Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/A41FAC428B6511F192AECEF7CE1D38B0.roa
File: A41FAC428B6511F192AECEF7CE1D38B0.roa (raw, json)
Hash identifier: drLADxnaOEGMyqdel7G/uH1BM2flnhzBkm7jo80NuCg=
Subject key identifier: F8:8A:66:ED:D1:C7:10:56:43:69:68:71:5D:0D:69:3F:9A:70:04:6D
Certificate issuer: /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial: 0BC4
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/A41FAC428B6511F192AECEF7CE1D38B0.roa
Signing time: Wed 29 Jul 2026 15:53:29 +0000
ROA not before: Wed 29 Jul 2026 15:53:25 +0000
ROA not after: Tue 20 Jan 2032 15:53:25 +0000
asID: 36924
IP address blocks: 197.255.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AF, serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Validity
Not Before: Jul 29 15:53:25 2026 GMT
Not After : Jan 20 15:53:25 2032 GMT
Subject: CN=6a6a21f9-28b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:fb:bb:d7:a5:2d:8b:5b:0c:d4:c9:63:0f:
d9:44:7e:16:3e:5e:7e:be:b5:21:1d:0e:f0:dd:cc:
3d:53:24:35:53:31:a7:a5:a6:ab:30:3b:9a:9f:ae:
35:10:39:8b:82:76:b9:58:e1:84:1a:2d:01:cd:1e:
11:4f:4a:0a:82:17:40:e7:fe:12:e2:74:a9:2d:01:
0a:ac:01:ae:44:80:3e:39:68:ff:02:8f:17:ce:95:
e8:a4:05:34:fb:b1:17:c4:8d:e9:6f:27:a4:15:7d:
8c:a7:d1:3c:a9:72:21:1b:8b:01:d5:88:80:24:1d:
3c:3c:e4:04:bf:85:8c:09:9e:65:1d:c6:94:94:76:
77:4c:21:ce:9f:da:ab:a4:5b:5c:b2:f2:76:4a:7e:
0f:f4:81:78:b2:85:64:a7:60:c4:e3:e7:8d:02:c4:
c0:26:1a:fe:e4:12:d4:13:67:90:39:b5:41:8f:7d:
a1:ee:99:54:49:a9:c7:4e:cc:8e:24:49:35:20:5b:
8f:2a:49:68:bf:ad:4b:ea:a8:92:3a:5f:6d:5f:8f:
7e:5c:14:52:86:08:55:cc:24:cb:37:e1:d7:2e:62:
9d:60:ff:4b:67:b4:f2:fa:c4:fd:ec:40:98:9b:d6:
b7:2d:0b:c4:30:78:92:42:63:b1:2c:2e:a2:ad:5e:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:66:ED:D1:C7:10:56:43:69:68:71:5D:0D:69:3F:9A:70:04:6D
X509v3 Authority Key Identifier:
keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/A41FAC428B6511F192AECEF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.255.176.0/20
Signature Algorithm: sha256WithRSAEncryption
40:80:75:93:07:45:93:c0:fe:c2:c6:89:46:20:32:7d:d2:94:
e4:d5:b4:66:28:48:3e:0f:72:a8:b3:fd:59:13:75:27:be:b8:
5c:a2:f4:6d:c3:d4:23:fd:62:f9:a1:fe:f0:7b:9c:6f:ef:eb:
3b:5f:42:fb:99:07:4d:44:df:bf:17:38:1d:6f:91:6d:cf:35:
9b:e5:9d:70:b4:26:fc:84:30:7d:fc:9d:66:b9:f0:d6:26:e3:
18:03:dd:1a:86:8d:77:e0:21:c3:b3:ba:5b:9b:78:8c:c3:f5:
11:77:79:57:3b:f6:9f:23:f6:d8:d9:bd:30:4a:53:2a:a2:f7:
cd:8c:4e:65:44:d3:f3:2f:bf:13:6d:83:c0:cb:5f:a3:94:b8:
03:80:b9:91:61:b2:75:ee:2f:3e:c5:ec:6f:b3:df:56:56:87:
0f:dd:94:00:86:9a:73:fb:65:ce:ab:71:03:9e:a1:04:5e:72:
b0:76:e9:35:5f:8e:2a:b5:8a:32:25:bd:bc:96:d6:4c:0c:e7:
2e:bb:60:71:4c:a5:61:ec:80:18:22:2a:42:bf:61:e1:4d:26:
06:76:8e:3d:d7:a0:42:8c:dc:dc:3f:21:4b:fb:35:82:47:f2:
30:28:37:71:b6:4c:1c:f9:50:d0:af:05:78:4c:4b:8d:d2:88:
c7:ca:63:ce
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjUxRjhBRjExMC8GA1UEBRMoNERFRkI0MUQzQjQyQ0NGRDczQjFBMDQ0NzdDMEU4
MjVDNzRENkM2RTAeFw0yNjA3MjkxNTUzMjVaFw0zMjAxMjAxNTUzMjVaMBgxFjAU
BgNVBAMTDTZhNmEyMWY5LTI4YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeHvu716Uti1sM1MljD9lEfhY+Xn6+tSEdDvDdzD1TJDVTMaelpqswO5qf
rjUQOYuCdrlY4YQaLQHNHhFPSgqCF0Dn/hLidKktAQqsAa5EgD45aP8CjxfOleik
BTT7sRfEjelvJ6QVfYyn0TypciEbiwHViIAkHTw85AS/hYwJnmUdxpSUdndMIc6f
2qukW1yy8nZKfg/0gXiyhWSnYMTj540CxMAmGv7kEtQTZ5A5tUGPfaHumVRJqcdO
zI4kSTUgW48qSWi/rUvqqJI6X21fj35cFFKGCFXMJMs34dcuYp1g/0tntPL6xP3s
QJib1rctC8QweJJCY7EsLqKtXvFjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+Ipm
7dHHEFZDaWhxXQ1pP5pwBG0wHwYDVR0jBBgwFoAUTe+0HTtCzP1zsaBEd8DoJcdN
bG4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1MUY4L0I0QkE3RTJFOTU1QTExRThCN0IyMUQ3RkY4QUVBMjI4L1RlLTBI
VHRDelAxenNhQkVkOERvSmNkTmJHNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1RlLTBIVHRDelAxenNhQkVkOERvSmNkTmJHNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY1MUY4L0I0QkE3RTJFOTU1QTExRThCN0IyMUQ3RkY4
QUVBMjI4L0E0MUZBQzQyOEI2NTExRjE5MkFFQ0VGN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATF/7AwDQYJKoZIhvcNAQEL
BQADggEBAECAdZMHRZPA/sLGiUYgMn3SlOTVtGYoSD4Pcqiz/VkTdSe+uFyi9G3D
1CP9Yvmh/vB7nG/v6ztfQvuZB01E378XOB1vkW3PNZvlnXC0JvyEMH38nWa58NYm
4xgD3RqGjXfgIcOzulubeIzD9RF3eVc79p8j9tjZvTBKUyqi982MTmVE0/MvvxNt
g8DLX6OUuAOAuZFhsnXuLz7F7G+z31ZWhw/dlACGmnP7Zc6rcQOeoQRecrB26TVf
jiq1ijIlvbyW1kwM5y67YHFMpWHsgBgiKkK/YeFNJgZ2jj3XoEKM3Nw/IUv7NYJH
8jAoN3G2TBz5UNCvBXhMS43SiMfKY84=
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:39:27 2026 by rpki-client