Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/FA87324C7BAE11F1AB633FECCE1D38B0.roa
File: FA87324C7BAE11F1AB633FECCE1D38B0.roa (raw, json)
Hash identifier: Y++5DupkXsebrAc+hbkE3N5d6DZNbyNJZGID+Ut90Ho=
Subject key identifier: 6E:D9:07:A1:CD:1E:6F:E4:CA:7B:14:97:0E:DF:A7:BC:68:C0:00:78
Certificate issuer: /CN=F363AA80AF/serialNumber=F553B202AD5FBD3BE3EFC7F2DA69137AA6A178E2
Certificate serial: 05
Authority key identifier: F5:53:B2:02:AD:5F:BD:3B:E3:EF:C7:F2:DA:69:13:7A:A6:A1:78:E2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9VOyAq1fvTvj78fy2mkTeqaheOI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/FA87324C7BAE11F1AB633FECCE1D38B0.roa
Signing time: Thu 09 Jul 2026 15:58:09 +0000
ROA not before: Thu 09 Jul 2026 15:58:04 +0000
ROA not after: Thu 31 Jul 2036 15:58:04 +0000
asID: 37462
IP address blocks: 197.149.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.crl
rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.mft
rsync://rpki.afrinic.net/repository/afrinic/9VOyAq1fvTvj78fy2mkTeqaheOI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363AA80AF, serialNumber=F553B202AD5FBD3BE3EFC7F2DA69137AA6A178E2
Validity
Not Before: Jul 9 15:58:04 2026 GMT
Not After : Jul 31 15:58:04 2036 GMT
Subject: CN=6a4fc510-53cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:95:5c:f4:10:d0:f6:99:6a:d5:8c:96:e6:
dc:6e:d8:5a:ec:04:a3:8c:3a:62:42:9e:91:a4:6c:
2d:ba:b7:4b:7d:4a:a3:66:e3:fb:91:0c:c7:4e:68:
76:fb:58:f6:71:e4:da:68:88:7f:27:3a:49:36:72:
fe:4b:23:53:96:12:90:44:1b:09:a9:b7:ec:93:06:
c2:46:d5:57:53:45:3f:c9:54:76:eb:75:5a:c9:94:
22:06:39:8b:b8:84:7a:59:cb:54:95:a7:cf:a0:bc:
18:41:e1:1c:a1:39:be:ed:32:0f:89:85:56:c0:84:
4a:38:74:2a:a1:7f:eb:00:2d:d6:49:12:cf:0e:36:
d8:9c:06:5f:c3:21:bf:71:83:96:1b:38:e6:15:b8:
cf:52:93:9d:48:f3:54:a9:d2:d9:a5:de:0b:63:fe:
27:f9:a6:38:18:54:ec:7f:ed:d9:73:2d:dd:f3:18:
f5:b8:c7:33:a9:83:28:9a:58:05:da:77:b7:0b:cc:
b9:43:a4:f1:4f:38:1d:af:39:6e:fe:33:ee:e4:b2:
d3:af:ff:53:e5:3f:1e:2c:96:0e:69:15:2e:96:6d:
c2:aa:02:af:ca:8e:5f:0e:76:9a:03:93:5f:4d:f1:
4b:ee:56:89:52:10:15:21:ea:df:0f:c0:4d:78:f4:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D9:07:A1:CD:1E:6F:E4:CA:7B:14:97:0E:DF:A7:BC:68:C0:00:78
X509v3 Authority Key Identifier:
keyid:F5:53:B2:02:AD:5F:BD:3B:E3:EF:C7:F2:DA:69:13:7A:A6:A1:78:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/9VOyAq1fvTvj78fy2mkTeqaheOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9VOyAq1fvTvj78fy2mkTeqaheOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363AA80/B48E766E7B9611F18F60EADBCE1D38B0/FA87324C7BAE11F1AB633FECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.149.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1a:04:56:95:cf:ef:23:cc:11:a9:17:21:f1:25:ba:6a:f2:
9d:3c:1e:d2:59:ee:52:0c:ab:fa:71:7e:c9:fb:34:12:65:ee:
c4:89:aa:4c:fd:f6:10:31:b7:4e:7a:ac:19:48:b7:b9:84:5a:
29:fa:bf:85:20:e4:bc:7b:f0:1f:d8:77:5b:ff:dd:44:e6:da:
8a:ee:11:a3:8b:20:c1:62:9b:3c:48:36:eb:a6:80:77:f8:3e:
67:18:85:97:d5:f8:3d:1c:f8:dc:72:27:39:98:c1:0c:de:64:
5a:22:43:1f:d7:b9:15:cd:99:5e:a5:01:b2:7f:84:43:37:f5:
40:30:9b:18:60:de:84:40:3a:55:99:e9:00:68:ff:fb:ea:7f:
a2:24:ad:f4:a6:5c:a0:5f:05:d3:de:06:7c:fa:8e:d8:d1:78:
ef:53:a8:c4:5f:57:9c:9a:24:0d:d3:39:27:49:c5:bc:14:99:
68:c5:b6:6d:07:53:da:46:7c:1d:cd:17:c0:75:8a:13:46:3e:
4c:56:85:76:a1:3c:48:b6:d2:68:77:8b:3b:35:44:61:c3:d6:
2a:9d:f9:58:18:08:59:f4:4b:54:a5:55:8a:7c:fa:16:6f:36:
20:4a:a0:da:fe:b1:49:57:96:bf:b7:a4:fb:f7:2c:a2:97:a7:
2b:31:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:29 2026 by rpki-client