Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/B9DCB9DE8B7011F1A0C8D9BBCE1D38B0.roa
File: B9DCB9DE8B7011F1A0C8D9BBCE1D38B0.roa (raw, json)
Hash identifier: Tkfyz7A/sSnniZvLtR3qk5hB4dmcR1R0uZM1aLmEtpE=
Subject key identifier: 06:D8:36:64:8B:F7:99:98:7E:D4:E6:22:31:52:8A:1C:C5:3D:15:59
Certificate issuer: /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial: 0812
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/B9DCB9DE8B7011F1A0C8D9BBCE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:12:50 +0000
ROA not before: Wed 29 Jul 2026 17:12:46 +0000
ROA not after: Fri 31 Oct 2031 17:12:46 +0000
asID: 205897
IP address blocks: 154.70.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Validity
Not Before: Jul 29 17:12:46 2026 GMT
Not After : Oct 31 17:12:46 2031 GMT
Subject: CN=6a6a3492-c658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:6d:96:1f:b5:9c:d2:c1:a5:fa:b4:04:7e:
4e:cf:e6:4d:58:bb:c2:0d:d0:5e:7b:b7:37:40:f7:
83:1a:7b:54:9c:f1:24:e2:d3:f8:6e:2e:e1:7e:8a:
ae:aa:bb:a5:5a:0f:f9:cf:2a:d9:90:5c:e9:ff:7a:
d2:ca:ba:74:d1:59:83:d8:a5:f0:9e:c2:97:d8:5e:
40:1c:b7:cd:cc:7a:dc:8b:5f:d7:97:2c:8e:85:e7:
7a:b8:e7:f9:8c:a2:d5:59:11:70:63:33:81:c4:19:
23:cf:1c:a5:ed:c5:11:c3:72:ba:07:d5:76:87:a6:
e6:45:83:08:ac:50:ec:b3:8f:d6:ea:d5:59:b0:98:
51:97:3b:17:c1:70:d3:a0:34:b7:6f:44:41:a0:47:
9d:44:86:dc:9c:66:49:66:ca:13:aa:d8:1b:70:31:
ca:21:84:66:ed:ac:a4:50:57:eb:c3:5e:99:a3:52:
9f:02:7d:51:85:fa:5e:da:54:af:2e:c4:54:28:93:
4e:ef:b0:c9:16:e9:25:87:6b:72:98:2d:6b:6f:e4:
12:c2:3d:a5:ed:7f:fa:00:ae:e1:5f:bf:6c:e6:11:
e0:f7:e0:13:28:da:ec:a1:91:25:7c:d0:17:d4:82:
b4:73:1b:11:46:ec:03:34:43:fc:05:39:da:eb:f6:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D8:36:64:8B:F7:99:98:7E:D4:E6:22:31:52:8A:1C:C5:3D:15:59
X509v3 Authority Key Identifier:
keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/B9DCB9DE8B7011F1A0C8D9BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.201.0/24
Signature Algorithm: sha256WithRSAEncryption
94:63:4d:ee:8d:90:ed:4c:da:87:8d:7f:f3:c5:1c:39:c3:d8:
3f:4d:0b:d2:1e:aa:96:5c:25:7c:c7:67:94:36:84:8a:47:bd:
34:d0:b5:8d:7b:8e:15:d7:22:56:77:a9:28:c3:bf:cb:22:74:
e5:0b:fd:24:7b:53:87:68:b8:c7:59:13:f2:af:6b:71:26:93:
37:52:53:ab:c1:72:c1:ed:7d:92:82:a7:00:9b:fb:99:05:de:
1c:90:6e:42:20:ed:7c:70:99:d1:55:e0:19:fe:63:cb:f9:eb:
40:3d:04:f6:27:4e:87:4f:56:9b:bd:cf:43:b1:ca:9e:99:17:
a3:48:fc:79:6c:f0:43:91:0e:98:0d:5b:ba:2a:1c:34:3e:8a:
49:a7:c4:4c:5e:24:3e:1d:d2:5a:ea:21:0a:03:fa:85:db:f4:
5a:66:6e:e2:20:ec:53:63:a8:fd:6f:1e:43:eb:c8:25:98:96:
44:b9:b9:d7:5a:89:42:ed:ce:1a:f7:aa:7a:96:25:a7:4e:91:
6c:38:19:27:f5:32:8b:f4:c3:4e:0d:fc:2a:cf:64:a7:5c:af:
27:60:77:71:9b:b3:00:1d:65:0b:32:bc:97:46:42:d2:1e:0d:
81:13:45:e7:75:00:77:a7:7e:1e:4b:b4:67:f8:6e:ec:f4:ca:
79:d0:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:13 2026 by rpki-client