Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/AAE956961D5511F18D2C4BCDDAE4EC9C.roa
File: AAE956961D5511F18D2C4BCDDAE4EC9C.roa (raw, json)
Hash identifier: eNBb4iv8KgSlwncBkb5fhFPzZUtHTRGyst8zzcUlZhw=
Subject key identifier: ED:70:FF:69:C0:54:02:37:EA:57:93:56:E3:44:A9:BE:94:8D:A3:66
Certificate issuer: /CN=F3652E81AF/serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
Certificate serial: 066A
Authority key identifier: 81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/AAE956961D5511F18D2C4BCDDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 14:22:01 +0000
ROA not before: Wed 11 Mar 2026 14:21:55 +0000
ROA not after: Fri 31 Dec 2049 14:21:55 +0000
asID: 3741
IP address blocks: 196.13.35.0/24 maxlen: 24
196.13.73.0/24 maxlen: 24
196.13.74.0/23 maxlen: 23
196.13.76.0/22 maxlen: 22
196.13.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642 (0x66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652E81AF, serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
Validity
Not Before: Mar 11 14:21:55 2026 GMT
Not After : Dec 31 14:21:55 2049 GMT
Subject: CN=69b17a89-9cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:23:28:c2:60:0b:bc:3d:da:a1:e2:9c:ac:
f4:1b:de:3c:bd:e6:73:71:ac:05:60:df:c6:dd:5c:
38:85:e5:5d:b3:ee:b8:4d:c0:56:72:f4:33:31:b0:
eb:eb:4b:11:39:f0:0e:76:de:6b:1d:64:fa:92:9c:
28:9e:91:5e:aa:06:fd:af:85:b8:50:f9:d1:44:ec:
68:cb:60:9a:bb:ac:be:9d:12:fb:bd:91:06:84:1e:
dc:b2:10:04:20:d8:a1:03:e5:90:a9:07:04:e0:9c:
e5:ad:93:98:89:82:38:42:ee:1d:4d:4d:0f:b5:64:
60:cc:3d:57:32:6d:56:91:86:66:18:fe:96:d3:ad:
0a:49:88:34:d2:17:4e:45:9c:86:d7:ce:7e:72:03:
76:85:bc:43:cb:18:e8:c3:17:90:b7:f4:1c:51:b2:
5f:05:01:68:19:74:2c:11:a7:4b:e1:24:6c:27:af:
73:bf:05:8f:94:ad:27:04:e7:15:4e:1c:71:d4:e4:
cc:f3:ca:31:00:d9:98:bc:12:a8:1e:35:84:de:ec:
be:6e:fe:06:6d:1f:f5:8e:be:93:58:55:ef:2a:88:
c6:8f:7d:4d:ad:84:2e:6c:d1:3b:e7:98:ae:e4:9d:
f0:a8:e2:2e:24:5e:c5:15:1b:fa:57:73:ab:29:08:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:FF:69:C0:54:02:37:EA:57:93:56:E3:44:A9:BE:94:8D:A3:66
X509v3 Authority Key Identifier:
keyid:81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/AAE956961D5511F18D2C4BCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.13.35.0/24
196.13.73.0-196.13.80.255
Signature Algorithm: sha256WithRSAEncryption
40:c5:59:50:31:f3:90:ac:bc:3a:07:bc:43:33:e2:11:07:1f:
41:ff:9d:bc:2d:fb:39:a8:9b:d6:ef:08:cd:2e:5a:e6:34:9e:
cc:2a:ed:66:fc:49:63:cb:9b:93:4f:e4:b4:6d:77:b2:e9:0e:
90:a2:28:43:1e:09:d2:04:7e:1d:c3:61:eb:73:43:a2:8a:53:
09:47:12:67:c6:34:f2:ad:1d:64:a1:64:82:83:1e:8f:a5:3d:
d1:3a:11:c4:d3:e8:12:90:d3:f2:18:07:53:90:30:95:f1:ca:
fc:08:7a:bf:44:42:ac:eb:3c:f2:eb:4a:b9:ee:64:ff:68:17:
34:8e:03:e7:41:8c:9f:a6:a6:e3:23:aa:bf:46:a3:37:54:57:
98:85:50:fd:5e:83:78:55:f6:7d:76:aa:33:c6:bc:3b:2b:c0:
d9:f9:bb:ec:7e:0b:42:56:ba:a1:4c:1b:24:5e:3b:d6:db:9d:
ea:68:f7:0d:eb:9b:85:c6:df:6d:c5:53:d7:d7:93:4d:e1:b0:
8a:52:a4:9f:de:32:6f:d8:24:17:c6:25:16:04:fe:14:53:3b:
d8:d5:7a:fa:0f:ef:4c:12:44:de:e2:ac:d7:ee:2c:ff:ff:59:
9a:a4:ca:40:fa:8b:3c:30:71:91:e2:2c:9d:0f:c2:d5:b6:89:
1b:33:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:04 2026 by rpki-client