Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/52615AD4873911F1A25BCB04CF1D38B0.roa
File: 52615AD4873911F1A25BCB04CF1D38B0.roa (raw, json)
Hash identifier: uEo+yNGN7z6sOWJSjtUo6Foq3fy9otFJvCi88NfKZD0=
Subject key identifier: 27:55:20:3F:44:87:18:4D:E9:0D:28:AF:C1:53:97:81:59:CF:5F:AE
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 07F6
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/52615AD4873911F1A25BCB04CF1D38B0.roa
Signing time: Fri 24 Jul 2026 08:26:09 +0000
ROA not before: Fri 24 Jul 2026 08:26:05 +0000
ROA not after: Wed 31 Dec 2036 08:26:05 +0000
asID: 36994
IP address blocks: 196.6.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 24 08:26:05 2026 GMT
Not After : Dec 31 08:26:05 2036 GMT
Subject: CN=6a6321a1-59ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:d8:30:aa:fb:35:f7:13:f1:18:1f:90:4f:
e8:24:d9:67:85:66:6e:a0:06:1d:36:de:11:66:84:
4a:a0:a6:bd:0c:b9:22:9c:47:20:c6:0f:55:d7:86:
2b:17:53:49:1a:1c:a5:22:11:15:b8:e2:6c:a9:f1:
f9:7e:d4:96:2d:f3:19:f5:23:d7:af:4a:b6:d5:ab:
91:f0:31:4c:e6:ed:c6:87:14:16:05:ab:7b:2e:b6:
f5:1e:8b:8a:be:72:1a:2a:51:1b:ef:4f:25:74:ae:
b9:38:60:f1:e0:6e:44:f5:1b:ef:d6:6e:2c:15:c2:
a7:34:e6:f0:e0:41:d4:0c:9b:72:be:b4:0f:73:8a:
4b:65:4d:ef:86:3d:92:d1:50:b1:7f:30:d5:46:a0:
65:80:2a:70:0a:8b:8f:a7:5f:a0:75:ed:4f:ec:8a:
5e:d3:6e:02:68:cc:74:8f:da:b9:60:ea:a6:c6:cc:
ec:1a:bd:9e:e7:6b:82:9b:04:b9:e8:a4:64:54:b3:
65:0d:d5:81:97:0c:0f:c8:ec:0c:0e:5d:dc:91:44:
00:34:17:1c:02:81:ba:a2:23:8a:3c:45:3c:a9:db:
1a:31:d1:78:99:59:6a:28:68:19:76:b1:a6:85:42:
8c:c1:2d:ee:7c:66:3d:dd:7f:04:6c:21:45:64:35:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:55:20:3F:44:87:18:4D:E9:0D:28:AF:C1:53:97:81:59:CF:5F:AE
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/52615AD4873911F1A25BCB04CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.6.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f0:45:98:82:6d:7d:56:1d:73:6d:8b:4f:43:ce:fc:31:2b:
fa:40:47:25:17:7d:e3:00:92:6b:bb:44:9a:9c:ca:c4:7b:62:
97:a3:c9:0f:9a:43:d1:5b:a0:26:37:ed:40:cf:c1:b9:70:2f:
be:62:da:e8:82:12:50:d2:78:a8:7e:fd:9c:56:97:23:ad:6c:
43:53:64:f7:7a:3d:af:af:10:85:2e:e6:9f:d8:93:28:8d:01:
eb:82:2c:14:d4:64:b5:82:0c:3e:26:83:ea:2c:1c:dd:b4:12:
37:2e:15:5d:45:74:6f:b6:30:da:41:f5:4e:a9:9f:bf:2b:9f:
3e:ae:24:22:94:62:7c:7e:cc:21:4a:4a:3d:37:fb:26:1c:77:
cf:69:21:e4:e3:01:84:79:5f:92:74:32:54:58:44:f7:2d:24:
b7:af:88:f8:46:72:61:6b:f2:c9:8b:6a:82:c4:2e:49:64:35:
eb:4b:0d:38:93:f9:c3:6b:5a:b5:c8:06:7d:ff:dc:3a:d7:8d:
9e:1b:f3:84:05:fa:d6:2d:14:81:6d:b6:84:83:c4:40:6e:82:
65:ca:1a:41:ae:14:71:da:bd:2c:41:e7:32:8c:ce:d3:12:af:
de:66:74:f5:3a:60:89:d4:a2:d2:19:ca:2c:34:c5:b2:4a:e7:
f6:e8:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:25 2026 by rpki-client