Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/DDFC2BF08CF711F1BB88A212CF1D38B0.roa
File: DDFC2BF08CF711F1BB88A212CF1D38B0.roa (raw, json)
Hash identifier: hr6ElrihATc78d5WqQJCxdCYuXhQgsouSoSSt/TE0Tc=
Subject key identifier: 08:03:AB:BA:1B:4C:06:23:C4:4F:E6:78:A0:18:94:50:D0:F6:04:8A
Certificate issuer: /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial: 059E
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/DDFC2BF08CF711F1BB88A212CF1D38B0.roa
Signing time: Fri 31 Jul 2026 15:52:44 +0000
ROA not before: Fri 31 Jul 2026 15:52:40 +0000
ROA not after: Wed 20 Feb 2030 15:52:40 +0000
asID: 328785
IP address blocks: 102.212.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1438 (0x59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36455FBAF, serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Validity
Not Before: Jul 31 15:52:40 2026 GMT
Not After : Feb 20 15:52:40 2030 GMT
Subject: CN=6a6cc4cc-bf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:ab:6f:a7:e5:12:e4:4a:8d:96:ec:99:93:
26:65:db:75:68:86:81:11:39:7d:10:0c:e5:72:4f:
70:af:f6:67:19:12:fe:b8:9d:a1:ed:01:8a:30:13:
02:54:29:94:b8:a6:b5:5c:89:77:4c:a6:ca:c1:6e:
16:b1:4a:16:c2:db:8f:d3:03:e4:d8:35:76:24:00:
c5:50:3f:b8:dc:80:a6:f3:1c:e3:c2:52:0d:07:1f:
a4:a7:0a:2d:5e:d9:69:e2:06:3f:87:3d:20:92:cc:
e4:b5:ae:f4:9f:ef:d6:51:14:18:bf:f3:1d:9f:5b:
17:83:cc:0f:6a:53:6c:d8:f1:8c:4a:f8:b3:6e:96:
31:3f:71:6f:ef:61:7d:33:e9:be:18:13:17:dc:c0:
61:d6:68:28:3a:d8:29:4a:7d:9e:29:5b:d8:e2:29:
1a:7e:41:e1:a4:2e:98:ab:d5:04:44:16:01:9d:64:
8e:35:95:15:28:55:b7:bd:fc:19:74:3f:74:76:02:
33:f5:f3:98:58:90:45:6e:20:ac:44:7f:53:b3:c5:
81:55:3d:fb:18:80:d8:23:8a:c9:8c:a3:47:e4:be:
32:19:b5:e9:a5:b6:6f:d9:96:7a:b0:03:2e:46:de:
44:68:5b:68:0d:e3:d0:06:15:ac:8b:69:67:28:6e:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:03:AB:BA:1B:4C:06:23:C4:4F:E6:78:A0:18:94:50:D0:F6:04:8A
X509v3 Authority Key Identifier:
keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/DDFC2BF08CF711F1BB88A212CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.156.0/22
Signature Algorithm: sha256WithRSAEncryption
28:4e:8c:f2:55:24:27:42:3f:89:de:24:53:bc:30:09:e0:78:
e4:59:76:76:5e:9d:79:57:fb:00:22:b3:8d:fd:00:aa:1c:37:
72:58:3e:0d:d7:c3:fc:e4:ea:86:e9:f7:d1:3a:6a:d6:97:55:
79:6b:8a:79:4d:63:e4:b3:bc:b5:65:eb:0d:63:0f:51:ae:c2:
de:85:cb:60:49:b4:3a:ca:2e:fb:72:c8:2b:2d:f2:40:b8:2b:
81:bf:b6:3e:ad:fd:d3:2d:47:6b:58:93:57:5b:a2:5e:36:68:
bd:0b:94:6f:14:b7:6e:21:e3:cf:a5:b6:e5:e0:01:21:8a:62:
b1:4b:ba:59:eb:ee:20:5c:28:86:47:d7:70:24:ba:6f:c0:46:
aa:28:fe:cd:82:35:99:10:1f:fa:ca:39:f7:70:5b:f2:28:db:
d4:12:25:2d:b4:0d:39:bc:8d:f9:29:d1:be:21:a8:16:5b:ba:
fa:82:66:ea:0d:5c:5e:d1:1e:ce:52:a2:5c:65:df:f8:7e:0d:
12:88:8b:ed:17:71:73:fa:87:ce:3a:8d:8a:b1:4f:06:4f:ad:
c9:c1:76:7a:c0:f8:8f:34:43:20:9a:b8:51:63:7f:b3:87:a4:
5f:92:30:fd:a5:95:6c:0a:82:b9:94:85:c5:18:2c:61:b6:b0:
95:f5:42:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:38 2026 by rpki-client