Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/498039F28BFE11F1AEC9F8A5CE1D38B0.roa
File: 498039F28BFE11F1AEC9F8A5CE1D38B0.roa (raw, json)
Hash identifier: 4/w31jgZKaDe5nOxHUMZ2QljXJcUdfkoVW7DzGpwi9I=
Subject key identifier: 2D:54:B5:95:C7:55:BC:FE:FF:EB:0B:5D:A5:87:BC:05:D0:13:07:CE
Certificate issuer: /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial: 0631
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/498039F28BFE11F1AEC9F8A5CE1D38B0.roa
Signing time: Thu 30 Jul 2026 10:06:10 +0000
ROA not before: Thu 30 Jul 2026 10:06:05 +0000
ROA not after: Tue 14 Nov 2028 10:06:05 +0000
asID: 328155
IP address blocks: 154.65.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Validity
Not Before: Jul 30 10:06:05 2026 GMT
Not After : Nov 14 10:06:05 2028 GMT
Subject: CN=6a6b2212-52be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:97:a6:35:d1:8b:cc:fd:51:d1:5b:3e:35:
8c:2b:21:67:f5:cc:da:b6:eb:bb:4e:80:0e:05:95:
8e:fd:4a:6e:f8:25:3f:c3:04:58:1c:4e:34:13:ab:
e8:f0:29:61:52:96:5c:c9:c6:db:92:76:36:df:d6:
67:43:18:15:d4:3f:9c:65:38:32:81:4e:09:4d:2e:
34:e1:b6:21:13:1c:e5:ce:e6:60:be:b1:9e:7a:d5:
3e:a7:66:43:28:f1:f4:96:93:22:de:d6:d1:eb:59:
af:ac:6a:80:6a:2d:8c:7a:4d:52:d5:01:f8:7a:08:
b1:44:9c:02:c0:07:f2:31:5f:08:bf:d1:5e:a1:f9:
ad:66:5a:f9:ef:47:02:d8:3a:4a:00:30:da:d5:3a:
6c:70:a5:8c:ac:50:c4:4a:ef:73:a3:f4:69:4c:0c:
90:6e:88:1b:eb:b8:f5:19:8e:09:c4:8a:94:be:8a:
b0:62:a1:4d:eb:da:a8:1c:95:a9:39:31:dc:4b:aa:
1d:7a:77:ec:d4:ec:9c:25:48:4e:42:f4:fc:7a:f8:
66:24:3b:87:61:d5:d0:f0:82:35:d2:13:0c:e5:4a:
ab:e7:2c:6e:83:9a:c1:1a:07:5b:2c:f9:6c:21:3e:
c0:fb:fa:e8:bd:ef:f7:1d:9e:92:84:ce:d3:38:ad:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:54:B5:95:C7:55:BC:FE:FF:EB:0B:5D:A5:87:BC:05:D0:13:07:CE
X509v3 Authority Key Identifier:
keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/498039F28BFE11F1AEC9F8A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.85.0/24
Signature Algorithm: sha256WithRSAEncryption
70:da:d1:f9:2b:cf:d8:e8:43:9e:c3:d4:cf:ae:13:a2:38:9a:
89:c9:2d:d3:12:17:63:db:aa:fe:98:b3:15:c4:62:86:74:73:
f9:b0:c7:da:9d:ce:82:e3:eb:f2:25:08:c8:c3:c6:22:6a:dd:
ee:55:f1:d8:d3:18:6e:ab:43:d0:cd:1e:3b:5d:57:b5:d2:8c:
0e:a4:a8:cd:cb:98:d7:31:8f:c7:46:79:fa:5e:f5:aa:65:f5:
bc:08:6b:19:90:d9:a9:ed:9b:07:98:ce:51:bb:a1:cf:88:c3:
96:aa:3b:27:c9:24:9a:a5:e2:9e:27:13:c9:0c:82:41:a2:c8:
50:73:1c:1a:02:51:be:4f:e7:88:fa:ae:a6:54:02:05:b8:1c:
83:bb:a7:54:9d:97:11:01:1e:02:69:dd:08:f7:85:7f:ce:17:
79:6c:6d:cf:ac:06:18:c5:f3:20:de:52:b7:bf:b6:33:22:1a:
5e:cd:14:bf:c7:82:9d:80:3a:ae:b7:28:e0:f2:f0:d2:07:66:
18:b1:70:61:3f:d1:92:05:69:90:f1:ad:ba:66:a3:8b:0e:8c:
db:01:cb:81:ad:54:99:f0:3b:47:8c:6f:ad:53:87:fc:96:63:
b9:5f:98:71:a2:3e:2b:62:e6:f3:57:00:e0:c4:85:55:95:eb:
f6:fc:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:21 2026 by rpki-client