84:8c:0b:99:3d:9d:38:80:84:
d3:72:79:59:9a:c2:d2:d7:3c:0d:26:d2:bc:67:f4:ba:14:ee:
d3:25:c5:06:be:f9:23:a4:51:d6:fe:45:36:30:fb:88:fc:6b:
2c:71:da:4d:16:07:c6:60:b1:14:ca:5b:52:21:7f:44:11:ad:
ad:d7:8c:b1:c0:30:2c:c7:4a:25:6d:3d:d7:09:c3:dc:c0:00:
3c:ff:84:f8:9a:4a:35:38:3f:7f:dc:79:a4:5f:50:47:1b:36:
3e:3f:95:69:52:7b:d7:e5:8a:23:d3:58:9c:55:30:48:ce:fa:
54:d6:bf:9a:6f:7f:e2:67:a3:e6:ad:bd:30:ce:45:a6:80:8c:
91:17:36:66:ff:6c:31:09:41:ca:dc:f2:76:68:82:8f:b2:16:
95:d0:b8:01:9f:08:35:5c:fa:6d:80:10:5b:5d:a5:56:53:b2:
c1:19:aa:44:b7:1f:f7:78:e3:ce:c4:c5:14:76:e7:59:48:1c:
b5:31:4a:b4
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICCXEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjMxOTNBRjExMC8GA1UEBRMoMjI3QjZCMzdFMTdFQjAwOTRDMDMwNDkzOUIyRkM1
ODhFMUU2NkU5OTAeFw0yNjA3MjkxNjU0MDBaFw00ODA5MDcxNjU0MDBaMBgxFjAU
BgNVBAMTDTZhNmEzMDJjLTAyYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+TZhcId9WxExikbPA3NRYO4c2+Nj1gQVBovuBc69jRlrs7wq0HsXnBn7+
COdWbiXyWV29GpA65eGMKX6Ez28qpi3lYxWQqy5o0wdCPJ0Im3qnLugr/icLZbhf
Ogqp4tuVl1L9nMvI/+mM2pAPb8V9KLGdav67gp534piORJbDOFrXAvqjP9Htz5zC
uW24t2Sjn0epbT86niEPC8PvgiWSIh5U0klHgiPtmIwx7ZJr7Hcelf6hZExTymgg
f4fhWKQcKcdgXdcIiQPiGZTw9AiGwbS6N0GdcmY4U28phK6k/rK82RvIaYZ7Z5de
KCGnywXsw2+PI/nTM2OG5W9S6uvrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy8hg
IHtcemTpQMSNITbNLhehX34wHwYDVR0jBBgwFoAUIntrN+F+sAlMAwSTmy/FiOHm
bpkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIzMTkzL0MyQkEzMDFFNjJFMDExRUFCMDBGMzkxMUY4QUVBMjI4L0ludHJO
LUYtc0FsTUF3U1RteV9GaU9IbWJway5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ludHJOLUYtc0FsTUF3U1RteV9GaU9IbWJway5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIzMTkzL0MyQkEzMDFFNjJFMDExRUFCMDBGMzkxMUY4
QUVBMjI4LzFBQjE5RjE2OEI2RTExRjFBMUVCNTRBRENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4EyAwDQYJKoZIhvcN
AQELBQADggEBAE6a/BHYviUEDVFSllRIClWvOry02O0lkXo3npEJfRAU82At5Eiq
8Oi7T7qf6D+ksLiZ2xNkxf+bqAehZhiNA4SMC5k9nTiAhNNyeVmawtLXPA0m0rxn
9LoU7tMlxQa++SOkUdb+RTYw+4j8ayxx2k0WB8ZgsRTKW1Ihf0QRra3XjLHAMCzH
SiVtPdcJw9zAADz/hPiaSjU4P3/ceaRfUEcbNj4/lWlSe9fliiPTWJxVMEjO+lTW
v5pvf+Jno+atvTDORaaAjJEXNmb/bDEJQcrc8nZogo+yFpXQuAGfCDVc+m2AEFtd
pVZTssEZqkS3H/d4487ExRR251lIHLUxSrQ=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:42 2026 by rpki-client