Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/73C1C0F26A2311F19DAEF2D0CE1D38B0.roa
File: 73C1C0F26A2311F19DAEF2D0CE1D38B0.roa (raw, json)
Hash identifier: XwrQwHhQ2+BKHiAt3nmSSfCEOUUngPamuWyglRl4NzU=
Subject key identifier: 4D:1D:50:22:72:7E:4C:F1:23:3A:FD:BC:1E:DD:97:D1:42:30:75:30
Certificate issuer: /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial: 05FD
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/73C1C0F26A2311F19DAEF2D0CE1D38B0.roa
Signing time: Wed 17 Jun 2026 08:06:33 +0000
ROA not before: Wed 17 Jun 2026 08:06:28 +0000
ROA not after: Mon 17 Jun 2030 08:06:28 +0000
asID: 328820
IP address blocks: 102.220.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Jun 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1533 (0x5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Validity
Not Before: Jun 17 08:06:28 2026 GMT
Not After : Jun 17 08:06:28 2030 GMT
Subject: CN=6a325589-3fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:f6:c0:2e:50:7f:43:05:91:58:eb:d6:0a:
9b:de:8d:b6:75:f3:67:43:c9:22:1f:e5:b1:09:d4:
9c:e5:e1:4b:63:00:d7:28:07:7d:85:10:04:7c:f4:
5a:e5:7d:c4:5b:61:91:7a:66:e6:90:45:78:8a:96:
ff:40:68:41:e8:7b:36:7e:0a:8d:81:0f:e4:2a:6b:
75:7b:69:5a:34:a0:81:f5:08:4d:88:23:a7:3e:22:
8f:fd:09:19:f2:bd:0a:bf:fe:cd:7d:76:8e:ae:63:
27:b5:1a:ad:f6:d7:9e:2a:54:9a:a9:51:ea:13:49:
9a:3c:b6:2a:bd:f0:24:80:1c:a0:c8:e8:00:ca:d8:
73:e2:7b:47:b7:09:c3:37:6f:18:d8:2e:90:c1:08:
f8:52:f3:6c:e2:a3:eb:2a:96:3d:c8:b2:47:b5:92:
72:04:f3:ca:1d:7c:05:98:66:6d:5f:00:61:12:f2:
29:2a:69:8e:d1:87:20:7a:01:16:e0:8b:f0:a3:40:
5a:01:cb:1f:6b:25:82:52:63:c7:cf:7c:f0:34:cd:
d7:04:aa:a2:5a:79:de:88:11:29:30:99:e3:31:e2:
69:64:cf:9d:1f:a1:3b:55:a0:6d:1a:83:46:bf:98:
8f:37:13:bf:e8:60:58:51:57:69:18:ef:23:37:2d:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1D:50:22:72:7E:4C:F1:23:3A:FD:BC:1E:DD:97:D1:42:30:75:30
X509v3 Authority Key Identifier:
keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/73C1C0F26A2311F19DAEF2D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.104.0/22
Signature Algorithm: sha256WithRSAEncryption
12:5a:4e:9e:35:a3:83:87:8f:5a:01:97:39:7d:e1:63:93:b3:
4c:e0:b7:4f:89:87:ae:63:b5:12:84:b2:83:90:b0:3e:2c:21:
85:1a:a2:5a:4f:c8:11:93:81:f1:37:e3:88:a5:e9:66:2c:83:
2b:4f:19:2d:62:68:ed:6b:a5:9e:f5:fe:92:e1:88:71:5b:ff:
5c:ca:ee:31:c4:f9:9b:09:e8:b1:ca:ee:f6:93:ac:00:ad:47:
a1:9b:be:61:3e:3d:ec:34:33:8b:09:7b:3d:73:08:8b:9d:bc:
e2:e8:1f:2c:42:ff:0b:49:03:73:fb:ec:f6:cd:4a:f3:eb:e6:
8d:ff:c3:4e:f9:5c:d5:57:11:3c:1d:e4:48:1f:0e:26:c4:e3:
bf:b5:1d:96:bf:77:dd:4b:28:57:71:ec:39:8d:c1:b7:cf:0b:
02:8d:3d:be:ff:d3:85:fa:ff:81:00:d9:59:3c:fe:31:98:86:
4d:34:c0:cf:bf:15:3f:1a:94:30:f9:87:55:0e:2e:76:c5:d0:
a1:ae:a3:79:bb:d1:fd:b9:d1:d2:90:8b:1e:32:8c:09:20:50:
12:c9:2d:00:63:50:dd:d7:ce:ae:b4:49:42:e5:7e:1d:6b:2d:
06:c5:64:9a:18:2f:7d:03:bf:ad:a1:01:86:13:db:53:af:ec:
51:4d:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 00:30:44 2026 by rpki-client