Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/50D8D0088C3D11F191A5F11DCF1D38B0.roa
File: 50D8D0088C3D11F191A5F11DCF1D38B0.roa (raw, json)
Hash identifier: IBM2C6jsoHdsOf5q7FavB/zdwqJP1c7Zo2tcyx9bIiI=
Subject key identifier: 61:BF:65:EE:5A:1A:C4:DE:B8:2F:18:DD:71:08:04:EB:2F:E6:CE:78
Certificate issuer: /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial: 07D8
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/50D8D0088C3D11F191A5F11DCF1D38B0.roa
Signing time: Thu 30 Jul 2026 17:37:20 +0000
ROA not before: Thu 30 Jul 2026 17:37:06 +0000
ROA not after: Thu 31 Jul 2036 17:37:06 +0000
asID: 328137
IP address blocks: 102.204.236.0/22 maxlen: 24
102.215.236.0/22 maxlen: 24
2c0f:f030::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2008 (0x7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Validity
Not Before: Jul 30 17:37:06 2026 GMT
Not After : Jul 31 17:37:06 2036 GMT
Subject: CN=6a6b8bd0-bfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:d9:e7:20:35:20:34:98:27:e0:b0:81:02:
d2:e2:61:f5:21:6e:f2:3c:5b:60:30:96:b8:cb:36:
64:69:7c:76:2a:db:83:2f:b6:05:60:bf:f1:e1:43:
1d:ec:85:81:79:59:ed:ca:34:a0:51:7c:63:e9:53:
89:33:42:8a:36:36:4c:ba:e3:3c:a7:96:7e:31:18:
85:ea:d4:0c:b4:48:d8:c5:06:8d:f1:29:02:f5:2d:
53:4e:84:f9:55:4f:16:53:87:a3:c0:17:a5:4e:dd:
12:72:af:54:71:da:14:b7:21:65:c5:4a:0b:7a:e5:
a2:6c:c6:23:fa:28:e1:a1:77:ec:31:8c:06:c9:66:
03:9e:e8:05:32:d3:0e:a5:f8:e1:90:0d:4e:f3:48:
66:5c:fb:b8:a5:9f:4f:45:8a:18:6f:d9:aa:a6:f5:
fa:61:4a:cc:80:90:2f:20:67:29:d1:eb:fb:d3:9d:
30:46:9a:1a:60:1e:e5:8c:58:74:1a:f5:d6:89:cf:
69:ad:76:7a:6c:b1:84:82:e5:0c:dc:b0:8f:2e:ed:
11:06:97:ed:39:93:53:d6:4b:c5:41:c5:e6:7b:2c:
6d:f6:79:a3:81:f1:6c:3f:74:6d:7a:80:aa:3f:ce:
1f:8a:02:60:bd:48:25:1b:e4:00:34:ef:0c:ef:24:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BF:65:EE:5A:1A:C4:DE:B8:2F:18:DD:71:08:04:EB:2F:E6:CE:78
X509v3 Authority Key Identifier:
keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/50D8D0088C3D11F191A5F11DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.236.0/22
102.215.236.0/22
IPv6:
2c0f:f030::/32
Signature Algorithm: sha256WithRSAEncryption
3c:0a:4d:4a:07:42:35:98:fb:15:d8:73:4a:2c:bf:af:54:65:
60:f9:7e:82:5c:9e:f6:a4:b5:34:0b:95:c3:15:0a:5c:ae:8e:
a5:26:5f:ed:f3:f9:91:e4:cb:d2:fe:77:47:82:9a:f0:04:74:
b5:ed:4b:dc:81:bd:cf:19:e5:41:53:84:aa:53:88:c3:c1:80:
82:2c:d0:bb:e4:41:b2:71:af:9b:9c:4e:b2:cb:28:2a:04:e8:
9d:e6:a9:7a:41:0d:c5:ca:d0:ad:29:c9:6f:a3:f8:60:99:6d:
61:87:f2:77:c1:fc:65:f7:6f:21:aa:d5:8f:33:eb:f5:5b:4c:
10:2e:37:20:67:ac:45:6d:7c:8c:2c:94:2a:8b:57:9d:45:5a:
7a:1f:0d:a6:cf:fd:7b:b0:fc:40:91:3a:7b:b5:42:34:4b:77:
7b:62:68:ef:37:b9:64:44:d6:73:00:8f:b6:df:7f:64:fb:1b:
05:13:cd:69:67:a0:16:57:70:d2:61:1c:23:c6:5c:19:22:4d:
b1:83:34:43:3b:48:78:e2:13:80:78:54:21:88:f8:9a:d4:33:
d1:40:30:04:eb:aa:60:d9:8c:b3:9e:c4:d7:66:7b:d7:b1:5f:
00:91:83:db:0e:36:82:c8:02:a8:a4:59:9d:04:69:a5:b9:61:
b4:df:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:25 2026 by rpki-client