Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/A055D1AA6EE511F19714E2FECE1D38B0.roa
File: A055D1AA6EE511F19714E2FECE1D38B0.roa (raw, json)
Hash identifier: r3XpQspw/9BA/Gc+bMayTEIJJPc+qUwahgjyuVmoO3k=
Subject key identifier: 6A:37:5E:99:8A:F7:C2:87:F9:2B:82:DE:6F:0C:BB:15:3F:D2:F1:FB
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 0A6A
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/A055D1AA6EE511F19714E2FECE1D38B0.roa
Signing time: Tue 23 Jun 2026 09:26:34 +0000
ROA not before: Tue 23 Jun 2026 09:26:30 +0000
ROA not after: Tue 26 Jun 2029 09:26:30 +0000
asID: 37769
IP address blocks: 196.49.20.0/24 maxlen: 24
2001:43f8:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Jun 23 09:26:30 2026 GMT
Not After : Jun 26 09:26:30 2029 GMT
Subject: CN=6a3a514a-dcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:eb:6f:26:00:f0:48:84:67:95:29:92:99:
92:da:54:61:13:9f:81:79:7c:67:45:d3:12:bd:94:
40:bd:a1:84:51:43:40:a0:c3:49:10:f0:12:2f:9c:
16:e5:4e:64:d8:2e:11:fb:b9:6f:b6:fc:a8:db:b8:
aa:ce:de:74:a4:b0:8c:8c:f6:00:10:34:26:81:37:
ef:ae:08:36:fc:fa:32:23:c9:12:93:c5:f9:b9:9e:
76:ec:91:db:49:f9:92:c9:c3:f7:9a:c7:dc:48:c6:
b3:11:f8:fc:69:fb:bf:ac:11:59:13:4e:84:3b:94:
07:e3:b8:35:82:64:e4:74:53:d4:38:09:64:a0:a7:
eb:5b:11:d8:ba:7c:2a:b4:1d:70:b6:96:77:94:e0:
f0:e3:7f:3e:75:c4:fe:22:ff:82:f9:ec:63:6c:5c:
77:e7:ba:b4:be:41:77:4f:b2:6e:11:19:6a:ff:0c:
cd:ea:2b:ca:84:46:55:db:2f:8b:fc:8a:c9:34:ad:
c8:6d:8e:07:1d:da:0d:44:6c:ce:8b:ad:a9:9d:59:
44:c6:56:6f:bb:48:d7:8f:c1:bc:22:77:06:f8:5e:
ca:b5:56:03:2b:1b:ec:a6:0f:21:e6:8e:63:d1:84:
56:81:4f:9a:87:90:30:d0:21:5c:24:b9:d0:25:bc:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:5E:99:8A:F7:C2:87:F9:2B:82:DE:6F:0C:BB:15:3F:D2:F1:FB
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/A055D1AA6EE511F19714E2FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.20.0/24
IPv6:
2001:43f8:3::/48
Signature Algorithm: sha256WithRSAEncryption
44:a7:cd:1f:31:e1:2b:ca:ad:6a:96:96:5c:c9:e1:fd:3d:38:
da:66:ab:a7:df:3d:16:e4:b0:af:27:3d:3a:36:d8:41:76:10:
e1:e6:56:56:28:c4:78:35:e0:53:9a:2d:ab:0e:f6:2d:d1:f0:
4d:3c:c3:43:54:8d:a3:95:98:8c:ef:95:b2:16:d2:8e:42:c7:
89:cb:ea:29:bc:d8:2d:c4:8b:70:41:9a:25:55:99:52:ec:b4:
8b:f6:d1:b9:23:98:e0:a5:1a:57:30:c8:2b:4c:03:a9:40:f3:
58:8d:7d:35:72:44:e3:0c:ad:3d:8d:18:e3:74:5b:70:d1:5c:
73:44:5c:d7:a1:02:23:e7:a9:7c:aa:04:0c:eb:60:e2:55:b2:
56:10:f6:0c:bc:88:d0:2e:cf:a8:4d:fe:c0:98:29:c0:3f:ee:
46:bf:18:1f:0e:07:49:c3:ef:c9:14:56:7f:ce:38:9a:c9:6d:
4f:2f:82:7c:e5:e1:d8:24:10:97:52:7a:5c:52:9f:fc:05:f8:
5d:f8:ca:0d:38:d0:ae:a9:b0:0b:6d:62:20:ef:04:c0:10:37:
17:94:34:6d:6a:5a:ef:86:d0:15:ec:e4:b3:ee:cf:73:18:16:
9b:bd:76:07:6d:5b:bb:11:1d:9d:61:20:f1:67:3c:dd:1a:11:
73:64:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:22 2026 by rpki-client