Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/7BEBECA28C0711F1944332DBCE1D38B0.roa
File: 7BEBECA28C0711F1944332DBCE1D38B0.roa (raw, json)
Hash identifier: 0GdisvNBKAQVNYjNiaAy1vy/6cxgu3Qsnvbm2ot3VVg=
Subject key identifier: E6:41:2C:CB:79:0D:1E:0A:6F:D9:4D:4B:FB:1D:CB:5F:5F:6A:43:17
Certificate issuer: /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial: 085A
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/7BEBECA28C0711F1944332DBCE1D38B0.roa
Signing time: Thu 30 Jul 2026 11:12:00 +0000
ROA not before: Thu 30 Jul 2026 11:11:56 +0000
ROA not after: Sat 23 Sep 2028 11:11:56 +0000
asID: 37228
IP address blocks: 197.243.0.0/18 maxlen: 18
197.243.0.0/20 maxlen: 20
197.243.0.0/22 maxlen: 22
197.243.4.0/22 maxlen: 22
197.243.8.0/22 maxlen: 22
197.243.12.0/22 maxlen: 22
197.243.16.0/20 maxlen: 20
197.243.32.0/20 maxlen: 20
197.243.32.0/22 maxlen: 22
197.243.36.0/22 maxlen: 22
197.243.39.0/24 maxlen: 24
197.243.40.0/22 maxlen: 22
197.243.42.0/24 maxlen: 24
197.243.43.0/24 maxlen: 24
197.243.44.0/22 maxlen: 22
197.243.47.0/24 maxlen: 24
197.243.48.0/20 maxlen: 20
197.243.48.0/22 maxlen: 22
197.243.48.0/24 maxlen: 24
197.243.52.0/22 maxlen: 22
197.243.56.0/22 maxlen: 22
197.243.60.0/22 maxlen: 22
197.243.64.0/18 maxlen: 18
197.243.64.0/20 maxlen: 20
197.243.64.0/22 maxlen: 22
197.243.67.0/24 maxlen: 24
197.243.68.0/22 maxlen: 22
197.243.72.0/22 maxlen: 22
197.243.76.0/22 maxlen: 22
197.243.80.0/20 maxlen: 20
197.243.80.0/22 maxlen: 22
197.243.88.0/22 maxlen: 22
197.243.92.0/22 maxlen: 22
197.243.96.0/20 maxlen: 20
197.243.96.0/22 maxlen: 22
197.243.100.0/22 maxlen: 22
197.243.104.0/22 maxlen: 22
197.243.108.0/22 maxlen: 22
197.243.112.0/20 maxlen: 20
197.243.112.0/22 maxlen: 22
197.243.115.0/24 maxlen: 24
197.243.116.0/22 maxlen: 22
197.243.118.0/24 maxlen: 24
197.243.119.0/24 maxlen: 24
197.243.120.0/22 maxlen: 22
197.243.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363ADF7AF, serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Validity
Not Before: Jul 30 11:11:56 2026 GMT
Not After : Sep 23 11:11:56 2028 GMT
Subject: CN=6a6b3180-d1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:4b:ab:5c:04:a7:ec:20:67:d4:87:c0:e5:
e1:c4:a4:bb:00:33:dc:5f:e0:4a:ca:0a:f0:8d:9c:
e1:28:b8:ab:d5:23:90:3a:af:ff:e8:29:ff:de:1b:
8a:a1:ea:eb:98:91:a7:d1:4d:2d:91:b3:52:da:12:
91:c2:52:54:69:bb:b0:9f:9d:87:71:c8:e8:fd:c4:
9c:05:30:b0:09:c6:78:84:b8:43:89:8e:8e:13:4e:
a0:a0:a3:1b:da:a7:a8:da:81:9f:3d:15:36:57:30:
98:12:40:d1:6e:d3:7c:f3:fa:f3:9f:0e:8b:7c:5b:
77:a3:64:82:fe:d8:34:a7:61:f3:fe:ec:08:a3:06:
53:57:de:80:be:77:d0:f6:ce:fb:9c:03:c3:b2:94:
bd:6f:50:7f:5b:99:86:48:19:f2:c7:ad:68:70:14:
66:a2:1f:aa:80:00:aa:49:1f:d5:c4:bf:e6:74:4f:
3b:a5:43:3b:57:92:96:a9:94:5c:ec:4e:e8:f9:f8:
ff:c1:eb:37:a0:83:b2:dd:08:ed:83:96:96:e7:b8:
90:8b:96:5c:62:19:6e:5b:95:e0:dc:2b:a7:02:8c:
83:aa:e3:ad:b0:1f:c2:f2:3e:aa:e1:7a:02:4e:b7:
73:fa:a3:5b:2f:07:b6:7e:7d:c0:7f:b3:60:fb:9d:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:41:2C:CB:79:0D:1E:0A:6F:D9:4D:4B:FB:1D:CB:5F:5F:6A:43:17
X509v3 Authority Key Identifier:
keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/7BEBECA28C0711F1944332DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.243.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a6:07:e2:2a:c7:f9:69:13:c2:84:81:d2:d7:e2:7b:a9:2c:e7:
c3:ae:b1:17:ea:dc:06:95:9f:27:98:c8:3b:b3:77:59:2a:3b:
f1:0e:3f:18:84:43:d7:ff:ad:eb:b0:de:71:75:16:06:09:2b:
63:3d:6c:bf:cf:b2:d5:40:70:08:8d:ed:7a:1d:58:95:a4:39:
bd:7f:07:38:95:3e:d8:92:08:07:d4:33:3c:63:1b:16:a6:4c:
7f:f5:0f:76:e2:ae:e2:2a:65:8f:df:ab:58:9c:8a:65:94:a1:
dc:9c:e4:f5:4b:0d:b2:02:ac:08:e3:b2:49:f2:67:25:44:69:
23:7b:e8:94:a2:6f:d9:39:79:f9:1f:cf:da:6c:fa:55:4b:63:
47:90:05:76:06:a3:bc:84:15:a1:e3:20:92:41:f2:ab:78:28:
05:78:7a:8b:21:62:f1:6a:f5:17:79:d5:ff:59:6c:3b:7b:48:
16:e3:90:75:a0:a0:86:76:ab:c9:4f:90:2d:45:df:65:db:72:
00:fd:bd:a5:14:1b:79:6f:a2:c4:e9:b7:55:5e:a2:05:3f:d6:
33:db:90:5c:af:ec:23:72:91:a6:7b:70:68:46:2c:88:36:37:
72:5a:45:65:40:02:fa:5c:b3:43:1c:9c:22:01:ca:3c:a5:6d:
69:3e:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:20 2026 by rpki-client