Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/7209CACE8DA611F19808DFBFCE1D38B0.roa
File: 7209CACE8DA611F19808DFBFCE1D38B0.roa (raw, json)
Hash identifier: TiQ0DTo83UHcuXxj5lRgHJU9J7T+GuSv6q0DBMkC+Xk=
Subject key identifier: 6B:7A:BF:CE:D6:7E:A9:FE:CD:48:F0:AD:DF:54:95:EF:ED:E2:DF:A9
Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial: 0985
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/7209CACE8DA611F19808DFBFCE1D38B0.roa
Signing time: Sat 01 Aug 2026 12:42:24 +0000
ROA not before: Sat 01 Aug 2026 12:42:21 +0000
ROA not after: Fri 01 Aug 2036 12:42:21 +0000
asID: 327926
IP address blocks: 196.251.232.0/21 maxlen: 24
2c0f:e8e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2437 (0x985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAF, serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Validity
Not Before: Aug 1 12:42:21 2026 GMT
Not After : Aug 1 12:42:21 2036 GMT
Subject: CN=6a6de9b0-0523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:ff:ab:07:b6:df:71:23:b9:c3:61:8d:e6:
99:80:d9:71:85:ca:10:6d:8d:0d:fd:de:14:5c:3c:
10:35:b7:2f:4d:43:53:82:97:a8:e0:a7:50:77:72:
a8:ab:87:82:80:c7:cc:00:8a:4d:7c:f0:7e:72:d7:
eb:4c:ff:09:44:02:12:87:ad:03:6d:48:c6:86:8e:
f6:f4:03:9d:5b:0d:14:8f:c2:89:bf:9d:08:fd:b2:
81:2d:08:19:99:f4:69:95:86:a0:be:db:d5:87:5a:
69:fe:08:2e:2c:8f:e0:60:49:1b:8c:7e:ab:7c:c3:
aa:ba:27:67:ec:35:50:42:32:37:13:84:c2:cf:3f:
e2:34:ff:c1:84:6b:f6:2c:c8:96:79:d9:a4:e5:90:
c0:48:2c:aa:ab:62:5a:c9:0c:dd:fc:01:cf:60:d4:
62:6d:10:df:05:03:51:d5:2a:95:50:e4:15:58:cb:
61:d1:78:5c:7f:1f:e7:19:4b:db:6c:3f:ce:b1:d2:
ed:2a:13:04:22:1d:9a:e5:64:25:56:4a:7d:6d:3e:
62:9c:b5:4e:9c:25:10:b5:4e:98:dc:8a:b0:e9:80:
07:dc:6d:04:82:9d:dc:b3:a5:b8:00:5d:3c:29:7c:
17:a0:ae:26:74:23:c6:dc:d6:2a:36:e2:ef:d3:67:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7A:BF:CE:D6:7E:A9:FE:CD:48:F0:AD:DF:54:95:EF:ED:E2:DF:A9
X509v3 Authority Key Identifier:
keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/7209CACE8DA611F19808DFBFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.232.0/21
IPv6:
2c0f:e8e0::/32
Signature Algorithm: sha256WithRSAEncryption
86:75:57:4f:87:19:07:23:90:70:6b:1a:6f:c9:f7:b1:1c:37:
6a:cc:53:4c:39:86:00:29:43:35:4b:ba:98:64:10:eb:69:cf:
37:37:80:84:2b:0d:7e:99:aa:df:92:c9:80:65:55:42:70:1e:
aa:0c:a5:f0:56:12:8e:cf:34:61:94:07:29:d5:4b:73:4a:b7:
f2:f2:c8:fd:28:56:4a:86:44:5e:30:39:be:35:f9:49:bd:5b:
21:b5:31:3d:84:a1:7a:9a:68:1a:a8:09:92:ea:27:07:53:89:
bd:8a:9f:48:87:17:81:f9:e3:f5:4a:de:96:26:19:a2:e6:48:
d4:40:4f:55:d1:2c:dd:d9:93:98:3f:e6:15:ea:24:1c:07:0e:
88:a1:52:9e:44:d4:29:0c:a5:17:f0:ad:ad:69:38:36:d7:6b:
6b:3b:5f:91:95:08:e0:eb:13:a7:7f:56:21:63:0b:c1:78:8b:
60:57:dd:2a:62:cc:a7:44:5a:8f:17:3d:af:0d:df:e2:65:d6:
c4:b3:54:22:21:c3:c0:9f:91:9b:92:96:80:e3:13:64:8b:69:
8b:27:e9:26:13:b5:46:40:f4:b6:6e:78:cd:ac:26:ad:48:c6:
03:a3:c7:e3:a8:17:ce:97:e5:28:0c:c7:95:88:3e:38:c9:10:
cc:e3:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:15 2026 by rpki-client