Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/A166CB0A6FB511F1A388A7EBCE1D38B0.roa
File: A166CB0A6FB511F1A388A7EBCE1D38B0.roa (raw, json)
Hash identifier: N2A8A30zOOL02+LkqB3kmhadKKBzgndfImHLlNc0+Fg=
Subject key identifier: 21:BD:B9:29:54:0B:8E:F5:70:F8:75:69:32:80:DE:78:5F:09:EC:51
Certificate issuer: /CN=F36BDAEAAF/serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
Certificate serial: 02
Authority key identifier: FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/A166CB0A6FB511F1A388A7EBCE1D38B0.roa
Signing time: Wed 24 Jun 2026 10:15:32 +0000
ROA not before: Wed 24 Jun 2026 10:15:27 +0000
ROA not after: Tue 24 Jun 2031 10:15:27 +0000
asID: 37273
IP address blocks: 41.84.192.0/19 maxlen: 24
2c0f:ffa0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDAEAAF, serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
Validity
Not Before: Jun 24 10:15:27 2026 GMT
Not After : Jun 24 10:15:27 2031 GMT
Subject: CN=6a3bae44-8f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:7b:b0:a0:19:e0:c3:34:e8:cb:b6:6e:b9:
da:60:11:82:0a:96:56:a5:8f:8d:f4:42:86:d1:5b:
18:38:2a:87:d5:49:87:45:d4:be:8a:74:63:d4:50:
b0:51:6d:c5:b0:98:31:6d:be:48:6c:2a:07:2f:fd:
5e:ce:5c:7e:47:e3:af:0b:7f:56:ab:2f:05:7b:fa:
86:cb:50:04:bc:29:d6:59:bd:86:bb:e4:9a:12:40:
e8:65:5e:ae:49:0a:b6:28:4c:73:66:7a:e7:0f:9b:
5b:98:9d:f0:6f:c1:42:bf:0e:32:64:c5:9e:75:f4:
f2:7a:81:e5:c9:78:e5:5f:da:c4:8f:61:32:05:0c:
6a:54:d2:0e:72:ce:a4:7f:90:17:aa:7b:84:0f:f1:
22:12:6b:27:a0:4b:59:43:47:40:b3:0c:48:09:45:
12:9e:d1:ac:9a:5d:82:69:6f:12:9e:5e:43:5a:d3:
67:91:92:f3:ac:ea:1d:78:08:fa:ba:6b:a0:84:b9:
96:08:b8:0a:4b:77:a9:d7:4c:3b:19:e9:5a:fd:6b:
56:b6:dc:21:13:40:45:c2:5f:9a:b6:05:94:b7:a8:
9d:b9:71:3b:e9:5c:8a:96:84:48:01:a0:d8:79:23:
2f:3b:f2:1e:a5:4f:81:4d:39:96:2a:39:89:44:2b:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BD:B9:29:54:0B:8E:F5:70:F8:75:69:32:80:DE:78:5F:09:EC:51
X509v3 Authority Key Identifier:
keyid:FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/A166CB0A6FB511F1A388A7EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.84.192.0/19
IPv6:
2c0f:ffa0::/32
Signature Algorithm: sha256WithRSAEncryption
46:ea:d3:4c:2d:32:0c:31:80:d5:52:e3:85:57:7c:b3:c2:d8:
06:5a:d1:84:5e:6d:78:8f:fd:82:c8:f6:5d:ef:e7:a0:66:88:
50:24:62:34:9c:12:38:32:80:a7:88:87:8c:c2:6c:e0:85:a0:
79:14:ff:bb:5a:96:81:12:53:bc:18:3b:71:9e:31:db:9f:7c:
2d:5a:95:3b:f7:63:61:f1:50:31:a1:a4:4d:32:d0:87:65:82:
8f:e4:7f:13:c8:79:93:ed:45:4f:52:d3:eb:03:6a:d1:b9:09:
b8:7a:bd:95:60:5a:52:0c:53:d8:76:65:48:48:9b:54:37:2c:
14:e3:da:74:95:35:b4:aa:53:eb:66:67:2e:5a:c6:1a:6c:3a:
aa:9f:bd:aa:1f:f1:98:29:fa:21:10:8e:38:b5:da:67:3c:e6:
ea:71:f3:1e:16:ea:56:d2:f1:31:52:86:44:e9:cc:e1:20:bf:
1e:61:90:c9:d9:fc:5e:66:fc:5d:d7:98:81:35:01:fb:a0:6f:
96:bb:8d:7a:1f:79:aa:eb:dc:01:bf:48:ee:97:aa:db:7b:15:
20:48:b3:1f:2b:ac:51:dd:22:c9:5f:69:bb:c6:28:00:04:3c:
e8:44:37:4d:86:ee:32:66:2a:ad:49:b5:5c:88:9b:d6:e1:81:
6d:b0:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 00:17:48 2026 by rpki-client