Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/C99074A86EE511F1A0B7BA00CF1D38B0.roa
File: C99074A86EE511F1A0B7BA00CF1D38B0.roa (raw, json)
Hash identifier: TMRCyfSKOW6QLRSeFIMaerdug4mgiwMN7tQz4PORojM=
Subject key identifier: 45:6F:BD:64:5B:A1:1A:E7:84:FC:70:28:DF:19:94:C6:A7:5C:8D:E4
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 0A6C
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/C99074A86EE511F1A0B7BA00CF1D38B0.roa
Signing time: Tue 23 Jun 2026 09:27:44 +0000
ROA not before: Tue 23 Jun 2026 09:27:39 +0000
ROA not after: Mon 23 Jun 2036 09:27:39 +0000
asID: 328022
IP address blocks: 196.49.20.0/24 maxlen: 24
2001:43f8:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2668 (0xa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Jun 23 09:27:39 2026 GMT
Not After : Jun 23 09:27:39 2036 GMT
Subject: CN=6a3a518f-65b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:ff:af:0a:9c:bf:04:b2:fe:c7:65:31:bc:
82:5d:1a:4e:7c:a6:77:dd:b8:03:55:6a:3c:3e:25:
ac:c6:ee:4d:a6:70:de:7a:74:8c:2c:99:e2:ec:0a:
3d:ab:1e:a8:51:e6:07:e6:85:d5:d6:e2:7c:fc:99:
e5:d7:0d:0c:8d:76:8e:b0:be:fa:9a:70:b7:23:fa:
20:db:59:27:f2:82:28:cc:03:65:ce:46:28:38:e8:
03:5a:db:b0:98:e8:f0:74:10:f4:56:56:29:ed:4a:
fd:74:91:ea:79:45:eb:08:84:51:39:b1:97:53:5a:
22:ce:b0:05:4b:07:42:f4:4d:20:5b:45:9a:e6:7c:
93:a2:e2:ee:0a:73:bd:93:ca:f5:e2:62:97:55:64:
98:1f:f3:13:46:44:22:3d:58:ad:c5:d3:e9:1b:dd:
d6:72:c7:e6:2c:fc:f2:f6:3f:d3:7e:c2:a4:ed:6a:
ad:bc:e4:e0:eb:43:97:e8:09:59:84:f2:21:f6:6c:
f7:4d:8d:4e:3f:b9:06:48:2b:eb:4a:97:f7:71:70:
ce:06:80:da:0f:57:c2:27:19:2e:cd:1c:bd:1b:e2:
57:fb:f1:6a:87:ed:64:fd:20:a8:2a:b2:c9:8b:92:
66:58:ee:51:d8:b6:6e:9d:4a:b6:68:ac:66:d9:b6:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6F:BD:64:5B:A1:1A:E7:84:FC:70:28:DF:19:94:C6:A7:5C:8D:E4
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/C99074A86EE511F1A0B7BA00CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.20.0/24
IPv6:
2001:43f8:3::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c6:12:36:36:cf:72:4c:fa:7f:ae:84:2b:ce:79:90:ed:63:
91:95:3f:e1:28:f5:57:db:d8:e5:09:fb:66:4d:81:43:74:b8:
36:f2:43:c3:5c:95:5e:6b:28:23:a8:bc:2f:0a:37:9d:cd:5d:
ce:ad:cf:ef:61:80:85:c3:88:68:e9:f4:bb:e5:41:64:f4:9b:
12:ac:6a:28:e1:a5:16:1b:9b:64:4a:00:69:18:50:a2:37:d6:
14:94:0f:f6:cb:76:da:a1:09:e1:2b:26:f4:7b:2e:12:90:2b:
f6:e3:e2:62:24:d9:c7:6c:a5:9f:1b:83:a2:66:81:cc:9c:fe:
be:b7:a2:26:28:be:bf:cf:9c:3e:3d:55:33:44:aa:40:ae:b9:
a0:52:8a:b8:5a:95:74:17:46:d9:e8:08:49:02:6f:df:60:88:
98:5e:6f:aa:9e:f2:14:50:fb:43:a6:51:fe:ed:15:44:2d:32:
fc:32:0b:79:21:9a:20:88:fb:9e:7c:1d:47:20:bc:d1:d9:a8:
d1:f0:a7:82:cd:6f:bb:05:fd:27:29:f2:bd:0d:4c:7a:2e:c5:
6d:aa:bc:7d:08:0f:22:c8:77:0e:29:3b:db:5d:3c:ca:c8:94:
8b:ca:d0:87:d0:d6:05:82:6f:e8:56:b0:fd:1c:7f:78:b3:35:
fe:57:32:88
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICCmwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkVBNkJBRjExMC8GA1UEBRMoOTNDMkM5OUFGMEVDNEQxQTQ2NDM0OTdGNUY4Q0JE
QzdFQzQ1NzQ4RjAeFw0yNjA2MjMwOTI3MzlaFw0zNjA2MjMwOTI3MzlaMBgxFjAU
BgNVBAMTDTZhM2E1MThmLTY1YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDr9P+vCpy/BLL+x2UxvIJdGk58pnfduANVajw+JazG7k2mcN56dIwsmeLs
Cj2rHqhR5gfmhdXW4nz8meXXDQyNdo6wvvqacLcj+iDbWSfygijMA2XORig46ANa
27CY6PB0EPRWVintSv10kep5ResIhFE5sZdTWiLOsAVLB0L0TSBbRZrmfJOi4u4K
c72TyvXiYpdVZJgf8xNGRCI9WK3F0+kb3dZyx+Ys/PL2P9N+wqTtaq285ODrQ5fo
CVmE8iH2bPdNjU4/uQZIK+tKl/dxcM4GgNoPV8InGS7NHL0b4lf78WqH7WT9IKgq
ssmLkmZY7lHYtm6dSrZorGbZtv8/AgMBAAGjggK2MIICsjAdBgNVHQ4EFgQURW+9
ZFuhGueE/HAo3xmUxqdcjeQwHwYDVR0jBBgwFoAUk8LJmvDsTRpGQ0l/X4y9x+xF
dI8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFQTZCLzdCMjc5MjBFOEI4MjExRTk4ODhCNkY3M0Y4QUVBMjI4L2s4TEpt
dkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2s4TEptdkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZFQTZCLzdCMjc5MjBFOEI4MjExRTk4ODhCNkY3M0Y4
QUVBMjI4L0M5OTA3NEE4NkVFNTExRjFBMEI3QkEwMENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADEMRQwDwQCAAIwCQMHACAB
Q/gAAzANBgkqhkiG9w0BAQsFAAOCAQEAbsYSNjbPckz6f66EK855kO1jkZU/4Sj1
V9vY5Qn7Zk2BQ3S4NvJDw1yVXmsoI6i8Lwo3nc1dzq3P72GAhcOIaOn0u+VBZPSb
EqxqKOGlFhubZEoAaRhQojfWFJQP9st22qEJ4Ssm9HsuEpAr9uPiYiTZx2ylnxuD
omaBzJz+vreiJii+v8+cPj1VM0SqQK65oFKKuFqVdBdG2egISQJv32CImF5vqp7y
FFD7Q6ZR/u0VRC0y/DILeSGaIIj7nnwdRyC80dmo0fCngs1vuwX9JynyvQ1Mei7F
baq8fQgPIsh3Dik72108ysiUi8rQh9DWBYJv6Faw/Rx/eLM1/lcyiA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:42 2026 by rpki-client