Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/83C1B51E861311F1B6EA1CF3CE1D38B0.roa
File: 83C1B51E861311F1B6EA1CF3CE1D38B0.roa (raw, json)
Hash identifier: YGhRnFJxxOw2hjHzJ+iygqRr9xhgdsMnDnsZtjTgC1w=
Subject key identifier: 1C:5A:AA:FC:DE:C5:EB:F2:16:35:9E:00:FB:32:BB:F6:E9:D9:21:FA
Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial: 07EB
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/83C1B51E861311F1B6EA1CF3CE1D38B0.roa
Signing time: Wed 22 Jul 2026 21:23:00 +0000
ROA not before: Wed 22 Jul 2026 21:22:56 +0000
ROA not after: Wed 31 Dec 2036 21:22:56 +0000
asID: 29975
IP address blocks: 105.245.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Validity
Not Before: Jul 22 21:22:56 2026 GMT
Not After : Dec 31 21:22:56 2036 GMT
Subject: CN=6a6134b4-0993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:6e:05:de:be:39:6e:3a:e8:4c:f7:e5:17:
33:4d:44:b9:a7:53:62:59:dc:d2:61:b3:fa:63:1e:
96:38:ed:67:20:8a:83:96:42:07:98:65:74:72:5a:
3b:84:01:9b:7c:38:1d:01:e5:b8:c1:62:83:1d:41:
11:2d:a0:dc:72:bf:fe:e4:df:db:b3:98:c7:09:d8:
7c:c1:50:f3:2b:a1:17:cd:d9:0e:51:4f:ce:56:78:
3c:ae:ed:9d:b8:7e:c3:0f:4d:a5:12:0d:3c:b3:d2:
87:ff:3d:64:d7:d6:37:35:03:e0:d0:f6:de:57:36:
6b:b3:8e:d3:ce:8a:f5:cc:d3:79:35:2d:07:cf:b9:
31:13:ea:8e:2c:a4:54:36:5f:85:d6:7a:ac:03:1b:
68:94:1c:00:36:21:d9:fd:f6:6e:3d:0b:c1:19:5f:
80:f3:12:60:cc:df:bc:73:42:42:b9:42:ba:15:89:
c9:e8:24:1d:5f:b9:3f:06:a1:15:b6:96:84:f8:2d:
d2:ab:5a:c9:e8:4a:b8:59:b4:fa:14:51:d2:c6:14:
3e:ae:4b:dc:00:bf:9c:3b:04:1b:b1:45:95:45:27:
ba:87:46:ff:3b:dd:07:e4:97:95:3a:5b:6a:c8:4e:
0e:df:b5:af:fc:10:28:17:1e:ed:23:d5:7b:0d:c7:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5A:AA:FC:DE:C5:EB:F2:16:35:9E:00:FB:32:BB:F6:E9:D9:21:FA
X509v3 Authority Key Identifier:
keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/83C1B51E861311F1B6EA1CF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:af:a4:cf:52:e5:c4:bb:48:56:c0:68:70:c1:8b:1f:86:f9:
35:af:d0:6b:41:b6:72:fc:8c:41:85:0f:fd:fa:01:c6:cd:ec:
5b:05:15:0a:53:f7:0c:d3:95:da:ae:d9:a3:f1:fd:c5:88:a8:
62:65:5f:88:c2:22:5a:e7:b0:78:8a:cf:82:b1:00:26:52:08:
1a:0c:f2:05:37:6e:80:df:13:c7:93:44:db:e8:42:ce:e6:72:
33:ab:3c:f9:81:ca:99:04:7f:0d:79:69:e2:f4:46:73:b3:3c:
7c:99:6f:5e:c4:72:54:63:76:86:64:2e:4e:e0:37:a2:a6:87:
7f:7e:61:48:59:e6:f7:34:aa:05:ee:a2:37:b5:98:7c:35:11:
bb:4f:22:f9:25:b4:93:7d:13:57:35:58:b9:22:5e:f5:fb:68:
b9:d3:2a:b4:10:1c:5a:87:fe:6e:50:d3:88:9d:cf:5d:62:21:
cd:1f:50:b6:96:87:e7:5a:c7:32:2d:0d:cd:61:a6:56:69:40:
61:0b:1d:f0:42:b9:9d:2a:68:7a:0f:13:6c:5a:62:6d:c5:13:
1f:51:4d:d8:3e:ee:04:af:64:39:11:bc:d5:70:20:dc:5d:f4:
b0:69:af:fc:62:7f:74:2d:71:af:75:05:e3:88:77:d2:13:3a:
9e:a5:18:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:50 2026 by rpki-client