Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/FD84D3D88D7811F1965C44B1CE1D38B0.roa
File: FD84D3D88D7811F1965C44B1CE1D38B0.roa (raw, json)
Hash identifier: TocmYaJ25J1vTMAOAqkPqmFhR4cID/vjlusmGxJroKY=
Subject key identifier: 70:EF:D2:69:6E:ED:D8:34:C4:5A:F6:97:22:9A:FA:17:E7:89:6B:34
Certificate issuer: /CN=F36B4943AF/serialNumber=3876135BFCA9AAF0B00B42D87651846E70AC4785
Certificate serial: 05B5
Authority key identifier: 38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/FD84D3D88D7811F1965C44B1CE1D38B0.roa
Signing time: Sat 01 Aug 2026 07:17:02 +0000
ROA not before: Sat 01 Aug 2026 07:16:58 +0000
ROA not after: Tue 14 Sep 2032 07:16:58 +0000
asID: 327950
IP address blocks: 196.223.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
rsync://rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B4943AF, serialNumber=3876135BFCA9AAF0B00B42D87651846E70AC4785
Validity
Not Before: Aug 1 07:16:58 2026 GMT
Not After : Sep 14 07:16:58 2032 GMT
Subject: CN=6a6d9d6e-2975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:2f:d2:d5:aa:65:b4:ed:dc:08:44:55:e5:
02:42:93:ff:eb:b7:1f:d7:c7:60:b3:01:70:a2:eb:
6d:8e:8c:8f:17:55:2b:d0:83:6c:83:4a:83:6b:84:
89:77:c7:f0:97:28:74:5a:16:f9:b9:b2:e4:da:21:
fd:22:b8:8a:6e:de:9b:f5:44:22:f3:7b:62:ee:f1:
ba:30:0f:99:58:2e:ae:d1:89:52:17:80:31:6d:63:
9f:b3:91:62:a6:cb:09:3c:3d:8c:c2:6a:5d:d5:53:
33:0c:54:03:91:0a:6c:ad:f9:d9:ae:52:5f:3c:63:
30:34:a2:43:c6:82:3a:a6:fe:31:3f:49:10:13:eb:
23:b7:cf:54:2f:53:c2:e4:fa:5b:31:2a:7e:f8:c8:
1c:3d:fa:ec:eb:a3:77:48:0a:6f:be:9e:c5:03:52:
5a:a6:81:52:c4:8d:8f:fc:6c:60:67:c5:e7:0e:d5:
63:42:aa:70:d1:85:09:0e:17:08:49:bc:30:fe:61:
19:00:4e:da:47:d0:6f:9d:0b:ac:d1:fb:24:68:21:
3c:10:46:fa:0e:57:23:65:c2:66:e5:7f:c2:79:92:
ef:f5:8e:18:f8:35:f7:7a:ce:4f:78:5e:3f:41:17:
a8:f5:57:58:ac:35:19:c7:c8:0e:30:dd:35:89:5b:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EF:D2:69:6E:ED:D8:34:C4:5A:F6:97:22:9A:FA:17:E7:89:6B:34
X509v3 Authority Key Identifier:
keyid:38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/FD84D3D88D7811F1965C44B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.223.224.0/21
Signature Algorithm: sha256WithRSAEncryption
86:2f:1b:13:e9:25:84:15:db:bc:53:2f:07:76:8f:20:bb:65:
c4:60:e1:cf:8e:4a:b7:a5:3a:3f:f5:8b:f4:7b:6a:ba:98:8b:
11:1f:e5:44:34:53:95:93:71:a3:e9:d3:f4:c1:bb:f5:06:6c:
60:09:5e:f8:cb:43:10:a6:29:5d:95:5b:48:45:e0:f0:15:d9:
d8:5a:a6:a6:30:d9:b6:16:2a:a3:c4:04:85:7d:2a:36:dd:03:
42:21:cd:42:84:64:0b:15:16:f4:b4:fb:d9:de:72:80:3e:3f:
0a:fd:95:9b:da:92:24:93:9c:fe:1f:59:5e:4c:8e:6d:66:14:
3a:e5:73:44:b7:13:52:52:67:91:6c:2d:7f:44:06:b8:18:f2:
3f:bb:46:5c:86:56:d5:4d:b2:fb:3b:2f:c1:c9:09:7f:7a:1b:
36:16:6b:77:3e:16:f5:2e:c1:46:20:82:19:91:d3:74:44:8b:
cb:29:09:3e:6c:23:d6:f0:32:a1:a5:d4:b8:97:73:49:ba:1e:
12:63:55:e1:a1:ae:7a:c1:bc:78:50:db:37:1c:e3:3f:5f:c5:
67:a7:9e:60:7e:66:32:f5:d8:3e:49:17:5e:d7:31:d3:74:a5:
49:d9:8c:6c:d0:42:8a:3d:71:ab:4c:72:24:39:64:83:d5:e9:
55:23:86:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:01 2026 by rpki-client