Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/B75C7E906EE411F1BFC0C5F8CE1D38B0.roa
File: B75C7E906EE411F1BFC0C5F8CE1D38B0.roa (raw, json)
Hash identifier: yxSUyn7Yk5ZGWHG0/FHM9bfxbuiVZMuC4aOCNZye1hU=
Subject key identifier: A9:81:CA:60:CE:F3:0B:CF:5A:7C:FD:C0:05:F3:58:DE:22:FD:E1:18
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 0A66
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/B75C7E906EE411F1BFC0C5F8CE1D38B0.roa
Signing time: Tue 23 Jun 2026 09:20:04 +0000
ROA not before: Tue 23 Jun 2026 09:19:59 +0000
ROA not after: Mon 23 Jun 2036 09:19:59 +0000
asID: 328325
IP address blocks: 196.49.52.0/24 maxlen: 24
2001:43f8:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2662 (0xa66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Jun 23 09:19:59 2026 GMT
Not After : Jun 23 09:19:59 2036 GMT
Subject: CN=6a3a4fc3-41d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a0:f7:3a:a2:03:83:0d:0c:c8:12:2e:16:94:
96:d9:32:04:af:f4:47:59:c5:df:f2:80:d3:55:84:
4f:dd:1a:b8:56:06:89:88:de:13:29:31:87:d9:cd:
16:40:10:f5:ff:7c:bf:0e:d5:64:08:bd:b7:12:1f:
74:be:fe:f5:53:be:3f:e5:dc:df:fa:e6:c3:7e:19:
89:70:fa:4b:b5:e9:e8:f2:ee:a2:25:e1:be:f9:b8:
0d:e8:ab:90:0e:32:95:89:50:6c:4d:bf:58:51:e8:
99:4a:e1:ef:f2:3b:a0:91:c7:fc:eb:51:c6:d3:03:
f4:4f:7a:55:be:f0:d4:d7:d3:d5:c3:9c:75:21:01:
5f:ba:96:3d:3c:88:9c:ce:a0:14:a8:5b:23:9e:9e:
5a:ca:ff:dd:65:55:a2:d0:66:30:5f:2a:bf:66:00:
b6:17:b3:3a:13:f8:36:60:16:3d:47:0d:3b:75:22:
01:89:e9:c7:9d:56:6a:2c:57:79:ba:19:b4:c4:dd:
6d:f1:0b:32:44:32:36:b0:2b:64:f4:0a:27:1e:5a:
ea:80:06:8c:a9:eb:f0:95:4f:89:89:b3:e6:ad:8e:
c7:b3:c1:f1:bb:3c:7e:4d:a9:c7:11:5f:7c:2e:b3:
56:1e:8c:fd:19:2e:96:a8:75:d0:9f:32:1f:49:5b:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:81:CA:60:CE:F3:0B:CF:5A:7C:FD:C0:05:F3:58:DE:22:FD:E1:18
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/B75C7E906EE411F1BFC0C5F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.52.0/24
IPv6:
2001:43f8:5::/48
Signature Algorithm: sha256WithRSAEncryption
0d:2e:6a:9a:0e:88:ba:5e:fb:f1:7c:74:b3:e0:6d:95:da:92:
02:99:40:74:1f:d4:5e:95:ce:98:e4:d3:94:1b:dc:80:3d:92:
7d:bf:50:c2:7d:8c:e6:86:69:00:35:35:c4:05:8f:79:69:29:
e4:f9:ab:8a:4c:6b:48:0f:8c:09:ee:c1:64:58:ed:3c:ed:0c:
c0:ed:d2:02:d7:5d:b6:87:94:31:d4:82:a9:81:04:35:97:65:
9b:bc:40:4a:e0:6a:3c:bf:dd:ca:ac:44:3a:19:35:ed:c3:39:
9f:5a:15:b8:21:56:eb:3b:87:e1:df:f8:d7:09:bb:ee:ad:e4:
81:75:d4:47:c1:9d:8a:55:9a:81:6f:85:a2:bc:73:c9:70:ac:
09:de:10:b7:8d:04:5d:da:7a:e9:64:8e:5f:13:d9:ec:a4:bf:
c4:a1:b8:a9:10:e4:b0:4d:b3:07:25:ad:5f:f2:dd:a6:04:37:
87:a0:8a:c3:b2:cd:60:fa:9c:72:44:92:93:b2:27:37:f8:58:
b6:2f:ae:1d:e2:77:31:5c:62:19:90:c5:cb:28:7c:4e:b5:25:
c4:da:e6:97:1d:ca:f6:f9:0a:19:eb:ab:f5:72:46:44:f7:bc:
fb:d4:90:e4:70:60:5a:62:83:4a:19:c6:31:7a:1a:6e:2a:52:
ae:ed:ab:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:35 2026 by rpki-client