Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/6C0368628F1611F1A7FDF2FFCE1D38B0.roa
File: 6C0368628F1611F1A7FDF2FFCE1D38B0.roa (raw, json)
Hash identifier: aU5Sz4Hc8XihBcsO1Hs2fvVl7LPgM7/bd0A8Jy0JwZ8=
Subject key identifier: 4D:54:D7:3C:1E:E4:A0:96:B3:30:B8:76:02:81:4B:A7:C5:F9:99:32
Certificate issuer: /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial: 0618
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/6C0368628F1611F1A7FDF2FFCE1D38B0.roa
Signing time: Mon 03 Aug 2026 08:36:29 +0000
ROA not before: Mon 03 Aug 2026 08:36:25 +0000
ROA not after: Mon 28 Jun 2032 08:36:25 +0000
asID: 328925
IP address blocks: 102.218.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1560 (0x618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362A2E1AF, serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Validity
Not Before: Aug 3 08:36:25 2026 GMT
Not After : Jun 28 08:36:25 2032 GMT
Subject: CN=6a70530d-55b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:e7:d4:8a:41:ae:57:b0:2b:83:cd:82:6c:
30:11:8b:49:99:a6:11:50:c3:15:c0:f8:8e:1d:f6:
9f:a9:8d:dd:e7:50:53:7b:9c:b3:5e:b4:d4:5d:f0:
b6:54:bf:61:a1:2c:c4:ac:9c:6e:f2:1d:e9:ca:73:
4b:f9:6c:4c:48:c1:3c:e7:39:48:8d:98:51:2d:4d:
60:e6:9a:18:49:0a:48:ff:e7:be:7e:3f:53:f7:e4:
c8:47:74:f2:e1:55:40:be:51:e5:21:80:d0:b7:70:
13:0d:39:ac:42:c1:e3:fe:f5:3a:32:76:89:83:95:
ad:f7:f1:e7:0c:c7:e9:87:a8:af:2d:eb:a3:72:c7:
71:70:08:a5:ef:e9:85:7d:3e:0a:6a:4d:3f:1d:12:
15:7d:95:a5:df:75:24:a2:ce:42:c9:8b:b4:d2:8e:
23:30:37:55:95:3d:22:da:e1:59:a8:92:12:bb:14:
35:97:01:74:38:4f:d7:3c:ea:74:69:a8:de:ea:45:
cf:a0:ec:14:c1:fd:41:3f:ab:1a:6a:8a:72:2b:e5:
be:e3:3c:0b:63:4b:bf:12:6e:a5:6d:ad:8a:48:e1:
23:f8:c2:3b:32:7f:f1:46:12:05:f9:2d:0c:23:80:
18:48:7f:0e:fe:94:fd:e6:92:db:96:81:0c:c2:e8:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:54:D7:3C:1E:E4:A0:96:B3:30:B8:76:02:81:4B:A7:C5:F9:99:32
X509v3 Authority Key Identifier:
keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/6C0368628F1611F1A7FDF2FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.154.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6d:86:c4:93:02:d4:76:8e:01:e8:7d:c3:18:a5:76:c0:14:
fc:cd:bb:5a:90:9d:c4:c3:e6:ca:82:7d:bc:b8:86:23:5f:2f:
b4:9e:75:32:41:cd:f5:4f:3b:2f:56:ac:53:1f:35:2b:2f:37:
a4:5f:d7:5b:7a:1b:27:6c:cf:22:ea:c5:c1:9d:ec:ef:67:54:
a9:98:da:7a:90:ed:35:5f:9e:59:09:c5:cd:94:44:70:d5:db:
68:68:c6:25:8f:19:48:75:14:a0:ce:2b:26:a7:7f:0f:de:d8:
0d:e9:1d:f8:3b:db:4b:eb:1b:74:4a:69:e4:3c:72:8d:f8:05:
5a:c0:9f:c1:e8:19:9d:12:d8:e2:62:fe:01:da:19:4c:a3:7d:
3f:1e:38:6a:6a:6b:45:03:18:c2:cf:05:ee:e0:d7:91:0a:6a:
89:dd:5f:3b:b9:6b:a8:27:f4:af:86:7f:44:45:c2:96:1d:07:
78:b8:b3:66:8f:8c:a3:d9:eb:34:66:0b:0f:81:82:fd:47:07:
72:dc:c7:a4:55:cf:4a:96:cf:84:6a:c0:90:1f:17:1c:de:ea:
9d:a2:b1:a4:4b:5a:df:29:5d:ad:78:06:56:39:ee:d8:93:6e:
c1:de:17:d2:72:0d:e6:c9:32:79:96:40:37:27:cd:e7:63:19:
e5:5b:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:35:54 2026 by rpki-client