Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/9F55A6088FCA11F1B30815C9CE1D38B0.roa
File: 9F55A6088FCA11F1B30815C9CE1D38B0.roa (raw, json)
Hash identifier: +CWFxBF1PZN6OniJBdhYOvm7KqNNXKgvRCDZ4zqYgWk=
Subject key identifier: C8:FE:2C:02:3E:F8:A1:46:39:E5:C3:88:8B:90:AE:9F:4C:D9:5B:B9
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 05D0
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/9F55A6088FCA11F1B30815C9CE1D38B0.roa
Signing time: Tue 04 Aug 2026 06:06:25 +0000
ROA not before: Tue 04 Aug 2026 06:06:21 +0000
ROA not after: Sun 05 Sep 2032 06:06:21 +0000
asID: 37638
IP address blocks: 102.222.228.0/24 maxlen: 24
102.222.229.0/24 maxlen: 24
102.222.230.0/24 maxlen: 24
102.222.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Aug 4 06:06:21 2026 GMT
Not After : Sep 5 06:06:21 2032 GMT
Subject: CN=6a718161-8111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:16:21:40:6e:83:c0:38:fa:56:8d:c2:f2:
9b:e7:7b:d0:65:c9:30:fe:9b:5f:f8:06:dc:47:91:
c7:20:96:0d:09:c9:c5:44:db:a4:3c:8f:1b:e0:3e:
62:6f:bf:4f:a1:1f:73:ee:09:be:46:18:ed:ba:e3:
e8:5d:87:db:b9:a2:95:62:68:0e:c4:e6:89:84:a5:
af:ee:38:19:e5:aa:72:46:09:ba:67:fa:d8:5f:5c:
fb:e7:69:2e:cd:da:57:b1:92:b0:70:8c:78:37:a0:
51:87:95:e3:8b:2e:c5:29:10:94:23:09:82:a7:3c:
c4:51:58:8a:89:3d:e5:5a:59:c4:f0:0f:52:8a:46:
63:20:21:e6:16:a6:7e:cc:c2:cc:b1:6a:d3:11:67:
96:dc:77:27:a8:b9:bd:08:7c:72:e1:57:ea:ae:19:
3e:10:b3:e8:ac:2c:31:ec:33:40:4d:78:00:fd:c5:
b0:3b:58:20:bc:1c:38:d3:a0:67:b4:9d:dc:59:83:
94:75:fe:b7:9c:79:c7:19:54:17:6f:8c:4e:7a:0e:
ce:a6:3c:12:37:31:5b:98:e3:55:3e:9d:0e:05:ec:
62:f5:6d:38:e9:10:de:39:c8:59:99:bc:07:b9:80:
c2:e9:ad:e6:77:f1:1e:c9:cc:ac:54:d1:02:78:9c:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FE:2C:02:3E:F8:A1:46:39:E5:C3:88:8B:90:AE:9F:4C:D9:5B:B9
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/9F55A6088FCA11F1B30815C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:39:d9:4d:f3:6b:39:5a:2a:e3:3f:37:bc:85:2f:56:e4:eb:
18:bb:7e:b1:df:b8:83:ee:87:2f:f0:ff:c3:2f:4d:bb:59:eb:
50:28:dc:1c:5b:c4:47:25:56:bc:bc:a1:34:06:57:38:89:b2:
c2:35:67:c6:79:70:3e:f2:5d:ad:93:ee:45:3f:5c:78:ba:19:
f0:10:e1:45:48:85:ed:ea:ed:98:ab:59:69:56:da:11:b8:a7:
7f:e4:fa:9b:ba:7d:31:2d:cf:09:90:67:52:9b:95:ef:f6:53:
35:19:59:cd:77:ea:95:ae:37:46:bb:4a:7c:11:47:b2:0a:78:
c4:29:e4:67:67:69:ff:50:57:6d:a6:92:01:a2:a8:18:8f:5f:
be:7e:de:16:f6:b1:fa:f3:40:c6:73:ad:84:48:29:fc:81:06:
b3:20:e5:96:e5:f8:22:44:99:a2:fc:5b:e3:44:e3:9a:cb:fc:
fa:30:8e:4a:b0:d7:e4:34:16:18:61:d5:9e:87:b1:01:18:8a:
cb:73:88:01:09:e3:5a:20:9f:c0:ca:55:17:7b:79:b4:1b:d7:
de:a1:7a:c7:df:b8:ec:70:37:5c:78:28:25:9f:59:cb:9a:0f:
7b:6d:29:1c:b6:ef:db:aa:7d:e1:ec:88:3e:19:4b:46:0f:1a:
88:2a:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:39:35 2026 by rpki-client