Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/B39CD71E8C2111F1BC117FFACE1D38B0.roa
File: B39CD71E8C2111F1BC117FFACE1D38B0.roa (raw, json)
Hash identifier: h10DexEobmdM4gW17VPgUNBUXUHclUvgqVJ9JTvZJTI=
Subject key identifier: D9:9B:0F:A3:06:B0:B9:52:40:74:B7:59:41:1A:86:0F:DC:89:31:39
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 056F
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/B39CD71E8C2111F1BC117FFACE1D38B0.roa
Signing time: Thu 30 Jul 2026 14:19:40 +0000
ROA not before: Thu 30 Jul 2026 14:19:36 +0000
ROA not after: Fri 02 Oct 2026 14:19:36 +0000
asID: 33763
IP address blocks: 197.234.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 11 Aug 2026 03:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1391 (0x56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Jul 30 14:19:36 2026 GMT
Not After : Oct 2 14:19:36 2026 GMT
Subject: CN=6a6b5d7c-ff40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:e2:35:94:c7:8b:c0:b3:fc:6b:5e:39:e9:
9c:41:d4:21:49:d6:f9:54:19:23:0e:b4:a5:3e:c8:
7f:13:e4:10:f1:35:0d:c7:7e:db:75:ac:7d:ae:f7:
5b:31:6b:1e:28:ef:0e:9f:ef:ff:77:2d:4b:13:b2:
2e:10:6b:bb:1a:da:e3:d1:c8:cb:67:e1:22:62:26:
76:ee:f1:66:a4:fa:9f:df:08:f7:fb:91:b5:bb:71:
62:b7:e6:5f:da:5d:45:6a:5f:ff:88:c2:bb:c2:5a:
ab:99:d7:d8:52:5c:f9:67:0a:c9:be:91:91:39:38:
c8:89:a8:24:4d:76:87:a7:4b:59:f5:47:89:4c:08:
58:0c:72:91:89:6f:be:9a:67:05:21:54:71:d9:28:
b9:fc:55:25:8e:1a:82:fa:35:0b:d6:17:59:80:66:
86:52:4f:da:9c:06:af:00:be:04:b3:bb:e5:56:dd:
3f:a3:67:63:63:b0:95:d7:db:a8:5a:ec:c4:c2:40:
a3:3b:dc:17:5c:4e:34:1c:4b:65:2a:e1:bc:56:f3:
d7:9d:52:e7:59:0a:aa:16:b1:5b:25:b7:43:83:0d:
0a:82:41:51:44:87:9a:cb:d1:16:01:68:d8:14:42:
2a:6c:a0:b3:14:ea:b7:09:c8:2f:ba:f2:a3:31:20:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:0F:A3:06:B0:B9:52:40:74:B7:59:41:1A:86:0F:DC:89:31:39
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/B39CD71E8C2111F1BC117FFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.112.0/20
Signature Algorithm: sha256WithRSAEncryption
70:19:4e:84:68:f6:a4:01:32:02:e8:8f:c6:c9:82:4b:1d:7a:
10:37:92:84:fd:4a:62:96:db:35:f2:8b:51:cd:bf:5f:a1:b1:
d8:fe:83:e0:8c:34:0f:3a:6d:c9:b7:08:f4:42:50:32:70:c5:
25:c2:59:f4:3d:5e:e7:36:85:21:43:84:e5:16:ef:fb:79:ed:
a1:cd:39:ef:88:77:96:a0:9f:fd:df:0f:7b:a2:28:21:e5:37:
c5:10:24:fc:4d:24:78:77:e5:52:4e:55:a8:3c:32:f7:1f:5e:
e8:d0:4d:8e:10:b8:55:dc:92:04:c0:09:10:4d:41:3a:8d:0b:
3c:ec:44:be:f5:97:d9:5c:63:92:59:8b:35:f3:14:26:0a:97:
e3:85:ab:71:aa:9d:25:22:32:b4:b7:ec:2e:25:80:6f:23:54:
ac:43:2f:16:ae:a8:ac:a7:62:21:df:fb:4c:e1:72:14:dc:cf:
ac:af:a8:87:82:d4:c6:ab:2d:e4:b7:fe:fc:3e:e8:9c:7c:dd:
8f:f4:50:39:a6:88:db:08:23:93:69:12:d0:1b:7e:c1:62:e2:
01:68:ce:26:88:e7:e3:aa:13:df:13:4a:42:9d:5d:1f:4e:72:
fb:e1:31:89:b8:48:51:14:21:8b:e7:70:d8:0e:ef:c9:74:b5:
7e:a4:f2:5d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODg2QjNBRjExMC8GA1UEBRMoM0Q2RUQ5MDUwMzdDODNDNTczNzgwQjBDQ0RDNzBE
NUQ4Q0VGMDM4QjAeFw0yNjA3MzAxNDE5MzZaFw0yNjEwMDIxNDE5MzZaMBgxFjAU
BgNVBAMTDTZhNmI1ZDdjLWZmNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHduI1lMeLwLP8a1456ZxB1CFJ1vlUGSMOtKU+yH8T5BDxNQ3Hftt1rH2u
91sxax4o7w6f7/93LUsTsi4Qa7sa2uPRyMtn4SJiJnbu8Wak+p/fCPf7kbW7cWK3
5l/aXUVqX/+IwrvCWquZ19hSXPlnCsm+kZE5OMiJqCRNdoenS1n1R4lMCFgMcpGJ
b76aZwUhVHHZKLn8VSWOGoL6NQvWF1mAZoZST9qcBq8AvgSzu+VW3T+jZ2NjsJXX
26ha7MTCQKM73BdcTjQcS2Uq4bxW89edUudZCqoWsVslt0ODDQqCQVFEh5rL0RYB
aNgUQipsoLMU6rcJyC+68qMxIBrrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2ZsP
owawuVJAdLdZQRqGD9yJMTkwHwYDVR0jBBgwFoAUPW7ZBQN8g8VzeAsMzccNXYzv
A4swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4NkIzLzM1MzVDQTFBQjhFRjExRURBOUIzNDFEQUYxMjIyNDY4L1BXN1pC
UU44ZzhWemVBc016Y2NOWFl6dkE0cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BXN1pCUU44ZzhWemVBc016Y2NOWFl6dkE0cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjg4NkIzLzM1MzVDQTFBQjhFRjExRURBOUIzNDFEQUYx
MjIyNDY4L0IzOUNENzFFOEMyMTExRjFCQzExN0ZGQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATF6nAwDQYJKoZIhvcNAQEL
BQADggEBAHAZToRo9qQBMgLoj8bJgksdehA3koT9SmKW2zXyi1HNv1+hsdj+g+CM
NA86bcm3CPRCUDJwxSXCWfQ9Xuc2hSFDhOUW7/t57aHNOe+Id5agn/3fD3uiKCHl
N8UQJPxNJHh35VJOVag8MvcfXujQTY4QuFXckgTACRBNQTqNCzzsRL71l9lcY5JZ
izXzFCYKl+OFq3GqnSUiMrS37C4lgG8jVKxDLxauqKynYiHf+0zhchTcz6yvqIeC
1MarLeS3/vw+6Jx83Y/0UDmmiNsII5NpEtAbfsFi4gFoziaI5+OqE98TSkKdXR9O
cvvhMYm4SFEUIYvncNgO78l0tX6k8l0=
-----END CERTIFICATE-----
Generated at Sun Aug 9 21:42:38 2026 by rpki-client