Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/7C11FB3A8FD711F194865F12CF1D38B0.roa
File: 7C11FB3A8FD711F194865F12CF1D38B0.roa (raw, json)
Hash identifier: xF16zWSmkM/c3V8YjQqugs+5p0JlSIff3givFahh+9Y=
Subject key identifier: 91:F0:3B:7E:F2:34:BC:96:E9:57:77:D9:93:55:0A:7D:B2:85:9C:F3
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 07F3
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/7C11FB3A8FD711F194865F12CF1D38B0.roa
Signing time: Tue 04 Aug 2026 07:38:29 +0000
ROA not before: Tue 04 Aug 2026 07:38:25 +0000
ROA not after: Mon 04 Aug 2036 07:38:25 +0000
asID: 327814
IP address blocks: 196.44.96.0/19 maxlen: 24
2c0f:f618::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035 (0x7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Aug 4 07:38:25 2026 GMT
Not After : Aug 4 07:38:25 2036 GMT
Subject: CN=6a7196f5-4266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:1e:41:07:27:21:37:e6:df:7b:c8:2f:df:
f9:3a:b1:f0:f9:f0:36:f6:7f:bf:7e:d9:1a:c5:c1:
57:e5:b0:d0:7e:d6:4a:d0:f2:dd:7a:d2:40:1a:3f:
3c:5f:29:bc:d7:ae:9d:12:c7:53:33:13:d3:9e:de:
86:3f:83:03:42:11:bb:0e:77:ec:84:d3:80:ec:2a:
b6:56:13:52:e8:db:40:41:ed:1a:e2:ee:3f:41:03:
d0:05:b2:61:3d:29:d4:f5:fb:09:f8:24:40:4b:f9:
b8:dc:3e:64:ac:02:c6:23:23:41:00:c9:a6:f1:32:
96:57:9b:4f:27:07:14:06:3f:d5:76:eb:f4:c8:79:
7a:c2:19:8f:55:c1:a1:39:67:e2:68:65:c2:27:5f:
e2:0f:ce:b4:d9:c2:3d:c2:57:c0:60:06:65:d2:fa:
08:58:fb:c5:89:83:1a:5f:95:78:08:51:b3:68:43:
93:ad:16:c4:16:06:41:78:b5:ad:4b:71:82:44:8e:
1d:03:3a:b6:4b:99:36:ce:4f:56:43:2a:c4:42:23:
1f:18:2e:bf:1d:e3:36:81:fb:1e:70:5a:0c:15:30:
6f:dd:5c:39:7d:a9:d5:22:b6:6d:3a:24:16:d5:c7:
3b:30:a5:cf:b7:b8:62:a4:1e:ef:27:55:e3:8d:8c:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F0:3B:7E:F2:34:BC:96:E9:57:77:D9:93:55:0A:7D:B2:85:9C:F3
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/7C11FB3A8FD711F194865F12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.96.0/19
IPv6:
2c0f:f618::/32
Signature Algorithm: sha256WithRSAEncryption
35:4b:4e:b1:46:20:12:fe:79:f5:94:be:6d:e4:a1:4d:73:0a:
40:f8:c8:c6:86:df:5a:46:0d:99:54:fd:ef:d9:0a:06:71:2b:
c1:a0:3a:0d:36:6d:fe:74:12:07:e0:a5:2f:cd:69:f3:1b:98:
f6:82:09:bf:69:ac:78:3b:ee:c1:eb:05:d7:a5:41:11:a0:9a:
8e:f5:99:f6:80:8d:2c:f1:2a:9f:44:f2:4e:dd:b4:33:85:12:
cb:0e:75:25:d8:2d:d7:9a:c6:93:a3:78:e8:1f:04:bd:c5:c2:
52:0b:e8:ba:db:1f:3d:b7:d1:f0:ec:ce:2f:e6:c8:fc:63:e9:
45:8e:9e:61:ee:49:0d:60:13:41:09:84:fe:e1:59:60:57:b5:
18:c8:b7:42:23:f2:0d:96:ea:58:b4:03:3f:61:2c:53:c6:52:
78:d0:b7:fc:fb:89:ce:07:93:7a:c3:d7:2b:9d:86:07:b0:d5:
21:84:4b:ce:31:ae:dc:52:97:51:73:65:f2:5c:b8:75:1e:f9:
6a:d2:ef:94:9f:c1:18:1f:15:32:3f:4b:a7:e6:b6:6f:9c:aa:
50:48:d6:cd:22:4d:59:a3:af:2d:63:3d:17:93:53:e1:ee:9c:
29:5d:90:a6:e5:c1:26:3f:03:54:ee:f4:60:bd:9f:d1:a6:5a:
0c:ee:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:17:06 2026 by rpki-client