Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/EB25E9D68C0411F19C46D7CACE1D38B0.roa
File: EB25E9D68C0411F19C46D7CACE1D38B0.roa (raw, json)
Hash identifier: nWIc92PbEA6a7waodLsMbx9VFD/rbvmR3wj7KHaw0gs=
Subject key identifier: 90:7F:8A:94:55:27:48:24:4C:E4:B6:D9:3E:96:17:35:61:0E:19:F3
Certificate issuer: /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial: 0EEC
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/EB25E9D68C0411F19C46D7CACE1D38B0.roa
Signing time: Thu 30 Jul 2026 10:53:38 +0000
ROA not before: Thu 30 Jul 2026 10:53:34 +0000
ROA not after: Thu 11 Nov 2027 10:53:34 +0000
asID: 7020
IP address blocks: 196.4.250.0/23 maxlen: 24
196.10.1.0/24 maxlen: 24
196.10.2.0/23 maxlen: 24
196.10.4.0/22 maxlen: 24
196.10.8.0/21 maxlen: 24
196.10.16.0/20 maxlen: 24
196.10.32.0/20 maxlen: 24
196.10.48.0/23 maxlen: 24
196.10.50.0/24 maxlen: 24
196.29.128.0/19 maxlen: 24
196.45.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820 (0xeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627BD6AF, serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Validity
Not Before: Jul 30 10:53:34 2026 GMT
Not After : Nov 11 10:53:34 2027 GMT
Subject: CN=6a6b2d32-9194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:0b:5c:51:75:24:4e:7c:dd:09:90:72:aa:
83:bf:df:b8:85:7b:08:9c:5d:40:75:96:c1:e5:36:
b4:6b:5d:0f:e9:ef:0b:41:36:0a:6f:32:b1:85:89:
92:c2:3f:ac:45:b9:52:0d:23:bb:ed:78:5d:fb:e1:
a3:4d:8d:7e:3a:fa:97:3d:a6:ac:7a:85:d9:73:6b:
9f:1a:5c:9e:d8:e9:51:ea:13:7a:be:8a:7e:0f:71:
12:6d:e8:14:22:46:bc:12:15:1b:65:53:dc:98:3c:
e7:93:67:1a:3e:f3:75:bf:6b:bc:10:48:06:43:1c:
55:e0:16:12:8d:f7:b6:ce:06:d6:ca:a0:97:ea:d6:
71:f1:cf:f6:bf:c6:9f:b8:73:f6:9f:36:d2:ba:ad:
58:e8:5d:46:dc:91:92:d8:cb:68:a7:a3:95:de:2f:
c8:87:f3:eb:f2:4a:3e:f3:6a:19:1c:76:bc:15:49:
98:fe:e9:be:9a:a3:49:bb:fb:9a:61:07:54:35:56:
a5:a8:53:7c:ba:00:92:be:9a:07:e0:4b:20:d2:2d:
9c:eb:63:a9:a3:df:77:63:f9:7e:6f:46:05:65:a5:
c2:cb:20:c0:09:9f:d0:21:09:e0:98:12:f5:c9:45:
56:b7:23:80:bf:9d:e6:67:9b:dd:64:1a:f7:e2:da:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7F:8A:94:55:27:48:24:4C:E4:B6:D9:3E:96:17:35:61:0E:19:F3
X509v3 Authority Key Identifier:
keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/EB25E9D68C0411F19C46D7CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.4.250.0/23
196.10.1.0-196.10.50.255
196.29.128.0/19
196.45.168.0/21
Signature Algorithm: sha256WithRSAEncryption
87:3b:2a:96:bf:b7:98:3d:6b:16:27:a9:db:01:4c:a4:cd:76:
00:1c:32:b8:4a:91:d1:86:6a:1f:05:c7:6a:75:0c:4c:c8:ca:
68:ff:2d:68:1e:5f:51:c5:e6:6a:8e:4f:a4:4d:9e:3e:ce:44:
29:16:ff:2a:cb:0a:ac:0b:bd:12:cb:7a:c4:ff:77:e3:d2:6c:
b7:95:dc:3c:32:c4:19:d7:f4:78:56:4d:a7:d6:77:da:bb:79:
3a:d8:f2:17:31:2d:0f:bb:61:8e:cb:a8:41:05:dc:71:03:28:
c0:b0:6b:69:65:57:5d:71:a3:f0:70:ea:93:38:8e:6a:44:b3:
46:e3:ab:17:89:ab:fa:97:f2:1a:e6:56:38:9b:27:7f:38:11:
24:70:16:4d:42:78:2e:4c:58:87:24:d8:da:2c:cf:0c:f2:54:
c7:be:fb:3b:7b:a8:12:bd:c6:82:fa:bc:b0:83:28:ba:ed:d1:
33:a4:19:ce:d6:7f:02:2d:4d:09:4a:08:97:28:85:d5:ce:d4:
03:0d:80:68:d1:e6:bb:1e:b4:02:7a:84:5b:8a:8b:66:f7:89:
52:89:99:9d:95:a8:7a:23:99:95:d2:1c:77:34:13:5a:7f:86:
f8:aa:53:72:0e:da:49:6f:0b:05:e1:06:40:a8:42:b0:d1:90:
8f:1a:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:19 2026 by rpki-client