Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/8EF222E0874711F19A7891D9CE1D38B0.roa
File: 8EF222E0874711F19A7891D9CE1D38B0.roa (raw, json)
Hash identifier: PcLAG1NhERJx3czkCw2yFf0BI5X1CLRCJEac9uNxDiY=
Subject key identifier: 1F:B8:0A:29:45:89:52:D1:20:CA:11:64:10:DB:62:25:07:1A:15:D6
Certificate issuer: /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial: 0F0F
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/8EF222E0874711F19A7891D9CE1D38B0.roa
Signing time: Fri 24 Jul 2026 10:08:04 +0000
ROA not before: Fri 24 Jul 2026 10:08:00 +0000
ROA not after: Sun 06 Feb 2033 10:08:00 +0000
asID: 22690
IP address blocks: 196.223.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3855 (0xf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623CAFAF, serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Validity
Not Before: Jul 24 10:08:00 2026 GMT
Not After : Feb 6 10:08:00 2033 GMT
Subject: CN=6a633984-ab3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:63:54:0b:69:2d:b2:1c:72:6b:84:ba:0e:
5d:07:7d:90:bb:22:77:21:b5:02:c1:c5:9d:36:c1:
e8:76:ec:d7:a9:7b:68:2e:46:34:92:8c:de:4c:78:
3d:0b:09:9a:c7:d4:91:98:1b:e1:60:c0:5f:70:96:
8e:38:59:0d:48:1e:8f:95:dc:e6:31:43:55:f7:6d:
39:b4:b7:14:78:14:4b:fd:f0:76:be:a5:33:5c:c2:
13:cf:47:e5:67:a2:79:5f:90:bb:f6:a7:6d:97:79:
fe:99:9a:86:f1:d7:ae:34:f7:16:1c:ca:f9:be:ae:
ee:35:83:0e:c7:a1:4a:4d:fc:25:9e:f9:9f:90:ad:
4b:7b:56:79:5d:7c:b4:16:e9:10:e7:f9:f0:5e:c2:
f7:0d:5c:df:44:a7:ef:65:63:bc:20:d1:e6:08:0f:
28:df:3d:fb:fd:93:69:a8:94:4e:a2:84:69:02:5c:
2e:4e:f8:1e:5e:b7:41:8c:28:ae:1e:63:82:bd:a8:
a2:1f:7f:34:f5:93:14:bd:72:89:eb:57:41:94:34:
25:f7:43:43:27:fc:18:04:ec:fb:33:a2:2f:57:26:
6c:3a:cc:c2:4a:b2:3a:2c:88:ee:bd:14:bf:14:12:
88:26:34:a0:3a:91:ba:3f:94:a7:3e:d1:86:e9:95:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:0A:29:45:89:52:D1:20:CA:11:64:10:DB:62:25:07:1A:15:D6
X509v3 Authority Key Identifier:
keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/8EF222E0874711F19A7891D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.223.240.0/21
Signature Algorithm: sha256WithRSAEncryption
70:71:99:fe:a5:4d:a3:32:85:03:ab:0c:23:35:f8:b7:b1:44:
12:c3:f6:b3:9b:ea:43:6a:74:49:b0:37:11:75:bf:d8:02:78:
d8:e3:4f:7c:7b:da:f0:dd:31:47:e9:12:88:2c:34:11:a5:a1:
cc:9a:7a:f3:89:2f:77:3f:22:87:7f:09:1b:8e:3b:92:af:5d:
ea:4c:c1:ef:4f:25:9c:a0:c1:49:0a:41:a0:f8:e1:3e:0a:a0:
95:7d:1a:76:a3:a2:b1:f6:d4:01:e2:d6:bd:32:28:08:f2:01:
f8:2f:6f:23:a7:67:fd:de:9c:5b:b8:62:4c:21:6a:52:13:5b:
7a:17:f9:6a:e8:71:d5:34:0c:70:e2:05:cc:c3:09:e2:fd:b5:
88:ad:81:38:b8:f3:19:23:5c:2b:03:43:cb:1d:c0:30:8d:00:
ef:f9:b5:32:c1:e7:85:99:6e:9e:49:8e:bd:cc:e7:08:45:3b:
4b:31:1e:ee:c0:70:83:e7:22:a7:be:fd:aa:68:c7:4e:51:79:
fe:bf:47:8c:32:0c:87:69:16:7f:06:47:d6:f5:ff:9d:c9:43:
51:ba:27:71:26:db:a2:5c:82:ee:19:da:6a:89:94:2f:c6:50:
2f:79:56:d9:5e:5e:c1:5e:95:70:eb:25:7d:f9:26:f9:c7:73:
92:f9:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:34 2026 by rpki-client