Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/CD05EC7C8F1411F189766CF7CE1D38B0.roa
File: CD05EC7C8F1411F189766CF7CE1D38B0.roa (raw, json)
Hash identifier: /mwV7gGqdpVexFItH+sJHrcIUl9JJukw6boHT6Z0okk=
Subject key identifier: AC:91:11:2E:F5:86:96:31:77:1D:CF:E2:E1:17:AA:1D:7C:1D:3A:78
Certificate issuer: /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial: 0610
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/CD05EC7C8F1411F189766CF7CE1D38B0.roa
Signing time: Mon 03 Aug 2026 08:24:53 +0000
ROA not before: Mon 03 Aug 2026 08:24:49 +0000
ROA not after: Sun 27 Jun 2032 08:24:49 +0000
asID: 328925
IP address blocks: 102.218.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552 (0x610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362A2E1AF, serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Validity
Not Before: Aug 3 08:24:49 2026 GMT
Not After : Jun 27 08:24:49 2032 GMT
Subject: CN=6a705055-c1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:0d:3f:87:82:65:92:b9:bf:1e:8f:eb:7e:
3e:3c:10:18:3a:30:f9:ac:f4:20:a0:e4:4a:c8:2c:
3b:92:5c:1f:f5:ec:2b:cd:8b:db:1e:2a:3d:63:58:
1b:10:6e:4a:2c:01:fe:d0:ce:e0:4d:22:77:6c:17:
c3:2a:1a:2d:38:1f:08:33:b6:a4:18:d8:82:b6:1e:
51:67:e8:ed:5b:ed:54:1b:0b:6b:34:4a:27:4d:30:
a4:78:80:83:11:c9:c4:b6:0f:7e:27:b8:21:2b:50:
0b:c2:98:a9:27:5a:cd:8a:b5:9a:6e:f8:3e:47:52:
7f:55:e7:fb:51:b3:8f:4a:a4:fc:8d:4a:16:37:6f:
50:d5:64:94:82:87:06:77:fb:20:e8:5a:38:e5:85:
25:f9:f7:20:d1:cb:e3:94:3b:c1:91:3e:01:21:6c:
e2:4a:fa:b2:35:3c:47:00:81:6b:72:be:fb:3f:bc:
da:17:7d:da:59:60:25:37:4d:4d:56:59:42:38:0f:
3e:04:f8:28:51:c6:f4:d2:94:67:d7:ae:b5:0f:25:
62:29:f3:d3:e9:fd:25:7c:20:a0:8a:92:87:90:af:
8b:cf:32:04:a5:d9:54:c5:5e:37:4e:b2:08:ce:f5:
07:19:7d:f4:6a:6b:3e:54:62:e3:ad:2f:47:99:02:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:11:2E:F5:86:96:31:77:1D:CF:E2:E1:17:AA:1D:7C:1D:3A:78
X509v3 Authority Key Identifier:
keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/CD05EC7C8F1411F189766CF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.152.0/22
Signature Algorithm: sha256WithRSAEncryption
01:cf:72:18:70:eb:59:7b:46:0d:4e:96:ab:7f:3b:10:80:cb:
9b:ce:bb:d8:70:f9:de:b1:f5:3e:d1:a9:3e:a0:f4:0a:61:6f:
a2:0e:9e:2e:a9:27:ea:83:c0:a1:93:a5:63:e6:47:f0:61:ec:
53:14:fa:8b:0a:29:5a:65:da:bb:7b:83:58:18:00:57:56:53:
44:fb:cd:8f:7f:d7:52:70:4f:32:75:6f:51:c5:28:1c:28:b4:
63:2f:8c:e2:4c:0d:5d:c6:d8:ed:a2:5f:fd:d7:d0:13:d8:59:
d6:28:68:89:42:05:9a:df:fc:23:56:14:39:22:ea:7d:1e:6a:
ce:83:06:df:77:bc:fa:54:bf:1e:e4:7f:27:8f:0a:8e:da:91:
40:7b:92:68:6b:65:67:6d:11:1b:38:5e:b7:20:d8:ab:4d:8f:
35:60:65:48:27:f0:ed:7e:f9:ed:e5:00:ee:4b:3b:42:e0:30:
3a:55:c5:51:46:bf:a3:5f:51:06:63:47:a1:81:75:04:54:a6:
75:6d:dc:8e:c6:04:4b:2e:97:c1:9e:46:11:01:7d:8d:7a:7f:
5a:65:1a:8b:e7:d7:47:85:d3:e8:ea:13:32:89:0d:85:6c:b2:
0d:26:74:81:d5:4f:22:10:05:b7:e1:fc:41:a7:ef:61:27:ae:
ab:34:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:35:54 2026 by rpki-client