Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/72295C0E8BFD11F18CEA8BA1CE1D38B0.roa
File: 72295C0E8BFD11F18CEA8BA1CE1D38B0.roa (raw, json)
Hash identifier: SRCUuBI/JjzAV7yK6yEAaPy+LUAUUyg5gCuWR+kBW74=
Subject key identifier: 08:9F:9E:0B:86:D4:78:12:2F:B8:7E:B7:04:47:57:59:D6:5D:52:3E
Certificate issuer: /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial: 062D
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/72295C0E8BFD11F18CEA8BA1CE1D38B0.roa
Signing time: Thu 30 Jul 2026 10:00:09 +0000
ROA not before: Thu 30 Jul 2026 10:00:05 +0000
ROA not after: Tue 14 Nov 2028 10:00:05 +0000
asID: 328155
IP address blocks: 154.65.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1581 (0x62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Validity
Not Before: Jul 30 10:00:05 2026 GMT
Not After : Nov 14 10:00:05 2028 GMT
Subject: CN=6a6b20a8-0d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:19:4d:6f:98:84:f5:ee:cd:cc:2c:97:59:
dc:fe:d3:a9:95:10:53:b7:79:af:f1:b2:f6:a6:5e:
53:8f:af:a4:c6:a8:90:0e:bd:84:74:ae:d0:ff:f0:
a6:df:b0:e3:1d:c0:6f:b8:f8:84:7a:37:41:a8:7e:
65:47:27:32:06:09:52:c3:2a:3f:f7:cd:8c:83:bb:
07:ec:77:4f:dd:8b:2e:35:3f:9a:44:f7:55:dd:5e:
73:73:ad:10:dd:ea:99:05:c0:a8:37:65:7a:4b:37:
b5:04:91:a3:34:29:ac:b3:7f:24:3d:30:d0:41:75:
2f:74:d3:10:04:db:8b:ee:be:5d:44:71:92:67:53:
57:c1:ff:9b:3e:49:48:87:be:bf:66:ef:ca:13:9e:
e8:63:b3:54:92:e1:73:87:87:dd:8d:dd:c8:2e:af:
e6:b7:bd:65:66:2f:0d:a1:25:6a:39:8f:e6:49:9b:
e9:57:9b:7e:4a:3b:05:c4:c1:30:88:ce:45:f4:e4:
08:79:d8:bd:e3:bf:4c:17:52:18:23:35:41:34:9d:
ee:9d:fb:4f:a7:64:85:b1:1b:26:40:05:0f:31:2d:
03:59:4b:f4:0c:4c:df:a6:59:9c:35:32:6f:fa:82:
99:46:15:32:73:d7:7f:c1:9c:b5:d9:48:d9:64:66:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:9E:0B:86:D4:78:12:2F:B8:7E:B7:04:47:57:59:D6:5D:52:3E
X509v3 Authority Key Identifier:
keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/72295C0E8BFD11F18CEA8BA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6c:24:ca:93:1a:c3:b0:60:c6:66:0c:f9:c2:e6:93:57:a0:
6a:56:a4:ec:00:97:cb:c5:87:0e:d3:f7:4c:4e:0b:d6:c3:3d:
93:3b:46:51:b8:2e:7a:42:29:03:33:a9:af:1a:2f:a9:56:6b:
db:20:c6:2b:c0:53:34:76:4a:f1:c6:52:53:2e:ac:36:37:83:
5c:ec:27:e1:88:18:06:16:fb:2b:73:eb:27:29:5b:7d:50:9b:
88:b9:71:c7:e5:6b:87:4b:18:05:78:5a:a1:b8:ff:84:5c:3d:
7c:21:ca:76:62:97:ee:b4:e3:e1:b6:ce:26:f9:fc:ae:3f:80:
40:b4:82:0f:db:dd:4c:63:c2:39:5c:f9:81:55:dd:a5:ed:df:
34:36:03:1a:f3:f6:6c:d0:ce:e6:b8:f0:63:6f:05:f7:c2:00:
bd:ab:de:d2:84:1a:3e:72:0a:6d:bc:db:8e:72:e2:31:70:81:
f4:02:94:f8:91:19:e0:8f:18:80:13:a4:a9:cb:9e:d0:22:c3:
0f:d8:27:ee:b1:93:54:4f:19:5a:d5:c9:f4:b2:4d:94:f2:91:
51:f6:1a:0f:bf:e8:24:3f:66:a8:c8:80:33:c1:88:5a:39:1a:
34:b5:7f:74:7e:42:00:46:83:35:9f:36:92:75:18:9d:3a:cb:
ff:d5:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:21 2026 by rpki-client