Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/7B2B12CA8F0E11F19E7DA0D2CE1D38B0.roa
File: 7B2B12CA8F0E11F19E7DA0D2CE1D38B0.roa (raw, json)
Hash identifier: c7ABKjga7ftTeyuGkEns4bFIt3/+Iuuxzp8gKujxg2s=
Subject key identifier: F1:88:EC:DE:D7:F9:32:34:8E:D9:99:51:E2:97:62:24:5D:60:08:D3
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 07A0
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/7B2B12CA8F0E11F19E7DA0D2CE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:39:39 +0000
ROA not before: Mon 03 Aug 2026 07:39:35 +0000
ROA not after: Wed 30 Sep 2026 07:39:35 +0000
asID: 37790
IP address blocks: 196.60.84.0/24 maxlen: 24
2001:43fd:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 3 07:39:35 2026 GMT
Not After : Sep 30 07:39:35 2026 GMT
Subject: CN=6a7045bb-6492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:f5:1e:1d:18:82:c1:66:1a:ae:71:6f:8a:
83:0a:c5:3e:60:c3:81:e2:4c:33:58:bc:5b:e3:a9:
7a:5a:4b:18:aa:e2:5d:aa:2e:67:47:44:62:fd:a0:
0c:25:0e:05:c1:85:28:b9:6d:48:a2:62:71:a5:a3:
ae:6b:ec:0e:ed:f7:09:04:6d:2b:04:38:4b:f3:d8:
54:ed:7a:66:f4:42:7d:eb:8b:82:db:0b:95:e7:f9:
0c:52:a2:03:2a:c8:77:f4:41:e1:c2:21:61:4a:f4:
7c:a4:ef:32:75:46:8a:ae:66:23:66:a6:5c:55:11:
81:fd:cf:52:ab:75:d7:1b:9d:25:b0:c5:68:71:e2:
80:b4:da:e0:cf:25:59:26:7c:9e:cd:7d:a2:66:50:
fb:3a:52:d5:fc:c4:e5:27:83:6a:7f:e3:02:31:b9:
2b:ff:bf:53:f8:f6:36:01:c1:a7:35:bb:9e:3c:45:
50:c4:44:8f:7d:64:e5:ed:8e:44:f3:4c:24:ca:ea:
b9:ee:3d:36:27:0f:9b:34:22:71:60:f2:61:63:ff:
d2:4b:2b:8f:0a:98:6a:37:4e:59:51:59:f2:0c:88:
e3:28:67:9c:47:0f:42:31:14:09:4c:55:f2:3f:84:
04:39:04:d4:8e:57:4a:75:88:58:db:8c:af:b2:eb:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:88:EC:DE:D7:F9:32:34:8E:D9:99:51:E2:97:62:24:5D:60:08:D3
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/7B2B12CA8F0E11F19E7DA0D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.84.0/24
IPv6:
2001:43fd:c000::/48
Signature Algorithm: sha256WithRSAEncryption
94:f3:68:33:ad:11:5b:8d:e8:75:79:eb:26:e4:c9:0b:c7:e3:
b4:fe:6e:dd:bd:06:9d:e6:66:17:8a:f3:46:be:6b:65:17:02:
04:ac:2c:76:dd:c2:58:4a:b2:13:ca:76:56:d0:2a:d9:5f:8b:
76:4c:cd:8d:a0:74:e7:b5:80:be:28:9c:61:2b:79:89:09:63:
ea:e5:68:b7:81:8e:5f:df:16:1a:40:08:da:2d:03:b6:82:5f:
3f:1c:87:c9:d6:58:54:36:46:d3:b8:c2:96:f7:d3:f3:97:bd:
24:71:29:7f:ae:20:fd:ce:d0:7d:96:a0:72:7f:82:f9:75:88:
f3:4c:8d:b8:af:e8:a0:05:46:5f:c5:d2:9a:ae:fb:93:29:65:
75:64:f5:6b:8f:f3:75:88:96:f2:79:2f:34:48:c4:77:49:9c:
86:ac:ea:2f:79:e5:b5:2b:d7:10:90:ab:f8:4c:05:3f:aa:4f:
d4:d7:a9:c0:e5:d2:46:5f:96:c0:72:db:0d:03:5e:99:ca:b9:
6d:a6:b8:49:12:55:1b:e3:cf:a0:94:89:11:b3:01:23:43:e6:
da:ce:57:16:e5:38:20:fc:54:1c:93:a9:e3:68:c0:ef:94:43:
4d:cb:90:de:a3:5a:8d:0e:9b:b5:34:fa:4c:cb:7a:71:df:e3:
87:2e:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:21 2026 by rpki-client