Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/9A828E6C873B11F1B4DF4612CF1D38B0.roa
File: 9A828E6C873B11F1B4DF4612CF1D38B0.roa (raw, json)
Hash identifier: SJmKynizrKbgn8FXg01sBl/VLgxAY5x4y0EbkwRQIh4=
Subject key identifier: FB:F5:A4:41:43:6A:E3:31:A2:ED:AC:1D:05:E1:11:5C:3D:04:8F:24
Certificate issuer: /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial: 0630
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/9A828E6C873B11F1B4DF4612CF1D38B0.roa
Signing time: Fri 24 Jul 2026 08:42:29 +0000
ROA not before: Fri 24 Jul 2026 08:42:25 +0000
ROA not after: Tue 25 May 2032 08:42:25 +0000
asID: 327996
IP address blocks: 102.132.32.0/19 maxlen: 24
196.11.176.0/21 maxlen: 24
196.251.128.0/21 maxlen: 24
2c0f:5a00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Validity
Not Before: Jul 24 08:42:25 2026 GMT
Not After : May 25 08:42:25 2032 GMT
Subject: CN=6a632575-0be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:b6:49:11:05:15:ae:69:97:f1:61:8c:87:
d0:86:c6:5c:52:56:99:7b:bf:ab:55:f4:b4:72:b0:
81:6b:94:99:27:da:34:da:93:6e:19:58:8a:84:35:
ee:1c:18:7e:32:dd:49:40:76:43:96:64:7e:e3:c1:
0c:18:90:18:e5:92:34:2d:26:45:b0:12:de:67:9c:
95:6c:84:86:b3:a2:c0:1d:83:9e:f2:e4:b8:db:8f:
df:32:b5:b8:d2:fd:12:b1:15:5b:cc:b1:02:cb:aa:
3f:68:33:3a:bb:0f:e3:fc:5c:60:cf:25:ed:6f:0a:
80:99:c0:fe:e4:8e:9f:2b:a5:f3:a3:8a:b0:37:06:
d3:bb:77:7f:fb:f6:fe:5c:2b:bf:c3:79:7b:1f:17:
8a:52:4c:fe:ac:86:c3:a4:11:b5:8a:12:8b:53:c3:
00:20:8f:c7:3d:c8:53:e4:79:d0:c3:a4:2d:99:da:
54:74:dd:3b:6f:ce:d9:12:46:b0:d3:9f:ff:5f:f9:
16:0e:be:17:f5:da:6b:d6:50:47:4b:ce:f3:f1:d2:
17:2c:64:8f:2e:9b:5d:4c:95:94:ca:ef:65:95:70:
93:b8:a4:59:62:d3:0c:9a:40:0b:bb:f1:fd:e3:d4:
4d:f1:db:d5:cd:be:0f:f2:a5:1a:a3:24:d4:3f:84:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:A4:41:43:6A:E3:31:A2:ED:AC:1D:05:E1:11:5C:3D:04:8F:24
X509v3 Authority Key Identifier:
keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/9A828E6C873B11F1B4DF4612CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.132.32.0/19
196.11.176.0/21
196.251.128.0/21
IPv6:
2c0f:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
0f:15:84:bc:ad:f5:5f:2f:48:7f:21:27:eb:07:7d:23:75:ca:
f9:3d:85:09:f7:bb:3a:a3:5e:18:aa:54:cb:0a:16:f9:c6:14:
a9:a1:8f:cc:32:26:cb:db:10:ec:ea:91:12:80:20:ba:2f:a5:
3a:a8:7d:e5:c9:18:bd:ff:ae:49:03:5c:a8:2a:50:ec:25:9c:
85:43:0d:06:7b:65:7c:91:47:23:b5:03:97:b6:71:4a:74:60:
23:18:3e:73:6b:10:aa:17:f1:90:98:f1:3f:6b:25:dd:bd:3d:
e6:c7:5b:51:17:45:9a:ed:ff:ed:d1:88:c2:08:2d:ac:3d:36:
d5:f0:5f:0e:96:e9:cb:bf:d3:c8:70:af:98:e2:34:1f:60:af:
62:30:c1:ca:7a:78:74:aa:3a:89:ef:16:6c:e4:82:e6:58:f0:
9d:90:bf:b7:6e:ba:77:7f:35:7c:d8:f7:f3:c9:87:39:80:78:
8f:66:e6:9c:75:9c:80:75:af:4c:3f:e5:fd:0c:2d:30:59:32:
e7:42:2f:b0:fb:52:38:38:b1:15:42:70:25:ef:35:20:c1:32:
9b:c3:ca:c6:fb:43:80:1c:ba:6d:14:be:30:28:58:8b:aa:80:
64:3e:74:59:5e:a5:0d:bb:2e:c9:c7:79:c8:fb:d1:53:bf:e8:
d6:61:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:06:22 2026 by rpki-client