Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/A84E555A6EE311F1897E5EF4CE1D38B0.roa
File: A84E555A6EE311F1897E5EF4CE1D38B0.roa (raw, json)
Hash identifier: t4D6hIFY0p5ZMnItN5GrDjfqPD9JxuqJaTYlOHaS5Lc=
Subject key identifier: F1:CC:D5:93:05:34:28:D6:96:2D:D0:80:1F:53:6A:BC:1B:DB:2D:84
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 0A64
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/A84E555A6EE311F1897E5EF4CE1D38B0.roa
Signing time: Tue 23 Jun 2026 09:12:29 +0000
ROA not before: Tue 23 Jun 2026 09:12:24 +0000
ROA not after: Mon 23 Jun 2036 09:12:24 +0000
asID: 328294
IP address blocks: 196.49.50.0/24 maxlen: 24
2001:43f8:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Jun 23 09:12:24 2026 GMT
Not After : Jun 23 09:12:24 2036 GMT
Subject: CN=6a3a4dfd-e287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:31:8e:1b:b9:82:15:2b:65:c3:14:cf:ef:
86:a3:f0:f7:60:4c:12:bc:00:9c:71:12:47:64:96:
15:ad:ce:04:09:d8:c2:5d:5d:fd:d0:94:a3:74:68:
5d:5e:73:6f:de:f2:3f:0a:ba:32:5c:0c:d0:2d:58:
21:d4:31:93:6e:05:a3:80:13:32:d6:d6:a0:e7:ef:
af:62:ed:53:43:02:c5:72:d6:e5:eb:15:1d:40:ec:
9b:b4:54:0c:5e:78:9f:20:d8:e7:f7:7d:af:38:50:
b3:5e:5c:3b:f9:b1:c7:20:6c:23:5c:e8:ec:5c:1a:
1d:67:a1:f4:0c:9d:b8:5b:06:57:53:8e:79:e9:49:
3e:8e:07:28:73:22:fd:e8:ff:3a:6d:ab:aa:80:dc:
b5:24:08:9e:a5:2b:15:40:95:d8:ae:6c:1d:f4:07:
47:a3:d9:24:4c:5d:a7:ef:ab:ad:8c:7d:d8:11:b2:
80:f7:b7:05:3a:78:85:d7:83:90:4a:59:0e:09:7b:
2a:53:ba:61:92:3e:6c:4d:ad:38:55:86:cb:18:1e:
c4:a6:bb:b4:b7:ec:2c:72:42:b9:c0:da:13:f7:20:
96:17:ca:22:63:e6:36:25:f9:a7:a6:1b:db:23:94:
51:30:dc:ff:ba:f2:b2:dc:63:25:ff:bc:59:cf:1d:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CC:D5:93:05:34:28:D6:96:2D:D0:80:1F:53:6A:BC:1B:DB:2D:84
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/A84E555A6EE311F1897E5EF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.50.0/24
IPv6:
2001:43f8:4::/48
Signature Algorithm: sha256WithRSAEncryption
b5:18:4c:f5:67:a5:d8:ad:3b:20:84:34:85:8b:0e:50:db:57:
9f:d6:71:f7:34:40:f1:ec:84:40:cc:0a:a5:40:55:35:43:75:
f9:56:78:02:1d:f4:ae:58:31:c2:0a:68:16:8a:5a:ee:1c:5a:
10:8d:d8:5d:c8:a3:4a:02:3d:16:c7:34:fe:77:bc:5a:04:08:
10:9f:2f:95:c2:29:63:2f:34:e3:51:71:1f:40:3e:f9:d1:7c:
2b:ca:4b:9e:e2:1b:3c:14:ff:06:97:90:bb:b7:dd:53:dd:d4:
a2:8e:28:f4:cb:18:0b:be:03:8c:98:59:c9:19:7d:28:3d:2e:
fb:04:83:36:a3:9a:44:34:b8:6b:f7:d5:a1:a7:ab:0f:c0:19:
47:ff:57:58:04:e7:5d:a1:52:b9:10:fb:27:09:a9:4f:ad:f2:
a1:5b:95:09:66:15:b8:5a:95:e3:76:87:60:5c:a1:49:68:b6:
db:e3:56:b7:c0:b5:e5:cd:34:d2:6d:32:d0:1d:bc:ad:c4:13:
f9:89:00:2c:01:64:76:0c:6b:00:fd:76:2a:95:3d:87:c7:93:
bb:90:6c:30:95:83:21:d2:0c:4e:80:59:94:f1:9f:9c:36:5f:
08:02:6f:7f:f9:d6:5c:4c:f8:89:a7:eb:4e:f3:a4:90:c6:c0:
a6:c8:75:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:22:14 2026 by rpki-client