Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/D15CCB708B7611F1A50479E0CE1D38B0.roa
File: D15CCB708B7611F1A50479E0CE1D38B0.roa (raw, json)
Hash identifier: Z4wzLp47lpqvZEucgRFW0suqYo37K1YhClbsK+FRe0Y=
Subject key identifier: F2:F4:DB:E7:D9:EF:82:FF:96:6E:AE:C3:E4:84:64:75:AF:59:9B:37
Certificate issuer: /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial: 07BE
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/D15CCB708B7611F1A50479E0CE1D38B0.roa
Signing time: Wed 29 Jul 2026 17:56:26 +0000
ROA not before: Wed 29 Jul 2026 17:56:21 +0000
ROA not after: Sun 27 Jun 2032 17:56:21 +0000
asID: 328843
IP address blocks: 102.220.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36997F0AF, serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Validity
Not Before: Jul 29 17:56:21 2026 GMT
Not After : Jun 27 17:56:21 2032 GMT
Subject: CN=6a6a3eca-fe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:cf:73:9f:b4:1c:d3:26:a0:80:13:de:f1:
69:ce:e4:7c:f5:3e:fc:5a:f2:1f:d4:aa:3c:51:2f:
0b:d1:41:4f:c3:01:ec:5e:61:74:53:8a:f0:72:5b:
60:33:c1:1e:3f:fa:0c:c2:8f:c6:d3:53:4a:04:10:
d7:06:dc:0e:db:08:62:99:09:c6:29:48:b1:20:ac:
1d:25:48:f9:f7:a6:88:fe:a3:5a:98:ac:58:1e:74:
93:2a:28:c3:e3:bb:c3:9d:ee:75:a1:8a:d1:52:ad:
49:cc:24:71:ba:0a:c9:a1:4f:0d:b0:66:a3:26:ce:
25:ba:3d:31:14:15:4e:ee:ee:f5:1f:4c:cb:18:34:
4f:87:a2:c3:2b:86:fb:54:f7:84:88:95:95:1e:fb:
70:85:65:a2:bc:8e:f3:30:70:b2:2e:bd:82:78:59:
b6:79:21:8d:a1:01:af:3e:e8:e3:9c:75:c0:94:f3:
21:4c:c1:d5:03:72:af:e2:6c:60:f6:93:58:c3:8b:
57:91:fe:18:4d:02:10:78:79:b2:13:37:8d:a9:a8:
67:3d:3b:3c:d6:2d:c0:eb:09:15:0e:f9:71:5e:ac:
b4:ed:62:71:aa:8b:7d:0c:a8:5f:77:d6:84:81:d4:
9b:ed:6f:c1:df:f8:e0:83:b0:e3:db:89:f7:8f:ac:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F4:DB:E7:D9:EF:82:FF:96:6E:AE:C3:E4:84:64:75:AF:59:9B:37
X509v3 Authority Key Identifier:
keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/D15CCB708B7611F1A50479E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.49.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0a:a6:6f:b4:7a:39:9e:96:a6:49:11:0f:11:e9:aa:2b:05:
55:a8:e4:dd:b7:95:2e:c9:0e:d2:74:c5:0b:80:8b:15:93:22:
2d:86:b8:98:fc:70:0b:70:3b:9e:1b:cb:0f:cb:62:7d:2b:04:
37:39:90:25:97:e8:46:78:88:4c:a1:52:20:b0:14:84:99:5a:
00:34:b6:a9:fc:42:0a:77:84:3d:bd:f4:e6:f6:f7:6f:05:c0:
57:b2:44:28:44:d8:94:32:50:80:75:78:53:f9:d4:d1:22:0b:
69:66:c7:0b:5f:0b:55:13:e1:06:03:4f:c7:c7:68:cb:b2:b8:
f5:e3:f6:10:2f:88:df:9f:1f:35:0c:bf:dd:b8:a2:5e:56:c0:
38:2c:40:82:12:e6:c4:c6:f0:17:de:e9:89:e2:2d:67:34:6c:
ff:d1:b7:91:98:54:81:a4:f7:c8:ca:d6:8c:39:f0:75:e2:94:
b0:95:e1:27:34:be:93:57:85:60:25:40:c8:e9:a5:09:2a:f8:
b7:29:58:76:30:b7:d8:9b:c9:c3:7d:74:e3:67:03:1e:2e:aa:
1b:40:77:a4:64:a9:cd:46:b2:a6:26:18:e0:89:30:79:22:e0:
5b:b6:cf:bd:59:05:c7:3d:e6:67:b5:92:30:45:ff:f7:59:3c:
e4:19:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:00 2026 by rpki-client