Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/8D2A260C748111F19133C316CF1D38B0.roa
File: 8D2A260C748111F19133C316CF1D38B0.roa (raw, json)
Hash identifier: E5OkO0hC2p5sav8EOOxzrRj7hCtcXtLqUMdK/zTMcsQ=
Subject key identifier: A0:35:22:16:E0:18:7B:85:6A:28:26:1F:DC:D6:24:1A:B0:A1:23:89
Certificate issuer: /CN=F3675053AF/serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
Certificate serial: 02
Authority key identifier: 95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/8D2A260C748111F19133C316CF1D38B0.roa
Signing time: Tue 30 Jun 2026 12:45:20 +0000
ROA not before: Tue 30 Jun 2026 12:45:14 +0000
ROA not after: Mon 31 Dec 2035 12:45:14 +0000
asID: 37512
IP address blocks: 197.149.168.0/24 maxlen: 24
197.149.169.0/24 maxlen: 24
197.149.170.0/24 maxlen: 24
197.149.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675053AF, serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
Validity
Not Before: Jun 30 12:45:14 2026 GMT
Not After : Dec 31 12:45:14 2035 GMT
Subject: CN=6a43ba5f-0b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:70:4b:44:1c:ec:69:f3:2c:df:1a:43:1e:
94:3c:8b:12:08:bb:c4:9f:2e:2e:b8:14:4c:0a:67:
2b:6b:04:ae:b5:17:cf:a0:9e:d5:85:84:e3:64:23:
44:cd:9c:06:19:b7:32:62:67:1b:88:bf:90:ed:5f:
4b:4b:ae:91:ae:d9:78:e1:c3:7f:18:45:0f:82:fd:
f1:23:03:5d:79:77:46:6c:17:c9:64:d8:2b:54:58:
8f:7f:b1:87:7c:63:35:17:26:db:98:b6:c4:ac:fa:
51:0e:d8:2b:1b:d8:91:29:64:a2:d9:0a:88:68:13:
0e:cd:4a:b5:a6:bd:85:4d:5e:0c:d8:d4:b6:8e:4c:
5a:dd:2b:04:1a:9e:1b:6d:a5:4a:21:30:b4:af:95:
8e:d3:df:84:83:92:16:92:63:39:3e:49:f3:27:82:
a3:8a:28:89:a6:d0:ee:02:bc:40:fc:10:95:7d:c6:
9c:0e:65:d3:f8:7e:b8:89:25:50:92:0d:3e:1f:e1:
54:7d:a2:35:30:f9:a5:f1:dd:54:ee:74:a1:b0:84:
af:47:64:3f:9d:98:a9:94:a5:68:fc:f4:9e:ce:45:
c4:62:f5:e2:ee:c0:93:ba:ff:1c:ba:97:1d:a1:2c:
bd:70:95:f3:bd:9e:81:2e:6d:58:11:4f:b2:26:6c:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:35:22:16:E0:18:7B:85:6A:28:26:1F:DC:D6:24:1A:B0:A1:23:89
X509v3 Authority Key Identifier:
keyid:95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/8D2A260C748111F19133C316CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.149.168.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:1a:cf:f1:36:aa:28:eb:f7:81:8f:88:8a:8a:63:82:aa:af:
dd:a9:bb:5a:f6:a7:e7:77:04:41:73:38:89:2f:fc:18:ee:1e:
ff:2c:86:20:c8:19:96:cc:aa:07:2c:0b:fc:56:83:f2:d9:d7:
94:a1:e2:8e:5a:65:c5:4c:d8:1f:4c:33:40:63:a4:d1:99:74:
f5:c7:48:4f:d5:25:04:82:95:9e:ba:e7:a7:a0:b2:63:cb:7b:
2d:03:fc:ae:13:29:00:2b:15:80:d7:3a:47:4c:f5:6f:fd:57:
57:9d:84:d6:bc:3d:7b:f5:3c:c5:32:9b:53:1a:86:af:17:2a:
bf:c8:6a:b2:71:9c:48:bd:1f:04:e4:d9:7c:70:61:6b:c1:06:
a3:cf:7a:01:cd:85:36:f6:54:48:f4:f0:e2:3a:f6:41:2a:f5:
bc:4a:85:fd:94:ee:25:36:14:da:53:ea:98:9b:7d:79:3a:e9:
8d:6f:17:80:7d:87:aa:3b:99:73:c3:55:13:a1:d8:3c:ba:ac:
b0:0a:9e:db:84:25:2c:63:92:9e:fb:cf:66:a9:25:e2:08:91:
81:a5:9d:a6:1c:85:d5:7e:c7:96:2c:78:2c:b1:b6:61:31:65:
01:b3:f7:b7:fb:23:e4:4c:5a:25:e7:0c:c1:08:56:1c:45:e4:
53:a0:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:39 2026 by rpki-client