Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9BB3EBB8859311F1BF6CDAF9CE1D38B0.roa
File: 9BB3EBB8859311F1BF6CDAF9CE1D38B0.roa (raw, json)
Hash identifier: dwAgMYsvPegltyVDepDaI84ctJXl43C2pJVQvRVqXxk=
Subject key identifier: 74:FE:58:9D:A2:5A:0B:4D:BC:B7:E8:CC:76:EE:DB:36:7D:FF:82:2B
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0602
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9BB3EBB8859311F1BF6CDAF9CE1D38B0.roa
Signing time: Wed 22 Jul 2026 06:07:25 +0000
ROA not before: Wed 22 Jul 2026 06:07:21 +0000
ROA not after: Sat 31 Oct 2026 06:07:21 +0000
asID: 4809
IP address blocks: 154.72.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538 (0x602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Jul 22 06:07:21 2026 GMT
Not After : Oct 31 06:07:21 2026 GMT
Subject: CN=6a605e1d-897e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:b2:fc:84:3d:3c:3f:11:b4:4d:70:a2:8d:
b2:55:be:e9:c4:68:de:f7:c9:1e:9a:9a:ad:41:89:
17:10:4e:57:86:7c:1b:6a:7b:dc:3a:22:a3:19:89:
66:59:47:74:c6:12:1b:08:83:47:f8:14:52:59:77:
ab:1d:75:66:c1:7b:1e:45:f3:8a:59:dc:27:b2:07:
0e:90:b5:51:9a:97:9e:f1:55:ac:0a:8e:3e:51:a8:
76:69:02:93:c7:40:cb:24:7f:56:63:84:55:c2:6c:
fe:92:73:fc:2a:ea:7e:05:8e:e2:db:68:87:fb:58:
51:3e:2c:7a:ca:c3:41:b2:6f:28:68:d1:82:c2:4f:
4a:64:00:8b:2c:24:bb:07:c8:25:96:7c:13:02:67:
b4:61:93:e4:db:b1:cb:f0:9c:73:06:69:9e:ac:0a:
b9:a7:bd:e6:cf:e1:88:94:47:22:9b:33:d5:b1:b8:
d3:01:2b:62:5a:d5:17:60:27:38:d2:d8:c0:c9:9d:
0e:dc:e8:a3:4e:c0:4a:10:9f:f4:2a:39:a1:05:b5:
b3:31:cd:10:f0:19:62:33:2f:37:6c:b7:52:44:de:
52:25:ea:77:c9:2d:00:9c:ed:d7:19:4b:4f:8b:0a:
80:67:af:8c:f5:c7:78:ee:57:84:77:7e:60:1b:ce:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:58:9D:A2:5A:0B:4D:BC:B7:E8:CC:76:EE:DB:36:7D:FF:82:2B
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9BB3EBB8859311F1BF6CDAF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.42.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:b2:33:2e:65:e0:9f:25:38:2b:7d:f8:e2:49:2e:c6:c8:20:
aa:35:af:1a:b1:47:df:f9:c5:65:d0:60:c6:67:6b:7d:12:b9:
97:e7:61:48:e9:9e:27:d0:af:d7:7d:c5:cf:99:e5:49:e6:2e:
f0:55:36:ff:60:1e:fe:b4:ef:07:15:39:3f:d0:f1:1a:b8:39:
11:25:3d:ce:f2:ad:46:8d:c1:6f:55:1a:98:6d:4a:ca:24:a9:
3f:c1:43:c6:26:3f:1b:ab:58:de:5a:06:b9:12:19:e5:d0:cc:
38:cb:07:17:40:26:7b:5d:b7:66:9d:6c:be:72:4e:ed:88:87:
5d:d7:69:17:b2:e4:5f:e1:0f:76:87:a7:b9:d0:54:9f:44:2b:
94:b0:69:74:3d:68:ec:99:80:6f:c9:f7:75:38:2f:76:1a:08:
10:82:24:6a:90:79:f8:4d:5e:24:80:6a:cc:72:27:d9:66:33:
72:70:92:a8:36:b3:26:d6:c1:ff:b3:a8:fe:db:04:fd:79:31:
d8:a3:ec:0b:72:52:d7:1f:38:c5:42:f4:67:4a:79:8e:1e:5d:
cc:2b:da:0b:dc:b5:c7:0d:37:5d:dd:8c:b8:85:a5:5c:e7:ac:
4a:44:a7:af:bf:d8:43:9d:d4:6c:bb:83:25:3f:0f:f6:c5:7f:
b1:ea:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:14:59 2026 by rpki-client