Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/D8BF08468D7F11F1BF6671DACE1D38B0.roa
File: D8BF08468D7F11F1BF6671DACE1D38B0.roa (raw, json)
Hash identifier: ZOfn2W3js3WfcuCV4Hm+XVb7XYhXh9TvM9OxM56E5d4=
Subject key identifier: 51:94:FD:31:2B:E7:60:31:D9:CB:99:79:A1:2C:2E:A3:D9:74:2B:82
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 057C
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/D8BF08468D7F11F1BF6671DACE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:06:06 +0000
ROA not before: Sat 01 Aug 2026 08:06:02 +0000
ROA not after: Wed 01 Dec 2032 08:06:02 +0000
asID: 37009
IP address blocks: 197.243.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1404 (0x57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF, serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Validity
Not Before: Aug 1 08:06:02 2026 GMT
Not After : Dec 1 08:06:02 2032 GMT
Subject: CN=6a6da8ee-9ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:94:a6:f5:0c:94:88:e8:02:9a:f2:30:80:
07:e9:a6:8d:77:ea:2f:fd:20:16:7d:86:e1:e0:a2:
31:cc:08:58:03:1d:06:37:91:0d:bc:a3:09:cd:08:
b5:e2:46:05:27:f9:57:8e:45:27:2a:6d:a5:c6:92:
62:76:43:30:26:d0:81:68:16:2c:33:df:49:23:bb:
cc:2a:c8:8a:a5:d7:5e:b0:f8:b4:29:d3:23:a1:df:
a6:51:f5:63:b5:42:75:9b:c0:79:17:ea:4b:45:c5:
96:ed:58:7f:1e:ea:ce:9a:b8:e1:13:37:f6:50:04:
c6:d9:4e:2d:92:89:03:a1:d1:4d:41:56:4a:03:a0:
9b:23:9f:b6:12:b0:8c:ba:21:f7:ae:1b:bb:a9:3a:
e7:6f:25:01:d7:a9:07:84:11:49:76:9c:ab:66:58:
2e:71:37:28:8e:11:0e:38:f9:b9:ae:61:b4:0a:9a:
25:56:82:39:63:59:a8:e5:45:a2:f9:64:6b:22:0b:
a4:cb:64:b2:6f:2f:4e:23:83:87:10:d0:85:da:94:
78:09:99:4c:f0:92:42:84:b3:fb:39:0e:88:0a:ae:
d0:68:d1:02:77:1c:02:7c:0e:68:35:1c:5e:f8:ef:
1f:a7:0d:9b:48:22:38:38:cb:e3:97:e7:d0:59:b4:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:FD:31:2B:E7:60:31:D9:CB:99:79:A1:2C:2E:A3:D9:74:2B:82
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/D8BF08468D7F11F1BF6671DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.243.128.0/17
Signature Algorithm: sha256WithRSAEncryption
13:ae:35:87:2b:33:9f:16:29:07:fd:09:c5:fe:35:64:c2:48:
a9:f0:45:e3:cb:92:61:c6:1b:f7:48:7f:ec:8e:49:06:54:da:
db:e4:7c:36:66:79:01:16:98:76:f4:4e:de:89:07:89:e2:60:
47:93:95:e9:0e:0e:12:e0:0b:27:20:32:8f:4a:13:14:f8:dd:
1a:19:11:20:f0:fc:54:d4:6c:b2:06:46:22:9b:68:83:d3:7f:
16:9b:f5:a7:74:82:2d:f1:81:ae:81:a5:08:0d:c1:b3:fd:cf:
2a:60:17:5f:43:4e:fb:fd:07:d4:09:ff:09:aa:6a:f3:7b:f1:
ee:15:34:92:5a:10:a2:0e:66:79:bf:74:8c:32:7a:65:68:80:
75:f1:23:05:db:77:db:ec:46:05:fc:e3:e5:c7:f1:59:4b:af:
11:9c:f5:34:58:5a:5c:b0:17:98:90:33:4c:dd:68:cd:7b:db:
ea:95:3b:55:7f:60:8f:1c:3f:ee:ab:c0:0e:01:77:25:06:d3:
ed:81:10:e6:65:29:84:28:cc:d0:81:d9:0b:ac:bd:6a:1a:91:
93:2d:90:d1:39:18:8d:39:30:ea:af:6d:4d:98:21:7c:cf:c7:
ca:fb:50:65:e8:02:32:85:96:81:34:60:b0:31:f5:26:9e:4e:
ef:05:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:36 2026 by rpki-client