Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/C76433F68B7111F1BB81E8C3CE1D38B0.roa
File: C76433F68B7111F1BB81E8C3CE1D38B0.roa (raw, json)
Hash identifier: Jyo6mTt5D+siT/5Sy486p7UlD/qKwUVTTEmDw7nQRpU=
Subject key identifier: 98:BD:67:6D:17:27:07:C8:FB:FE:49:52:AA:95:33:72:82:15:B9:30
Certificate issuer: /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial: 0816
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/C76433F68B7111F1BB81E8C3CE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:20:22 +0000
ROA not before: Wed 29 Jul 2026 17:20:18 +0000
ROA not after: Sat 31 Dec 2033 17:20:18 +0000
asID: 37738
IP address blocks: 154.70.200.0/21 maxlen: 21
2c0f:5400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Validity
Not Before: Jul 29 17:20:18 2026 GMT
Not After : Dec 31 17:20:18 2033 GMT
Subject: CN=6a6a3656-f993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:5b:ee:19:60:49:24:38:a4:95:04:30:e7:
00:bd:99:18:5e:78:71:4d:4d:1e:99:d0:69:39:47:
e3:62:5e:86:69:08:d5:46:39:2a:43:89:69:35:7c:
cd:3a:7a:18:6b:db:8d:40:22:c1:8a:28:a3:36:74:
5a:10:0c:f9:55:b7:6d:01:51:dc:a4:69:5b:03:08:
75:68:8b:71:d9:ec:e2:da:49:bb:e8:97:c3:8a:23:
18:10:08:58:f7:87:1c:e8:3a:7f:6e:2a:4f:cc:de:
1a:f1:63:6e:bc:e2:74:5e:24:38:e0:77:ad:3d:61:
bd:eb:15:27:af:d9:b6:d9:4e:09:b1:6e:33:e9:28:
ba:8a:ec:32:79:80:01:0a:a8:a2:37:8f:1a:18:00:
51:b7:b5:06:45:0c:a7:74:06:20:d7:71:d3:43:e5:
80:af:b8:ad:15:1e:dd:46:27:80:b0:1c:ff:d7:60:
2a:ef:b5:5a:16:df:a2:62:c9:94:79:08:d0:13:04:
d3:73:0f:c5:08:13:b0:57:da:ef:86:4a:a5:00:c4:
23:bb:ec:e0:81:0e:71:11:b9:ba:48:ac:3f:21:2d:
a0:c5:c8:b5:08:80:f9:82:7f:11:49:61:2a:96:65:
fc:0b:0c:20:26:a4:82:0b:22:34:18:d4:a1:69:ef:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BD:67:6D:17:27:07:C8:FB:FE:49:52:AA:95:33:72:82:15:B9:30
X509v3 Authority Key Identifier:
keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/C76433F68B7111F1BB81E8C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.200.0/21
IPv6:
2c0f:5400::/32
Signature Algorithm: sha256WithRSAEncryption
71:21:ec:df:0b:31:5c:2b:8b:5a:de:e6:a2:eb:bf:1a:bc:e0:
2e:f6:9d:a9:36:de:2c:85:a4:86:63:24:d3:2d:cd:c8:2f:52:
0f:80:a3:0e:9e:c9:34:de:25:5d:90:7f:d2:af:b7:3b:57:37:
d0:7f:fc:0a:eb:8f:60:93:36:b7:cd:b0:d4:e8:3f:65:26:d4:
ed:3d:3d:7f:5f:25:f4:c5:73:cd:9e:dd:93:d2:a5:a6:9c:4c:
52:d4:7e:67:0f:28:1f:4e:98:d0:e3:b0:0d:7d:c7:b1:5e:d9:
60:7a:1f:35:46:29:2f:45:9a:cc:bd:6e:d1:a4:6c:d6:07:78:
64:55:06:08:f7:9d:96:90:78:a4:92:b6:13:47:64:b6:52:f4:
1f:8b:f8:55:c2:4a:7f:38:ce:1c:2a:1d:5a:a1:65:a7:5f:81:
9b:ac:f8:05:93:fa:1d:47:af:05:40:26:13:06:59:a4:0a:d6:
cd:2b:8e:72:4d:36:1c:d3:9e:ea:cb:4c:64:3e:a1:5d:1c:7b:
5b:35:c6:7d:bd:d0:2b:3c:12:aa:be:1d:1a:d0:e6:f5:cd:72:
9d:c3:5b:11:d8:94:c3:ae:d1:87:26:27:73:18:86:02:4c:f8:
d7:02:6b:41:40:d5:dc:88:aa:b9:3a:3e:fe:f7:1d:b9:d3:54:
c3:50:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:14 2026 by rpki-client