Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/9A907F748BF311F1BBDD30E5CE1D38B0.roa
File: 9A907F748BF311F1BBDD30E5CE1D38B0.roa (raw, json)
Hash identifier: HvsDrFVjwdAzoichXUDqax+BsMWh1PW5e0hP8NO8oOw=
Subject key identifier: 9C:2D:EF:2E:2C:50:3B:AE:E2:21:5F:C6:9E:B7:66:A8:26:15:6A:66
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 11BD
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/9A907F748BF311F1BBDD30E5CE1D38B0.roa
Signing time: Thu 30 Jul 2026 08:49:41 +0000
ROA not before: Thu 30 Jul 2026 08:49:37 +0000
ROA not after: Thu 11 Jul 2030 08:49:37 +0000
asID: 37301
IP address blocks: 196.192.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4541 (0x11bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF, serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Jul 30 08:49:37 2026 GMT
Not After : Jul 11 08:49:37 2030 GMT
Subject: CN=6a6b1025-3125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:6b:6f:75:11:25:25:a8:3c:8f:ad:b2:54:
bf:98:cb:f8:87:f4:cf:c0:ea:cd:83:f8:a8:ea:f9:
61:02:42:d0:21:0a:fd:61:af:55:06:ce:47:b0:b9:
87:4b:a2:68:98:a1:c8:87:0a:d6:13:8a:c5:b1:c6:
bd:ad:17:ce:52:7a:e0:c2:80:13:ce:a3:82:ca:60:
6d:d0:c2:39:7e:d4:dd:e0:89:87:f8:32:f1:0c:dc:
a9:9f:c5:d7:00:00:14:67:8f:66:32:60:34:95:15:
2f:af:77:32:76:ee:44:4a:4a:db:2d:b1:ea:4e:7a:
00:b8:b6:24:7a:bf:47:43:5c:72:e0:2d:b2:99:43:
fd:71:23:84:36:c5:4d:91:74:d0:f4:88:59:f0:77:
32:6e:89:75:2e:89:1a:ea:e4:65:51:68:51:b0:a4:
44:5c:87:d2:c9:6c:a7:a6:41:22:0d:ba:19:fd:23:
bc:04:d6:da:86:be:54:bd:08:d8:fd:fa:4c:67:1c:
1b:f3:2a:58:1e:2e:f7:c1:36:d5:67:f9:2b:c0:54:
f9:9d:f6:ae:32:a5:8e:61:4c:57:2a:c5:f9:05:20:
3d:26:43:9f:05:44:c0:35:90:5d:cf:6d:c4:8b:26:
b9:c1:0d:e1:5f:b3:f3:05:72:1a:3c:0b:17:13:e4:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:EF:2E:2C:50:3B:AE:E2:21:5F:C6:9E:B7:66:A8:26:15:6A:66
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/9A907F748BF311F1BBDD30E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.192.142.0/24
Signature Algorithm: sha256WithRSAEncryption
76:85:1a:be:93:00:56:68:89:83:b3:ab:ef:38:90:67:fa:91:
d6:22:49:b9:0a:ef:ca:28:22:5b:97:69:bc:7d:39:49:53:89:
89:8a:fc:59:c8:a2:05:99:03:ac:4f:f8:cb:41:cc:5e:8c:70:
14:3e:84:54:eb:ab:20:01:6a:e8:48:aa:12:ff:3d:9b:84:39:
72:4f:ab:ab:d7:17:61:20:0f:06:5c:a5:e4:7c:d5:4c:e1:5d:
01:bc:09:27:1a:9d:71:fe:5a:59:db:39:7f:c4:e4:88:10:a6:
c7:51:d9:95:d7:a8:f4:44:8c:79:8a:ca:b6:70:e2:8e:7b:66:
03:0c:0b:52:27:70:4c:43:11:93:de:41:40:7b:88:03:6c:ff:
9e:ce:b0:3c:94:82:3b:b3:fe:87:6e:25:aa:f1:b4:30:99:9a:
2b:01:f7:f2:bc:49:8b:91:57:e1:13:9f:86:97:0f:6f:62:9e:
05:b0:df:ba:00:eb:27:f8:17:d2:59:a1:33:ec:25:08:ee:61:
6f:5c:a4:73:e0:1b:5e:3a:33:91:eb:2d:27:6f:e3:99:b0:73:
c7:4d:b1:55:0d:d7:38:df:e2:53:36:64:68:c4:02:4c:79:cc:
10:79:02:1b:e0:14:73:df:97:99:87:70:dd:9b:cc:05:da:40:
07:5f:dc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:32 2026 by rpki-client