Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/05D611328F0E11F185B6EBCECE1D38B0.roa
File: 05D611328F0E11F185B6EBCECE1D38B0.roa (raw, json)
Hash identifier: JHqcOZLM9F7FDgRQ1QjwVE0kMOUnIfAnPM0M+bayILY=
Subject key identifier: AC:B7:89:43:63:08:F4:BE:CE:58:A7:40:71:AE:0A:F4:A1:99:6E:41
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 079E
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/05D611328F0E11F185B6EBCECE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:36:22 +0000
ROA not before: Mon 03 Aug 2026 07:36:18 +0000
ROA not after: Wed 30 Sep 2026 07:36:18 +0000
asID: 328913
IP address blocks: 196.49.84.0/24 maxlen: 24
2001:43fe:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 3 07:36:18 2026 GMT
Not After : Sep 30 07:36:18 2026 GMT
Subject: CN=6a7044f6-daa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:d0:40:2e:4b:29:7f:4a:3e:30:46:3d:c3:
85:90:3e:dd:6e:8a:83:88:fc:de:58:a5:45:37:e3:
0b:e9:bf:1b:71:61:f9:c9:59:34:d9:7e:34:2f:65:
cd:ec:77:bc:5e:59:de:a1:13:82:be:cc:44:44:3b:
e2:52:01:f2:79:1f:12:bc:74:41:2e:3e:93:f2:57:
98:03:03:ed:e4:ad:ab:39:ef:96:9c:44:60:bc:47:
73:b6:ec:9a:91:5f:f1:84:5d:22:96:85:cb:1b:b3:
17:dd:f3:9f:51:64:1b:1a:52:5f:66:2f:2a:d4:cd:
3f:d2:f9:09:ff:b2:50:60:1d:bc:ad:cd:4a:dc:ca:
85:84:a0:f9:b0:53:85:e1:09:ea:7e:4a:8f:19:57:
a9:5f:94:e5:b9:6c:f7:fd:ba:8e:65:34:17:49:67:
fe:bb:88:8a:59:ff:34:fb:48:07:59:82:8d:f3:6f:
e0:09:c5:df:db:48:aa:70:f2:29:52:95:cb:f2:59:
1e:9a:cc:0d:2f:f0:24:7e:fd:11:45:04:d7:9e:14:
e3:48:21:b8:0f:d5:38:dd:c6:92:79:fc:5b:05:74:
34:35:52:55:db:a1:07:8a:d1:ed:2c:59:da:ab:1a:
6e:10:3b:ac:ce:b3:fe:2b:d9:dd:81:d9:11:b3:d4:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B7:89:43:63:08:F4:BE:CE:58:A7:40:71:AE:0A:F4:A1:99:6E:41
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/05D611328F0E11F185B6EBCECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.84.0/24
IPv6:
2001:43fe:c000::/48
Signature Algorithm: sha256WithRSAEncryption
37:aa:21:ed:75:fe:eb:22:1f:5f:db:b4:03:d0:ae:70:6f:c5:
d4:66:c6:e5:4e:33:5d:72:88:16:89:ca:c3:14:2c:2d:42:14:
0f:bf:05:8e:ad:2f:1a:73:89:92:36:3d:8f:67:0c:1a:60:e1:
e6:af:24:29:07:04:80:03:d4:35:66:ae:d1:98:48:56:8b:6a:
c9:ef:40:52:b8:08:da:40:f2:7c:cf:6c:0c:86:18:f4:60:ee:
33:19:7f:fd:9e:66:79:fe:45:bd:63:94:56:34:6a:97:02:dc:
a1:a0:53:f2:69:4e:c0:78:5f:29:8a:ab:6b:49:60:18:a7:4c:
b6:a5:e7:23:de:fa:12:ba:43:89:bf:d8:c5:f2:8a:a1:ea:cb:
80:24:f7:f2:5b:0d:77:dd:a4:00:3d:7b:a7:e6:d1:c2:26:21:
47:03:cd:72:df:f5:97:c2:9f:0c:4b:90:0b:e3:42:e8:6e:c9:
19:7b:17:76:ce:c5:a7:46:fa:a1:a1:ec:a6:d7:fc:c4:0a:91:
1e:fe:9c:82:5d:31:6b:2f:3c:46:ea:14:7b:0d:70:8b:e9:aa:
3d:0d:74:55:af:48:ed:cb:01:17:9f:e7:7a:64:b1:b5:b1:80:
ec:af:b3:d3:01:17:a2:a4:f0:fd:5d:5f:35:14:9e:11:07:9b:
c1:a5:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:18 2026 by rpki-client