Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/B04EF8EA8C0C11F1AF4E20FACE1D38B0.roa
File: B04EF8EA8C0C11F1AF4E20FACE1D38B0.roa (raw, json)
Hash identifier: Q2QHuFFMO/jZnVwHg1INuXVSTGfTI/bT6T/OXhno1jI=
Subject key identifier: C7:34:16:40:A4:2F:1D:93:3C:3A:F9:F3:33:7D:8E:A1:36:83:03:B0
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 11BF
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/B04EF8EA8C0C11F1AF4E20FACE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:49:15 +0000
ROA not before: Thu 30 Jul 2026 11:49:11 +0000
ROA not after: Fri 15 Nov 2030 11:49:11 +0000
asID: 37708
IP address blocks: 196.192.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4543 (0x11bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF, serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Jul 30 11:49:11 2026 GMT
Not After : Nov 15 11:49:11 2030 GMT
Subject: CN=6a6b3a3b-efc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:43:27:0d:63:77:d0:50:1f:d6:42:1c:fe:
f4:30:a1:fb:99:a9:e3:a7:1c:3a:74:68:2c:69:c2:
07:0d:34:49:82:ba:86:98:9c:82:4a:52:a5:eb:8b:
a9:a3:f9:c4:14:bf:8c:7c:b4:c9:21:1a:94:1b:10:
ef:ae:8c:68:7b:55:2b:58:c9:03:f7:53:66:dc:f1:
f5:8f:ee:f1:59:d5:05:0e:04:4d:73:05:bc:0d:56:
f5:db:d7:2d:41:42:ac:7c:c8:4d:ed:77:02:43:03:
e4:23:1e:39:bf:0c:ba:0c:48:91:7d:5b:3c:95:b7:
15:4f:0d:c7:3e:3c:42:05:89:d7:04:82:70:a1:c7:
42:c4:57:93:86:aa:e0:ad:aa:49:69:48:ad:ae:3c:
0e:38:1d:44:5c:69:8c:4e:76:0d:e6:33:26:b1:6c:
08:98:40:42:52:fc:dc:0b:2d:03:fa:65:eb:a6:d6:
65:80:be:f7:c5:e9:1d:7d:9c:39:92:59:93:ff:0e:
95:2a:e4:8d:9e:eb:ea:5c:d3:35:1d:e0:e7:fe:17:
24:26:c1:f0:58:7c:bd:44:6f:1d:85:0b:a9:3a:90:
a8:55:c5:26:ec:94:67:5a:13:bc:23:ff:24:42:7d:
46:00:f0:60:69:18:1d:81:f0:4a:3d:29:67:75:e6:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:34:16:40:A4:2F:1D:93:3C:3A:F9:F3:33:7D:8E:A1:36:83:03:B0
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/B04EF8EA8C0C11F1AF4E20FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.192.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5f:6b:8c:3d:49:46:3c:5c:11:03:22:97:d5:15:26:37:35:
45:3c:b5:3c:5b:af:09:73:55:76:59:3e:8e:aa:b3:9f:ef:06:
c3:1a:ad:4e:02:3d:70:39:29:02:b7:b0:ff:ab:6e:1f:73:e2:
5d:ea:f3:3b:21:3c:04:80:90:63:6c:d9:a1:f8:6b:50:58:e8:
17:95:11:a5:81:59:c4:21:44:60:02:82:86:81:14:7b:f4:bb:
61:2d:b6:c8:39:1a:80:e4:7e:7d:cb:57:d8:5b:54:73:81:a3:
22:69:e6:dd:08:01:6c:20:bf:cb:dc:7e:33:28:25:fb:13:fd:
c6:1e:8f:91:1c:08:b2:3d:cf:b5:70:96:fd:a7:51:36:fc:8b:
ed:67:ff:1b:ad:b8:a1:77:56:21:bf:9d:35:e1:33:9f:c3:08:
de:3f:97:0b:e6:4d:9b:72:4e:97:0a:83:a9:81:27:e1:26:92:
9c:8a:db:48:ab:ed:d7:78:7a:de:e3:5d:6b:78:1d:66:43:93:
3b:b6:5e:bc:dc:1d:51:9b:bc:53:a9:ed:c3:6c:86:48:ff:d5:
da:72:c5:75:17:88:44:3e:76:53:64:1e:96:20:4d:79:e8:6d:
e0:7d:3b:0f:65:ae:49:a3:96:88:74:27:ad:0b:c7:a5:cb:2d:
8e:af:63:10
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEb8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzREMjJBRjExMC8GA1UEBRMoOEQwMUQ4MDhFODk3NzQ1NDNERTIyRDBEQTg0NDM3
OEVDRUE4QkI5QjAeFw0yNjA3MzAxMTQ5MTFaFw0zMDExMTUxMTQ5MTFaMBgxFjAU
BgNVBAMTDTZhNmIzYTNiLWVmYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8qkMnDWN30FAf1kIc/vQwofuZqeOnHDp0aCxpwgcNNEmCuoaYnIJKUqXr
i6mj+cQUv4x8tMkhGpQbEO+ujGh7VStYyQP3U2bc8fWP7vFZ1QUOBE1zBbwNVvXb
1y1BQqx8yE3tdwJDA+QjHjm/DLoMSJF9WzyVtxVPDcc+PEIFidcEgnChx0LEV5OG
quCtqklpSK2uPA44HURcaYxOdg3mMyaxbAiYQEJS/NwLLQP6Zeum1mWAvvfF6R19
nDmSWZP/DpUq5I2e6+pc0zUd4Of+FyQmwfBYfL1Ebx2FC6k6kKhVxSbslGdaE7wj
/yRCfUYA8GBpGB2B8Eo9KWd15l2VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxzQW
QKQvHZM8OvnzM32OoTaDA7AwHwYDVR0jBBgwFoAUjQHYCOiXdFQ94i0NqEQ3js6o
u5swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM0RDIyLzFENUY3QzI2MDQ3MzExRTU4MEMxOEEwNkY4QUVBMjI4L2pRSFlD
T2lYZEZROTRpME5xRVEzanM2b3U1cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pRSFlDT2lYZEZROTRpME5xRVEzanM2b3U1cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjM0RDIyLzFENUY3QzI2MDQ3MzExRTU4MEMxOEEwNkY4
QUVBMjI4L0IwNEVGOEVBOEMwQzExRjFBRjRFMjBGQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEwIwwDQYJKoZIhvcNAQEL
BQADggEBACpfa4w9SUY8XBEDIpfVFSY3NUU8tTxbrwlzVXZZPo6qs5/vBsMarU4C
PXA5KQK3sP+rbh9z4l3q8zshPASAkGNs2aH4a1BY6BeVEaWBWcQhRGACgoaBFHv0
u2Ettsg5GoDkfn3LV9hbVHOBoyJp5t0IAWwgv8vcfjMoJfsT/cYej5EcCLI9z7Vw
lv2nUTb8i+1n/xutuKF3ViG/nTXhM5/DCN4/lwvmTZtyTpcKg6mBJ+EmkpyK20ir
7dd4et7jXWt4HWZDkzu2XrzcHVGbvFOp7cNshkj/1dpyxXUXiEQ+dlNkHpYgTXno
beB9Ow9lrkmjloh0J60Lx6XLLY6vYxA=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:19 2026 by rpki-client