Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/2AC4622A904711F1A706B7A7CE1D38B0.roa
File: 2AC4622A904711F1A706B7A7CE1D38B0.roa (raw, json)
Hash identifier: p8cJ8n3plQE/oKT1XHeAU7Lr+3F3CdeuvX0Nn42EBzg=
Subject key identifier: EB:B7:A2:1D:6B:2B:59:BF:C1:24:2F:0F:2B:43:E7:A8:4C:C6:3B:70
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 07A5
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/2AC4622A904711F1A706B7A7CE1D38B0.roa
Signing time: Tue 04 Aug 2026 20:57:56 +0000
ROA not before: Tue 04 Aug 2026 20:57:52 +0000
ROA not after: Sun 31 Aug 2036 20:57:52 +0000
asID: 328840
IP address blocks: 102.220.18.0/24 maxlen: 24
102.220.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 4 20:57:52 2026 GMT
Not After : Aug 31 20:57:52 2036 GMT
Subject: CN=6a725254-8aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cc:39:65:2d:29:a3:9e:af:56:2c:17:18:5b:
ca:5b:87:61:49:4d:a7:a8:71:b6:5e:6f:8f:13:5a:
aa:90:d9:09:db:4e:3e:7e:8e:1d:db:1c:7c:55:bc:
56:5a:62:ae:dd:2e:74:e0:2d:aa:0c:ad:3a:33:4f:
3d:ac:01:67:bd:16:e5:6b:60:90:43:e4:2b:ec:83:
e4:d6:90:98:18:92:8f:de:53:a8:16:84:63:db:7e:
36:06:5b:7a:a4:2b:d6:d4:0f:d8:ce:2c:74:89:6a:
ba:2b:7c:d4:97:64:3f:c1:e3:dc:6d:ae:8f:ee:5d:
ab:ba:3c:ef:11:12:0c:fc:5b:ef:c4:70:4c:a9:79:
f1:d0:63:d8:ff:10:c3:a2:c3:dc:b4:3d:04:69:da:
26:c4:c0:d2:4a:0d:99:61:ec:50:6a:1a:26:67:38:
2b:75:c4:50:c4:5e:d0:c3:40:c9:83:83:d9:c1:86:
2e:a8:4a:f6:ca:e5:de:da:18:c7:b6:58:29:8e:ea:
5a:19:36:af:99:03:b7:41:42:09:0c:22:59:e0:bf:
22:4b:5e:42:04:c2:ff:52:44:b7:2d:6d:e2:47:63:
b0:4e:59:60:7d:c2:02:e0:60:81:3e:65:95:69:29:
9d:f7:36:b6:47:84:fc:5e:c1:a1:84:ca:71:fb:4d:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:A2:1D:6B:2B:59:BF:C1:24:2F:0F:2B:43:E7:A8:4C:C6:3B:70
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/2AC4622A904711F1A706B7A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.18.0/23
Signature Algorithm: sha256WithRSAEncryption
31:97:11:f3:4c:13:31:e4:b9:c9:18:a1:c7:04:b5:22:e9:e9:
c5:2f:2e:20:34:0b:98:2f:33:0d:10:92:4b:9b:4e:fd:38:a4:
70:df:0a:8b:6d:94:02:c6:b6:7b:96:65:b3:ce:1b:d9:ed:20:
92:23:21:49:e5:7f:aa:98:2b:74:75:9e:f8:a3:da:0d:e4:5b:
ec:83:91:c9:30:20:14:65:3e:9e:ba:61:0c:a7:a0:09:41:a9:
e0:0c:f8:67:a4:31:ae:49:0d:a8:29:5b:0f:f6:ff:7e:a7:f9:
1c:45:9d:30:48:f1:c9:e0:2b:0e:0f:d3:5d:6a:b7:71:74:a4:
a3:fd:fd:13:79:67:67:b7:a1:bb:01:e7:0c:4a:d0:e2:48:1d:
b3:d3:04:ec:a0:26:fe:4e:1d:ab:35:49:ba:70:00:eb:31:ec:
c7:a3:2e:c3:f5:18:79:67:1d:24:1e:8c:4d:ce:e1:1a:6f:a1:
dc:5d:1e:dd:22:d2:f6:70:26:73:c0:82:27:b2:de:47:68:8a:
c9:ea:e0:16:50:f0:9e:37:c2:78:af:46:b0:de:5a:41:df:76:
42:23:71:20:4b:b2:20:b2:ce:12:5d:a5:68:43:ca:3a:2d:61:
46:a8:8c:b6:6f:49:6b:52:1c:aa:30:c4:06:83:c1:d3:1d:43:
9f:cd:34:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:20 2026 by rpki-client