Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/D826BAD88C0C11F1A13F45FCCE1D38B0.roa
File: D826BAD88C0C11F1A13F45FCCE1D38B0.roa (raw, json)
Hash identifier: 9QqlWmnEmxP6gLXKbtzbA4s66tNMyPAm+7X7CB/+vVU=
Subject key identifier: FA:28:0D:1F:BC:B7:8E:C1:09:C4:81:E4:37:A2:61:81:4E:8D:30:D8
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 11C1
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/D826BAD88C0C11F1A13F45FCCE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:50:22 +0000
ROA not before: Thu 30 Jul 2026 11:50:18 +0000
ROA not after: Fri 15 Nov 2030 11:50:18 +0000
asID: 37708
IP address blocks: 196.192.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4545 (0x11c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF, serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Jul 30 11:50:18 2026 GMT
Not After : Nov 15 11:50:18 2030 GMT
Subject: CN=6a6b3a7e-e01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:8e:84:8c:4e:c4:69:6b:42:d4:1b:50:33:
b2:fb:c3:03:96:97:c4:d6:21:f3:92:08:ed:e1:b5:
73:29:55:17:87:12:80:f4:dd:2f:9b:40:bd:84:84:
db:c5:89:cd:4d:37:71:a8:bc:8e:d5:d6:a8:c0:ce:
99:70:51:8d:80:e4:b9:eb:ca:58:a2:1b:61:24:25:
50:77:ef:a3:8c:22:2a:83:d5:12:da:45:a6:63:52:
87:0b:ca:aa:fe:a3:fc:4a:e1:ea:e0:82:fb:f4:0a:
c5:88:2c:68:8b:0e:a0:bb:36:e7:c5:51:4f:cb:3f:
17:81:8c:7b:61:0f:4e:2d:12:b6:75:b9:02:df:7f:
34:a9:75:00:be:70:44:42:1c:df:91:3b:ab:90:5b:
74:9c:ad:0e:86:9a:d8:35:4a:e6:8e:e5:ec:d7:6e:
9e:02:08:49:22:45:13:c9:20:c0:27:60:a5:6c:a0:
ea:99:1e:cb:6b:be:7a:51:a6:5d:36:5c:89:c8:76:
a8:62:32:30:7f:70:36:a8:26:e0:21:05:ce:57:19:
52:d2:24:f5:5d:73:d4:c7:02:6b:69:46:3e:40:82:
1d:47:25:4f:09:30:e7:ce:96:38:97:49:9e:51:84:
17:da:a8:fb:34:3f:26:24:a4:92:d5:7e:4b:78:8d:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:0D:1F:BC:B7:8E:C1:09:C4:81:E4:37:A2:61:81:4E:8D:30:D8
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/D826BAD88C0C11F1A13F45FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.192.143.0/24
Signature Algorithm: sha256WithRSAEncryption
82:73:8a:7a:8f:04:2a:c9:80:5c:f9:98:df:0b:bf:a4:14:4d:
79:27:20:5e:5f:0a:20:b8:1a:f2:73:2c:66:dd:59:d7:13:3a:
3b:ad:ab:8f:9c:00:63:3b:e8:41:ae:e1:7e:e4:3f:ce:35:3f:
05:62:22:0e:31:ea:94:ab:63:ed:53:b8:d0:43:69:77:8b:6e:
ec:f8:0f:ad:a4:99:5d:b9:e3:b8:e1:95:cc:2c:c4:89:84:3a:
59:9b:98:81:77:22:9a:fe:40:15:88:fc:2d:29:78:ad:24:d6:
10:49:96:d8:8f:b0:4b:26:25:bc:dd:cd:bc:95:f9:66:3f:e4:
8d:98:b4:3b:4a:29:cb:24:f9:10:bb:c7:92:3d:f7:2a:d3:fc:
e2:ad:ae:38:b6:ba:53:10:54:70:65:97:b1:c4:b0:d3:46:97:
99:6f:ec:c9:36:92:5f:09:7a:93:a7:ac:cd:96:c0:33:72:8d:
fe:a0:c7:29:8b:c9:e2:6d:f3:d0:e3:c8:7f:a6:40:18:46:94:
02:c9:ae:e2:44:00:f7:1a:62:81:13:dd:a1:b2:bf:16:9a:4d:
80:d0:33:3d:3b:b6:8a:c2:ff:65:06:bc:2d:bc:d2:ea:c2:a8:
4a:e8:7f:73:5c:2a:dc:59:a0:09:52:a2:66:fc:38:e1:d3:7d:
4a:48:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:18 2026 by rpki-client