Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/9C7FCA94847B11F1A3AC5DBBCE1D38B0.roa
File: 9C7FCA94847B11F1A3AC5DBBCE1D38B0.roa (raw, json)
Hash identifier: CDg6sixtxLLYq53qAACfV1YNKuHXTop88xuaWBI25Nc=
Subject key identifier: 19:A8:E4:75:2B:9C:63:AE:38:57:6F:31:8A:E3:B5:E1:2D:13:53:E8
Certificate issuer: /CN=F36BF1B7AF/serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
Certificate serial: 0B33
Authority key identifier: 56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/9C7FCA94847B11F1A3AC5DBBCE1D38B0.roa
Signing time: Mon 20 Jul 2026 20:43:07 +0000
ROA not before: Mon 20 Jul 2026 20:43:03 +0000
ROA not after: Mon 21 Jul 2036 20:43:03 +0000
asID: 13335
IP address blocks: 197.234.240.0/22 maxlen: 24
197.234.240.0/24 maxlen: 24
197.234.241.0/24 maxlen: 24
197.234.242.0/24 maxlen: 24
197.234.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 01:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF1B7AF, serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
Validity
Not Before: Jul 20 20:43:03 2026 GMT
Not After : Jul 21 20:43:03 2036 GMT
Subject: CN=6a5e885b-75d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f5:12:68:42:a8:5f:57:7a:b6:8c:d0:e9:30:
56:3f:2e:52:2f:44:1c:8f:45:0b:a2:15:3c:81:eb:
c3:e0:b4:e1:25:ee:ed:9c:1e:61:48:b6:d0:62:e0:
71:c3:e5:6b:7f:02:e2:62:9b:10:d3:5b:ec:70:6f:
f0:d3:02:b2:7b:29:d7:38:a1:1e:73:dc:00:f3:2b:
1f:e4:dd:be:e8:3f:7a:07:56:80:2e:7c:1f:02:ed:
e1:f9:bc:79:f0:62:5c:2f:f6:48:d0:cc:d6:f0:b3:
1c:68:34:6e:bd:16:ee:9e:49:c0:20:99:94:cc:a9:
37:8b:32:ae:57:37:2c:9e:8b:68:19:59:22:59:62:
56:42:0a:22:93:7c:97:60:9a:b9:9c:8d:b1:06:86:
cb:14:86:3c:59:d9:4c:7a:23:fc:c4:cb:81:48:df:
49:34:11:ea:3b:74:73:c1:85:21:e7:5f:1d:29:a5:
bd:a9:f8:54:2e:0f:cd:2f:e9:2b:e0:59:bc:8d:24:
16:63:0e:d7:15:18:ee:5a:a2:5e:46:61:74:b8:ad:
4d:7e:b9:b7:cc:c2:e5:2b:f4:4a:c3:90:f6:93:3e:
f4:f0:5b:4e:67:2d:30:4a:91:61:70:ba:ee:93:29:
bd:a1:a6:e8:4a:af:2b:31:44:56:ed:56:93:f4:0f:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:E4:75:2B:9C:63:AE:38:57:6F:31:8A:E3:B5:E1:2D:13:53:E8
X509v3 Authority Key Identifier:
keyid:56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/9C7FCA94847B11F1A3AC5DBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.240.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:63:a7:ea:f2:8b:d0:e8:eb:48:d2:c0:f8:33:12:eb:c3:51:
86:d9:a2:90:67:5a:c1:00:f3:91:bc:23:34:b8:06:68:e3:d6:
b2:0b:3a:33:81:15:23:68:f2:5a:9a:fb:03:c2:de:56:9c:35:
e5:af:37:09:c6:90:06:ba:cc:ab:34:87:07:35:1b:fb:2a:0c:
5a:27:b3:47:e5:87:20:fd:4b:fe:ff:64:ca:c8:7b:1e:46:1a:
c0:17:95:df:47:95:63:13:3f:7b:22:aa:49:db:1e:56:ff:e1:
40:4e:94:f9:03:87:8b:0e:0b:eb:b4:18:2d:2b:08:8c:2d:60:
95:cd:cb:35:a6:49:de:6c:65:c1:64:b2:dc:68:79:91:e9:f0:
30:da:32:aa:8d:d5:7a:d9:9d:59:42:1a:20:a2:4c:ac:ad:2c:
26:af:6a:1e:94:10:4c:73:04:8d:1c:be:c0:13:e4:ec:fc:44:
64:2e:05:f5:0c:f2:dc:fd:56:2b:60:14:1f:97:d4:d2:9b:4d:
b7:b8:bb:a6:3e:b9:03:be:2c:7f:40:0c:e2:3a:79:d6:cd:41:
af:e3:7a:48:e9:48:70:bf:9d:47:dc:e5:ce:80:c5:40:c6:76:
03:84:1d:1c:72:bb:5e:b6:c7:04:02:32:28:08:6a:d7:54:64:
e4:02:40:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkYxQjdBRjExMC8GA1UEBRMoNTZEOTI2REZFMTRCNTQxNEVBQjU5Mzc1RDk0Q0Yw
MUZBNTQ4RDMxNjAeFw0yNjA3MjAyMDQzMDNaFw0zNjA3MjEyMDQzMDNaMBgxFjAU
BgNVBAMTDTZhNWU4ODViLTc1ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD19RJoQqhfV3q2jNDpMFY/LlIvRByPRQuiFTyB68PgtOEl7u2cHmFIttBi
4HHD5Wt/AuJimxDTW+xwb/DTArJ7Kdc4oR5z3ADzKx/k3b7oP3oHVoAufB8C7eH5
vHnwYlwv9kjQzNbwsxxoNG69Fu6eScAgmZTMqTeLMq5XNyyei2gZWSJZYlZCCiKT
fJdgmrmcjbEGhssUhjxZ2Ux6I/zEy4FI30k0Eeo7dHPBhSHnXx0ppb2p+FQuD80v
6SvgWbyNJBZjDtcVGO5aol5GYXS4rU1+ubfMwuUr9ErDkPaTPvTwW05nLTBKkWFw
uu6TKb2hpuhKrysxRFbtVpP0D9thAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGajk
dSucY644V28xiuO14S0TU+gwHwYDVR0jBBgwFoAUVtkm3+FLVBTqtZN12UzwH6VI
0xYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJGMUI3LzcxRjQ0Q0ZDRUU5RjExRTg5NDZBNzM1REY4QUVBMjI4L1Z0a20z
LUZMVkJUcXRaTjEyVXp3SDZWSTB4WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Z0a20zLUZMVkJUcXRaTjEyVXp3SDZWSTB4WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJGMUI3LzcxRjQ0Q0ZDRUU5RjExRTg5NDZBNzM1REY4
QUVBMjI4LzlDN0ZDQTk0ODQ3QjExRjFBM0FDNURCQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALF6vAwDQYJKoZIhvcNAQEL
BQADggEBALxjp+ryi9Do60jSwPgzEuvDUYbZopBnWsEA85G8IzS4Bmjj1rILOjOB
FSNo8lqa+wPC3lacNeWvNwnGkAa6zKs0hwc1G/sqDFons0flhyD9S/7/ZMrIex5G
GsAXld9HlWMTP3siqknbHlb/4UBOlPkDh4sOC+u0GC0rCIwtYJXNyzWmSd5sZcFk
stxoeZHp8DDaMqqN1XrZnVlCGiCiTKytLCavah6UEExzBI0cvsAT5Oz8RGQuBfUM
8tz9VitgFB+X1NKbTbe4u6Y+uQO+LH9ADOI6edbNQa/jekjpSHC/nUfc5c6AxUDG
dgOEHRxyu162xwQCMigIatdUZOQCQII=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:19 2026 by rpki-client