Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/64B3D22A8B7111F183D4E9BFCE1D38B0.roa
File: 64B3D22A8B7111F183D4E9BFCE1D38B0.roa (raw, json)
Hash identifier: 17rQOz1O2eNeJPsxK6qXRaLtzqR4vb82M+67xoEWKq0=
Subject key identifier: 27:1F:3D:EA:1C:95:75:22:7C:0A:4D:34:01:FD:79:B2:31:DD:49:7C
Certificate issuer: /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial: 0814
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/64B3D22A8B7111F183D4E9BFCE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:17:36 +0000
ROA not before: Wed 29 Jul 2026 17:17:32 +0000
ROA not after: Sat 31 Dec 2033 17:17:32 +0000
asID: 37738
IP address blocks: 154.70.200.0/24 maxlen: 24
154.70.201.0/24 maxlen: 24
154.70.202.0/24 maxlen: 24
154.70.203.0/24 maxlen: 24
154.70.204.0/24 maxlen: 24
154.70.205.0/24 maxlen: 24
154.70.206.0/24 maxlen: 24
154.70.207.0/24 maxlen: 24
2c0f:5400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Validity
Not Before: Jul 29 17:17:32 2026 GMT
Not After : Dec 31 17:17:32 2033 GMT
Subject: CN=6a6a35b0-e1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:13:2d:f9:89:fe:81:6a:f2:05:ef:a3:ee:
d9:ca:b3:5e:ae:ca:59:60:30:87:d1:39:29:0f:db:
06:87:a1:a4:f8:70:4f:8d:95:45:2e:2d:15:3e:e0:
bd:af:4b:55:0b:8c:77:08:7f:cd:12:f6:58:6a:72:
2c:cb:45:07:30:e9:f3:bb:46:ad:25:7d:b2:f5:33:
78:d0:cf:0f:10:d8:91:1b:81:26:0a:13:cc:95:64:
76:c6:75:81:94:bd:92:48:3e:c3:fa:b9:4a:07:79:
bb:80:61:b7:b8:2f:ac:8b:a0:87:82:b6:34:ca:5f:
c4:35:b0:82:9a:a8:d8:d7:af:ca:87:3f:30:39:6f:
db:84:44:8a:6c:eb:4b:f2:0d:5c:e2:e1:1a:b6:b2:
30:67:c8:70:6d:93:14:8e:cd:06:5c:13:b9:75:06:
d0:f1:05:cc:77:36:71:2e:c7:8e:06:60:3a:97:85:
74:b5:4e:f9:86:d9:8b:3a:66:c8:ce:27:23:a4:86:
e5:a0:ac:fe:03:db:a8:f4:8d:03:a3:7c:ea:d4:2c:
dd:a0:d1:ca:64:73:7d:d2:f0:9e:a0:db:89:6e:42:
47:d3:d7:81:ce:5b:db:ca:f1:32:67:7c:f2:20:a7:
3f:9b:e9:63:12:07:4f:1f:ef:ac:92:00:cd:48:4d:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1F:3D:EA:1C:95:75:22:7C:0A:4D:34:01:FD:79:B2:31:DD:49:7C
X509v3 Authority Key Identifier:
keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/64B3D22A8B7111F183D4E9BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.200.0/21
IPv6:
2c0f:5400::/32
Signature Algorithm: sha256WithRSAEncryption
16:62:01:19:49:ea:66:b0:0e:95:17:ac:7a:ab:14:95:bb:17:
14:99:5b:2e:cb:78:d0:b2:c9:f6:04:c4:d2:8e:c0:d2:f2:42:
d6:3c:3f:af:e4:d4:2f:73:ac:79:d4:15:bd:96:e0:a6:65:cf:
f0:d5:46:2b:b5:61:cf:94:4a:7b:55:97:b5:61:34:5f:f5:1f:
06:61:27:53:c1:80:5c:cf:7f:87:70:01:5c:dc:d0:2b:e1:9f:
13:9e:7d:8c:dc:08:72:07:8f:27:ff:ca:75:80:f7:da:7e:d9:
bd:a7:44:e4:33:6b:fc:62:f0:34:82:76:7f:49:65:03:ba:ee:
dc:b9:0e:be:8b:1c:03:20:4b:f2:15:f1:36:70:9b:95:84:2e:
2a:56:d0:75:a1:90:4b:00:a3:8f:f7:74:e1:5c:9c:63:b2:5a:
46:62:7e:b8:67:f2:65:c9:1f:0d:4f:4a:a2:e5:07:0d:72:2a:
0b:98:da:2a:a3:c7:de:6a:12:31:f9:4d:86:19:e8:97:d5:b3:
3c:5a:36:2d:f7:4a:09:59:9d:a1:6b:fd:e3:54:56:b7:e8:f2:
88:a9:a0:75:a4:ad:a9:bc:4a:17:49:77:5c:76:95:66:d0:85:
b9:0d:45:27:6b:56:96:a5:a4:40:35:67:67:6e:69:3b:36:7b:
7a:14:f3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:15 2026 by rpki-client