Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/EDEF3E0C6EE411F19B54C6FACE1D38B0.roa
File: EDEF3E0C6EE411F19B54C6FACE1D38B0.roa (raw, json)
Hash identifier: BU4bFgjRPGM2my9qgXl9GWzjnVJcxAn8h0IPdvk7Tg4=
Subject key identifier: 1C:87:7E:E9:8F:8A:DE:82:F5:33:C9:BF:9D:4B:AD:BC:53:BD:62:C0
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 0A68
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/EDEF3E0C6EE411F19B54C6FACE1D38B0.roa
Signing time: Tue 23 Jun 2026 09:21:35 +0000
ROA not before: Tue 23 Jun 2026 09:21:31 +0000
ROA not after: Mon 23 Jun 2036 09:21:31 +0000
asID: 328326
IP address blocks: 196.49.54.0/24 maxlen: 24
2001:43f8:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Jun 23 09:21:31 2026 GMT
Not After : Jun 23 09:21:31 2036 GMT
Subject: CN=6a3a501f-dc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:26:79:8d:ef:47:8a:8e:46:3d:9f:83:dd:
9f:72:69:bb:22:aa:87:1f:c9:56:92:87:8e:aa:e7:
a8:b8:03:5d:92:9b:f0:9e:fe:bf:f0:a3:95:a6:e6:
ff:30:45:4d:18:b5:c5:53:07:71:0e:63:f3:43:a8:
73:06:e3:85:b2:0f:e8:0e:25:f3:4a:db:42:1e:96:
f2:b2:0e:a0:b7:74:75:fa:db:b9:88:68:0e:de:18:
da:41:7a:65:1a:f3:f6:03:ac:34:97:88:34:9f:c2:
75:87:3e:f4:dd:3f:af:c1:73:3e:96:38:af:d2:2e:
26:8a:31:32:73:cd:f9:48:8b:8b:4e:54:6c:0b:16:
18:99:70:47:32:85:ce:be:7c:ee:0e:c0:ba:5c:40:
c9:0f:ca:b7:b6:bc:ca:79:3c:e4:a9:36:bd:fe:7b:
6c:7b:bb:39:d2:8f:8e:42:44:49:a7:a6:48:04:4b:
89:b3:ca:cc:92:16:14:dd:b3:31:1b:6a:a3:ea:d9:
f0:b4:21:e4:3f:7b:09:dc:7b:04:1b:5c:4e:ee:4e:
89:53:15:91:46:1e:ae:3c:39:ed:ad:44:e7:1e:fa:
44:b0:52:94:47:f8:7b:a3:55:fe:0b:c9:cb:44:e0:
99:9f:f3:cd:53:ae:05:6f:41:9e:66:eb:52:4e:17:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:7E:E9:8F:8A:DE:82:F5:33:C9:BF:9D:4B:AD:BC:53:BD:62:C0
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/EDEF3E0C6EE411F19B54C6FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.54.0/24
IPv6:
2001:43f8:6::/48
Signature Algorithm: sha256WithRSAEncryption
08:b6:cb:0a:dd:97:f7:99:a0:83:d0:34:ff:92:31:9e:79:a9:
e6:94:f4:de:37:14:0d:ae:2a:d3:81:54:5d:ec:1f:c6:07:57:
c0:55:46:47:7a:f8:3e:81:26:14:ad:6f:5d:fa:62:9a:0a:90:
9b:97:fc:98:b1:50:d0:5c:70:69:56:a7:a6:2c:1f:d5:e3:39:
9d:09:a2:01:2e:3f:3b:44:78:06:03:ca:bb:e8:23:d0:20:69:
90:b7:ae:04:e5:15:c6:ea:92:62:1f:d8:02:66:9b:94:47:10:
a1:81:10:a2:d5:97:79:81:45:ac:95:2b:d3:f9:ab:51:72:69:
80:ec:2f:4e:80:ae:98:7c:1e:6c:d2:2a:f8:b9:a0:41:89:45:
a2:ce:fd:ad:a0:87:a2:c8:08:a2:42:1c:d3:54:2b:ce:03:9e:
ff:f8:c0:73:60:17:ea:e0:d1:02:be:ff:d8:ba:18:67:6a:26:
72:32:51:cc:97:f4:57:98:71:23:93:6e:fb:0d:f4:6c:0c:37:
a0:2a:13:e9:d3:94:23:58:b1:8e:01:43:2b:71:fb:21:3e:10:
49:a1:72:c8:00:61:9d:4a:ca:8a:4e:f1:de:9a:2a:95:c8:59:
d2:00:61:6b:36:2d:34:b3:eb:7a:c9:6e:74:8b:84:15:e5:fc:
d5:da:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:48 2026 by rpki-client