Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/AB6350E2196B11F1A487B3C5DAE4EC9C.roa
File: AB6350E2196B11F1A487B3C5DAE4EC9C.roa (raw, json)
Hash identifier: ireawfZvbAaPyxhqCOXjEwzRENwY1Ntg61qD+r7oOW8=
Subject key identifier: 16:C4:CC:28:69:7C:B9:BA:D9:D3:2E:05:82:71:FB:60:93:2C:89:CD
Certificate issuer: /CN=F367B560AF/serialNumber=646FCDF8F4A278A08EAB347BC5B2BAF9AF6BF064
Certificate serial: 04A4
Authority key identifier: 64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/AB6350E2196B11F1A487B3C5DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 14:49:25 +0000
ROA not before: Fri 06 Mar 2026 14:49:21 +0000
ROA not after: Wed 06 Mar 2030 14:49:21 +0000
asID: 25429
IP address blocks: 196.2.8.0/21 maxlen: 24
2c0f:f908::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188 (0x4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B560AF, serialNumber=646FCDF8F4A278A08EAB347BC5B2BAF9AF6BF064
Validity
Not Before: Mar 6 14:49:21 2026 GMT
Not After : Mar 6 14:49:21 2030 GMT
Subject: CN=69aae975-eb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:4b:95:2a:18:f4:16:56:0c:7d:d2:58:c7:
44:e8:47:72:70:5d:12:eb:1b:cd:69:15:cb:60:5e:
7d:0a:87:83:25:88:c6:f8:f4:e3:f2:62:96:8c:b0:
e4:8b:2d:a4:e8:66:05:0b:18:7d:d4:90:28:e7:0f:
bb:0b:90:9b:ee:83:26:7a:f3:e7:bb:bd:d5:56:46:
db:01:40:12:f3:be:1f:81:ce:f2:95:4f:be:ab:38:
7f:eb:95:df:33:cd:ff:90:f6:84:31:66:b2:2c:36:
e5:cf:b0:8f:34:81:9b:ab:32:20:f8:fc:f0:bd:66:
c0:a3:bd:f5:05:4d:55:e6:ce:df:54:1d:bc:79:d1:
b1:a0:16:aa:31:29:4f:d8:c7:0d:55:bb:f9:3a:5e:
ba:db:d7:53:4c:66:2d:65:91:fc:c4:80:31:79:60:
b9:65:90:6d:df:e1:7a:d5:ed:60:e9:e4:23:ec:b8:
66:01:ed:29:f7:f0:9a:ec:21:7e:9f:55:87:95:67:
2d:e8:6c:f6:8d:80:43:a3:6d:96:d4:a9:2d:b3:5a:
4b:7a:91:e5:4a:b9:eb:0e:1b:0c:76:f3:2e:dc:d6:
6d:01:93:5f:cb:23:cd:a6:33:ac:db:7b:34:a2:b1:
54:ee:b6:c3:6a:51:fd:ba:cb:80:4a:fb:4e:91:14:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:CC:28:69:7C:B9:BA:D9:D3:2E:05:82:71:FB:60:93:2C:89:CD
X509v3 Authority Key Identifier:
keyid:64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/AB6350E2196B11F1A487B3C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.8.0/21
IPv6:
2c0f:f908::/32
Signature Algorithm: sha256WithRSAEncryption
5b:90:ce:8b:3d:7e:d2:8b:fc:b3:0e:9a:b0:c8:e6:d0:5f:ee:
a2:a4:ce:bd:1e:16:99:48:05:da:3d:69:d4:64:fd:69:1b:43:
38:7e:cd:28:8e:0c:41:90:20:5c:43:31:83:01:16:2f:b5:56:
9b:9e:47:15:ee:39:6e:86:7d:8c:03:be:ed:f6:07:cb:8c:b1:
4c:7e:d8:54:eb:0b:91:6b:46:3d:d5:56:b3:f8:74:92:ff:ba:
68:1e:85:be:6d:a6:13:e2:e2:a4:7a:91:1f:98:f5:29:62:98:
1e:d7:74:7a:4d:12:88:7e:46:8b:1c:58:cd:9e:41:89:59:bd:
29:b4:1c:a2:68:23:8d:85:11:51:87:4c:02:a6:c5:7e:6a:f6:
af:26:42:3a:b9:21:a6:95:e2:13:0f:dd:1a:ea:34:86:44:53:
94:48:1e:ba:5c:70:5e:2f:2d:4b:55:b2:ab:d6:27:b9:9a:42:
70:6c:00:9c:3c:71:ce:94:c7:5c:7a:50:ca:0d:0c:a5:02:eb:
47:b7:c4:64:81:92:97:72:1f:2a:7c:5c:1b:ed:6f:ec:8b:ac:
96:56:c8:08:d6:64:0b:e1:a9:61:28:11:8a:34:2a:6a:0b:89:
46:36:c0:33:b4:38:60:3d:1c:3f:7b:25:28:58:e0:f9:18:6c:
a0:8d:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:17:22 2026 by rpki-client