Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/74CDD684917911F1BCB1E8F7CE1D38B0.roa
File: 74CDD684917911F1BCB1E8F7CE1D38B0.roa (raw, json)
Hash identifier: 0I0erLU4AW8ZqmplgEqAGN31m3+gj97IY5scRzBt2oQ=
Subject key identifier: 0E:33:51:3E:4D:A0:38:C1:B7:0B:55:28:AC:0C:20:AD:E7:B6:DB:54
Certificate issuer: /CN=F36A8AA3AF/serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Certificate serial: 03DA
Authority key identifier: BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/74CDD684917911F1BCB1E8F7CE1D38B0.roa
Signing time: Thu 06 Aug 2026 09:30:27 +0000
ROA not before: Thu 06 Aug 2026 09:30:23 +0000
ROA not after: Mon 06 Aug 2029 09:30:23 +0000
asID: 37484
IP address blocks: 197.155.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A8AA3AF, serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Validity
Not Before: Aug 6 09:30:23 2026 GMT
Not After : Aug 6 09:30:23 2029 GMT
Subject: CN=6a745432-b34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:7e:77:8d:42:30:7b:b7:63:94:c0:c6:dd:
77:97:c9:6f:44:ae:78:fa:c0:11:f0:e2:7a:f0:8c:
98:77:10:1f:2d:04:c8:dc:13:e4:00:26:8e:79:d3:
1c:5c:4e:8c:8b:b9:aa:26:3f:ff:73:e3:3a:4f:12:
32:d6:b4:6e:9d:a7:3c:12:43:b1:b1:df:77:14:6b:
8b:e9:8e:73:22:dd:ba:16:8a:c3:ed:21:88:b8:3b:
0c:54:c3:58:e9:f1:ed:4c:ac:14:10:76:17:51:72:
65:cb:71:1e:a2:1a:36:57:26:de:28:57:5f:46:0c:
9c:8e:48:7d:c7:e3:fb:cb:36:88:6d:3b:a5:54:16:
04:ec:2a:03:7a:6a:99:e8:7b:a9:b5:8e:6e:77:b6:
3d:27:50:14:c5:ef:8a:86:92:d7:1b:72:a4:96:2d:
ae:b6:a2:26:7b:36:8f:7d:e4:a9:0c:96:ff:70:27:
f0:fd:31:63:8e:a4:46:59:2a:e9:53:65:bf:c3:b4:
68:96:70:c0:05:b6:17:8f:05:d9:a0:09:18:70:20:
55:7b:8e:ec:c7:8f:20:3b:bd:2d:5f:eb:9d:30:8c:
b0:e3:95:16:7d:dd:94:ee:57:50:fd:e5:23:fa:03:
6c:3c:6a:d7:cf:76:db:f4:ce:35:28:30:19:c0:cd:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:51:3E:4D:A0:38:C1:B7:0B:55:28:AC:0C:20:AD:E7:B6:DB:54
X509v3 Authority Key Identifier:
keyid:BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/74CDD684917911F1BCB1E8F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.155.32.0/19
Signature Algorithm: sha256WithRSAEncryption
90:46:89:65:6f:e0:a7:ca:54:69:da:fa:44:f2:4a:bc:92:e3:
65:d1:8a:87:0f:2f:c9:57:00:85:49:32:4a:ab:c7:4c:d5:48:
a2:83:50:7c:7d:8d:82:a9:ec:79:ec:05:79:3c:f9:91:7b:4d:
c3:27:22:df:2d:4c:75:cd:e7:6b:2d:cf:01:bd:ef:66:95:31:
25:60:ff:00:7d:33:bb:b1:cc:ea:98:72:c5:55:90:da:23:74:
be:48:a3:96:05:8c:f5:65:50:89:89:2e:2c:39:25:42:47:dc:
31:71:78:c1:b1:90:d6:aa:f1:ce:42:1f:f6:c6:5f:b7:d2:c9:
6b:e1:f9:7e:92:f8:a5:84:da:5f:00:28:fd:07:6a:1f:fb:6c:
7d:4a:dc:80:f9:e2:2f:23:6c:c1:77:53:37:14:ce:cc:a3:f7:
4e:57:c1:18:8b:94:93:37:f4:96:4e:70:1b:9f:5e:7c:3b:98:
ab:9a:3a:d6:8d:03:06:d0:3b:04:e2:ef:3f:cb:e4:e6:d9:03:
0d:3d:23:a1:5d:65:f0:ae:f4:d5:78:43:7c:bc:06:11:a8:4a:
4e:39:45:c1:91:ff:27:74:36:7a:4b:89:d3:8c:c8:0d:64:8a:
32:8a:e2:30:06:9e:4f:ae:ae:91:01:0d:39:3e:ea:fb:d5:25:
ce:df:39:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:19 2026 by rpki-client