Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/836F78B075DA11F1A1AB81D1CE1D38B0.roa
File: 836F78B075DA11F1A1AB81D1CE1D38B0.roa (raw, json)
Hash identifier: C/oJZAkfwxQNcxTSbWLPjl5Q16hiylcczMDjFaQmjNE=
Subject key identifier: 78:11:CE:06:70:78:E9:F4:10:A6:45:2A:43:ED:29:43:60:80:C0:10
Certificate issuer: /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial: 0188
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/836F78B075DA11F1A1AB81D1CE1D38B0.roa
Signing time: Thu 02 Jul 2026 05:54:40 +0000
ROA not before: Thu 02 Jul 2026 05:54:34 +0000
ROA not after: Wed 10 Jul 2030 05:54:34 +0000
asID: 213481
IP address blocks: 102.205.240.0/22 maxlen: 24
2c0f:fc78::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 04:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Validity
Not Before: Jul 2 05:54:34 2026 GMT
Not After : Jul 10 05:54:34 2030 GMT
Subject: CN=6a45fd20-0564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:fb:79:bb:d6:63:be:72:dc:39:be:7e:cf:
c3:1e:3b:7a:5b:5f:ef:e8:05:d2:74:73:d5:db:c0:
5f:b4:ee:0a:8a:66:ea:0c:63:76:63:61:24:f1:b9:
40:37:b6:46:98:b0:84:e4:61:21:59:07:19:7d:c3:
65:ae:03:50:91:a0:de:5d:1b:1e:56:80:f9:0f:a7:
17:f2:24:94:26:03:90:4c:84:fb:c8:10:3f:8c:ea:
7b:94:d8:f7:1d:9c:3a:4f:c9:dc:d5:0b:a1:ad:17:
75:d7:9b:6c:16:87:dd:fc:54:a5:05:20:3f:54:9b:
67:8b:7b:9e:7a:2c:09:c5:51:fd:f3:93:ea:b4:ba:
7d:48:e2:b0:fa:cc:63:19:5d:b5:a0:7c:25:2c:7d:
0e:13:29:19:85:e4:76:79:2b:43:7d:e5:b2:c0:1e:
69:90:e8:c0:a6:83:18:65:3a:e0:e5:0f:87:15:15:
b3:51:80:cb:a8:61:97:fb:fa:aa:c8:1e:e5:45:49:
d9:1c:f3:34:e2:46:88:8f:f0:c3:89:6b:73:88:0e:
b0:27:93:30:ed:90:48:57:8f:35:0c:ca:c1:f0:bb:
a7:aa:82:5a:db:8a:b3:ce:ee:14:e8:eb:5d:19:f3:
c5:c9:1e:2c:d6:32:ce:ff:c7:cc:31:b2:0f:a1:ac:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:11:CE:06:70:78:E9:F4:10:A6:45:2A:43:ED:29:43:60:80:C0:10
X509v3 Authority Key Identifier:
keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/836F78B075DA11F1A1AB81D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.240.0/22
IPv6:
2c0f:fc78::/36
Signature Algorithm: sha256WithRSAEncryption
10:8b:b8:56:da:87:46:09:4c:41:f6:87:8c:89:71:c2:11:f6:
f4:80:18:77:cc:ba:7a:5b:ea:34:c9:91:5a:d1:c8:99:cd:cd:
b4:ce:2b:be:20:fa:ea:fb:dd:30:33:21:5c:0e:2d:c1:fe:37:
e3:36:6a:e7:da:17:26:57:33:ee:a4:4f:1c:ec:73:d1:57:67:
98:5d:c4:64:11:44:86:cc:e6:c6:9d:a4:be:2a:63:31:3a:c8:
21:70:85:0b:52:13:4c:5e:73:87:c6:c8:f8:ee:ac:ca:3d:9b:
c0:de:4f:10:bc:34:d1:ef:b5:b8:6b:97:a2:97:59:9b:f7:7d:
0c:23:1a:cc:ab:66:5d:f6:0a:48:07:f0:ba:f4:c4:a5:ff:ed:
97:d2:8a:73:6e:e5:b7:30:b6:7e:c0:4a:26:c2:d4:84:c2:8a:
39:85:c5:d1:b0:8a:16:81:03:31:49:3c:f1:81:f1:da:8d:e7:
43:a4:4e:d5:18:47:86:ab:5a:c3:49:c0:42:91:43:37:7a:7e:
20:5d:7c:7a:ef:d0:0a:ed:17:ea:2b:18:45:4c:5d:cc:58:10:
14:51:bd:7d:70:ec:f1:75:6e:73:62:4b:98:e7:cf:11:1d:fa:
05:e9:c1:70:ee:fe:2b:39:8a:7e:63:63:62:3c:fd:61:12:73:
6b:94:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:41 2026 by rpki-client