Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/E858D85C904711F1B938F3ABCE1D38B0.roa
File: E858D85C904711F1B938F3ABCE1D38B0.roa (raw, json)
Hash identifier: zSnnvar1HyOLT/mehocTlFzWI1zmursKkh4a5Mn0HXc=
Subject key identifier: 5B:AF:FE:5B:8D:E1:0C:29:84:A5:D6:5E:5B:5E:E6:6B:3F:6D:F8:89
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 07A7
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/E858D85C904711F1B938F3ABCE1D38B0.roa
Signing time: Tue 04 Aug 2026 21:03:14 +0000
ROA not before: Tue 04 Aug 2026 21:03:10 +0000
ROA not after: Sun 31 Aug 2036 21:03:10 +0000
asID: 328840
IP address blocks: 102.220.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959 (0x7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 4 21:03:10 2026 GMT
Not After : Aug 31 21:03:10 2036 GMT
Subject: CN=6a725392-4295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:1b:29:96:39:75:69:b4:ab:1a:ca:14:2b:
8d:e8:43:67:31:d2:60:0b:1a:97:09:21:42:71:0a:
20:c1:f6:36:69:02:63:25:37:08:4f:97:b2:76:42:
3e:57:8f:17:75:da:00:be:c4:b0:0c:25:e1:85:06:
1b:32:19:aa:39:3e:59:80:4d:cc:88:16:e5:05:35:
d8:3b:2a:a9:30:23:5d:f9:53:e4:e0:85:94:9e:dc:
18:ca:e7:2b:6c:61:4a:0f:5b:1b:5c:ea:22:9e:64:
8f:bf:4e:b9:45:dc:a9:28:8c:f3:9b:31:04:08:19:
0d:b6:3d:1f:fd:07:f9:60:47:c5:df:11:49:e9:81:
14:5a:87:2c:ba:e0:68:0a:40:cd:36:1b:7c:32:11:
73:4e:4a:52:04:be:52:8d:9b:66:55:ca:1f:d4:c6:
84:43:86:1d:6e:bf:3f:1d:0f:7d:f4:c6:b0:c4:ec:
4e:92:e5:5f:10:2b:a5:d2:10:86:56:b6:e0:ab:bf:
d2:87:e0:ab:37:aa:c3:e9:d5:e5:0f:46:a4:d3:65:
1e:4f:a8:53:14:62:b0:dc:ff:19:ed:14:18:52:39:
48:15:0e:c1:5f:12:ea:d6:67:29:1e:55:2e:c2:9b:
a4:a2:c0:75:f9:c5:b7:bf:cb:16:21:11:1a:9e:71:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AF:FE:5B:8D:E1:0C:29:84:A5:D6:5E:5B:5E:E6:6B:3F:6D:F8:89
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/E858D85C904711F1B938F3ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:99:a5:ae:77:6b:24:e9:92:2f:70:d6:77:4b:94:4f:58:bd:
27:8d:95:0e:b7:f9:f2:81:04:17:5c:f2:75:b5:33:a1:08:42:
09:d4:ec:e2:bd:09:93:5c:af:10:43:18:46:fb:38:94:8a:3e:
d9:77:dd:c1:ef:62:9f:4c:f6:86:3a:6d:a6:51:4e:ee:af:2e:
5f:6d:18:b9:63:f7:9e:d1:5c:97:13:eb:b1:50:a7:c5:33:e8:
08:b6:ef:dd:75:31:65:1f:35:ae:37:2d:bd:bf:14:0d:33:75:
bc:7d:96:44:6d:b5:b0:55:d7:78:9b:c9:58:61:96:f6:de:30:
bb:00:28:11:b4:09:86:ff:51:90:f8:a7:7d:71:9c:4f:16:64:
dc:4a:fc:f4:ef:bb:5f:f0:72:08:a4:c0:72:4d:76:6e:15:5b:
e0:06:bf:91:93:ea:59:fe:2a:96:51:bb:59:39:a2:b7:a7:df:
8d:eb:e4:3e:ea:b6:e8:41:ec:ec:86:bc:8c:77:67:96:fe:8e:
8c:3c:81:59:35:9e:b3:b6:e4:ac:d1:de:4e:d3:73:35:ec:05:
bd:d8:0b:8c:e7:99:27:d8:3b:b7:03:f5:b6:0c:f9:d8:be:13:
6e:c9:4e:6b:c0:4a:a5:a9:a6:fe:bd:9d:ce:c2:01:76:42:bf:
55:8f:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:20 2026 by rpki-client