Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/BC2B449685AB11F19D70DB06CF1D38B0.roa
File: BC2B449685AB11F19D70DB06CF1D38B0.roa (raw, json)
Hash identifier: uG1oYc9UVIC0RTduH8LupPHuPIyZurfyb62DQuhQpVY=
Subject key identifier: 10:EB:E6:D6:27:6E:5A:89:FA:55:E0:5B:74:44:79:7C:DB:2D:BF:D8
Certificate issuer: /CN=F3656CC2AF/serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
Certificate serial: 0798
Authority key identifier: F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/BC2B449685AB11F19D70DB06CF1D38B0.roa
Signing time: Wed 22 Jul 2026 09:00:07 +0000
ROA not before: Wed 22 Jul 2026 09:00:03 +0000
ROA not after: Sat 22 Jul 2028 09:00:03 +0000
asID: 37302
IP address blocks: 41.78.232.0/24 maxlen: 24
41.78.233.0/24 maxlen: 24
41.78.234.0/24 maxlen: 24
41.78.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.mft
rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944 (0x798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656CC2AF, serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
Validity
Not Before: Jul 22 09:00:03 2026 GMT
Not After : Jul 22 09:00:03 2028 GMT
Subject: CN=6a608697-275d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:6f:03:4d:6f:dc:e9:c2:8d:77:6a:b1:2f:
c5:11:c4:1e:f3:19:63:a9:83:1d:a6:71:74:34:77:
3d:e0:26:25:98:cc:31:07:9a:16:5b:43:5f:f5:69:
65:60:c5:ec:83:54:0f:b6:90:1b:d8:bf:1f:25:11:
d6:d4:a4:9e:26:d3:8e:0b:4c:fe:85:d9:f9:22:a6:
31:6c:7c:ab:4f:a7:75:d4:9d:c9:30:22:8e:92:83:
d3:fb:e4:fb:68:41:6c:d7:36:fd:d0:9f:22:a5:1d:
0d:fa:83:ba:57:d0:36:da:e6:c8:81:98:b4:bc:c1:
28:75:3e:b3:90:28:52:af:5f:3b:02:0d:40:8b:8f:
16:d3:b9:a8:38:f4:3a:6e:95:97:55:58:4f:7a:4f:
e0:b4:2d:c0:34:fc:7c:20:06:6e:80:c1:d2:1b:da:
c8:72:03:a8:7a:73:95:ba:47:b3:21:a1:6a:c4:fe:
a3:d6:29:9f:e8:5e:eb:a9:b5:d2:12:23:f0:06:8a:
c5:16:d1:ae:73:83:c7:da:e5:13:d8:89:8f:5b:eb:
9c:67:35:d7:da:84:4f:a3:d8:6f:76:2f:d5:47:d8:
68:8d:02:5c:b6:b6:69:88:f0:3c:e2:be:f4:97:df:
01:f9:42:d1:8b:da:24:89:ea:b3:93:0d:95:ff:84:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EB:E6:D6:27:6E:5A:89:FA:55:E0:5B:74:44:79:7C:DB:2D:BF:D8
X509v3 Authority Key Identifier:
keyid:F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/BC2B449685AB11F19D70DB06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.232.0/22
Signature Algorithm: sha256WithRSAEncryption
22:45:8c:b8:a6:c2:8d:85:10:40:72:fe:ad:aa:d1:e3:69:9d:
2b:0e:14:5f:10:e3:db:f9:f4:88:91:64:c4:d8:2b:9d:d5:da:
ad:ce:37:6d:95:4c:c8:4e:68:f2:84:f4:17:04:aa:43:76:cf:
93:3a:da:d5:85:98:b4:96:38:99:98:8d:64:94:b9:26:bc:25:
3d:d1:60:f3:7c:3e:ce:bb:ea:89:ae:6e:96:ba:3a:a9:2d:68:
24:93:da:59:7a:d9:f6:a4:3a:a0:26:ec:0e:ec:d1:00:d2:3a:
e2:6c:b9:69:4b:8d:5b:36:18:90:37:f9:0b:b1:c9:b2:ee:84:
09:aa:6f:b0:df:a6:62:85:4d:7e:b5:10:e5:c6:56:dc:75:9d:
0f:7d:c0:83:49:ae:d0:2b:c2:77:52:bd:0e:4e:45:5b:2e:98:
8e:df:21:1c:ff:49:77:c6:3d:ce:7f:fa:c0:dc:6a:5e:34:3e:
41:1b:31:f2:de:a1:c0:ab:0b:ff:20:ff:5f:11:90:d1:e5:12:
0a:83:6a:93:bf:dd:11:73:14:c8:ae:33:8a:f8:7f:1b:44:d2:
0d:08:a9:dc:13:2f:57:95:35:1c:45:31:c9:63:46:24:7e:2f:
ee:61:79:84:1a:ea:ab:68:0a:2c:01:30:c3:88:b4:45:80:5b:
4f:f1:a3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:50 2026 by rpki-client