Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/D7D7B3EA872311F189EC9403CF1D38B0.roa
File: D7D7B3EA872311F189EC9403CF1D38B0.roa (raw, json)
Hash identifier: RwRZLPSGgelwelMUJAdNlv4rmTCGxyEsRVulPRLdE+I=
Subject key identifier: 69:1F:AE:11:AF:F3:FC:17:2F:3F:2B:2B:1F:0D:A5:0B:08:F3:F1:E4
Certificate issuer: /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial: 0D6A
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/D7D7B3EA872311F189EC9403CF1D38B0.roa
Signing time: Fri 24 Jul 2026 05:52:24 +0000
ROA not before: Fri 24 Jul 2026 05:52:18 +0000
ROA not after: Sat 31 Jul 2032 05:52:18 +0000
asID: 328135
IP address blocks: 196.6.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3434 (0xd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB628AF, serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Validity
Not Before: Jul 24 05:52:18 2026 GMT
Not After : Jul 31 05:52:18 2032 GMT
Subject: CN=6a62fd98-3a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:6d:6c:1c:89:4a:99:50:b4:71:5c:dc:bd:
f7:89:ab:d8:d4:a0:4a:cf:d2:16:82:62:3f:26:a7:
a5:44:c9:44:f4:7f:c9:59:d2:5e:72:65:20:20:ce:
8b:59:54:43:93:7f:fe:ad:ba:3f:9a:ad:0b:a6:1a:
21:17:16:70:b9:07:46:d9:30:8e:6c:3d:00:c4:ab:
a2:37:51:10:f4:bf:26:19:46:83:ce:82:3e:ef:1e:
04:3b:63:ba:1d:6d:a3:b8:1c:ff:27:58:b3:9d:93:
1b:db:ae:2d:86:7b:7e:ce:b9:da:b6:b7:01:c3:70:
2c:88:67:da:f7:92:5d:d3:97:1a:ce:cf:a3:82:37:
63:cd:8c:3d:42:8c:78:b8:52:30:0f:db:5b:ed:5b:
c9:3a:18:55:73:8b:d9:d2:bc:66:c9:cc:24:f0:fb:
c3:53:50:ca:99:70:eb:ca:41:a0:fc:e5:32:8d:a4:
d7:67:92:54:2e:54:1e:d7:1e:cb:a3:f7:0f:51:ff:
54:4c:19:ce:db:65:2b:b0:a9:bf:5b:3f:38:86:e8:
e6:27:41:b5:c5:87:7c:bd:0f:30:b7:fc:ac:50:7e:
ae:19:32:21:d6:47:e9:f8:e2:1a:96:f9:88:bf:c7:
ca:73:9f:3a:a5:5d:ec:41:30:c1:f0:56:ec:14:10:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1F:AE:11:AF:F3:FC:17:2F:3F:2B:2B:1F:0D:A5:0B:08:F3:F1:E4
X509v3 Authority Key Identifier:
keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/D7D7B3EA872311F189EC9403CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.6.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:36:58:15:e3:8b:b6:61:9a:62:eb:b2:db:6f:90:85:48:1c:
37:69:93:4d:5f:de:31:c8:db:8c:86:b0:c7:2b:58:e7:b1:0c:
32:a2:d8:f1:c6:53:7d:a0:ea:8d:d2:d5:0f:82:55:4a:b8:e7:
91:c9:cc:73:4f:76:98:94:90:ba:26:ea:d5:ee:11:9c:18:17:
05:54:35:63:c4:47:8f:5e:8c:5f:cd:68:d2:c7:34:9f:bb:d9:
2d:74:ab:db:e5:47:a1:52:51:d5:cc:ac:fa:53:d5:09:4c:9e:
1c:a5:e5:97:dd:23:61:e2:dd:c5:6c:09:02:7d:df:05:8b:23:
79:e4:99:2b:9c:b8:5b:96:a9:83:d2:30:5d:15:cf:20:88:5f:
c8:34:0f:7f:71:5c:55:fe:61:57:8c:61:bb:4b:b5:87:1a:2b:
65:c7:0f:0e:b6:2b:df:87:40:c6:57:70:ba:e5:01:a9:54:18:
f6:18:26:ab:a1:e7:8a:79:01:3c:cd:ff:09:3e:32:2e:60:31:
c7:7d:14:49:e2:eb:d1:a0:23:b3:76:2a:9e:8c:29:3b:98:8e:
bf:9e:39:05:a6:ee:0e:f6:95:99:08:20:dd:76:89:9b:47:bd:
a9:8d:97:e1:46:e5:19:3e:34:90:d4:65:1e:3d:a9:47:37:57:
d8:c1:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:41:46 2026 by rpki-client