Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/EB0E6C0E8FCC11F1AFB13AD5CE1D38B0.roa
File: EB0E6C0E8FCC11F1AFB13AD5CE1D38B0.roa (raw, json)
Hash identifier: OR4CeWr7z50WI0avP9UMn/SEpC0E+MmNgu0hAqXKawg=
Subject key identifier: 44:10:32:7C:C5:A6:C7:A3:F4:31:47:EF:FE:20:D1:3D:9F:1C:42:7F
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 05D6
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/EB0E6C0E8FCC11F1AFB13AD5CE1D38B0.roa
Signing time: Tue 04 Aug 2026 06:22:51 +0000
ROA not before: Tue 04 Aug 2026 06:22:46 +0000
ROA not after: Sun 05 Sep 2032 06:22:46 +0000
asID: 37638
IP address blocks: 102.222.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1494 (0x5d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Aug 4 06:22:46 2026 GMT
Not After : Sep 5 06:22:46 2032 GMT
Subject: CN=6a71853b-5b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:54:e2:a2:ca:ab:00:1c:f7:b1:4d:fe:2e:
64:1f:e4:71:c5:a5:14:45:61:78:d2:71:58:02:83:
24:b0:d8:c9:e4:3a:55:00:b2:f5:79:50:60:a6:61:
98:3c:21:a8:0d:61:32:70:2f:10:d0:84:58:ef:df:
0b:dc:6f:10:8d:0b:da:53:c1:80:a6:c6:7e:09:2c:
53:40:a4:ea:43:64:28:45:51:dd:a2:5c:4c:9e:d8:
49:3e:6c:7b:7c:6d:63:87:f3:ae:38:c9:e7:a4:2b:
6a:b7:6a:6a:24:e5:50:f4:f9:1a:df:5e:b9:fc:8e:
b1:0a:67:ea:47:62:e0:46:12:d4:57:19:c9:2a:ed:
e3:35:17:17:5c:79:b8:6d:c2:60:e1:e4:41:ed:8b:
ce:66:b3:1c:53:45:3b:52:c5:89:f4:09:de:f4:f9:
d5:e5:c2:e0:af:28:4b:83:a0:74:14:1f:85:03:ce:
5c:59:69:42:f9:f1:05:c2:27:20:2c:d1:75:12:b2:
9d:fb:cb:7b:a6:d4:af:c2:45:4a:ca:71:95:90:d3:
fa:3d:00:ae:e5:57:b0:97:12:91:65:3d:45:06:6f:
a0:30:be:00:23:0b:fe:65:44:11:1e:77:c1:bd:83:
b7:43:6c:53:1d:e2:ae:c3:1b:4e:21:f6:72:f0:dd:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:32:7C:C5:A6:C7:A3:F4:31:47:EF:FE:20:D1:3D:9F:1C:42:7F
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/EB0E6C0E8FCC11F1AFB13AD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.230.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:4a:27:98:08:db:d4:66:fb:ac:86:3e:17:07:72:18:43:bb:
6e:6a:87:2c:20:3a:64:82:39:2c:33:a5:86:b8:05:91:6e:7d:
84:09:06:16:1a:51:6d:96:e5:b3:5d:fa:2e:51:14:b9:15:cc:
2f:2b:fa:f5:c5:7d:93:25:2a:64:f4:40:65:42:cf:a5:2a:7c:
1c:a0:74:18:b1:da:87:f2:16:88:06:a8:94:1e:61:c2:04:c9:
bc:3f:d1:8a:b1:3a:19:7c:1a:cf:7c:a0:ea:2e:d0:87:d1:77:
7b:69:05:1d:4b:12:05:d3:b3:12:87:43:3a:c1:23:1d:5c:e5:
a6:54:b3:df:89:3c:a8:8c:08:15:8a:35:ad:47:89:f7:9d:16:
08:3b:b0:bb:2a:a1:c4:cc:b4:9a:8b:79:ff:f7:c8:d5:dc:cf:
a2:42:7e:1b:4a:46:cf:e4:ff:d8:6d:4b:91:7f:9d:48:aa:7b:
1c:99:8a:54:fa:d2:d8:5e:bd:9a:5c:33:ea:a1:a2:43:7d:64:
0f:68:59:99:8e:d0:8f:a7:99:c4:53:3e:a4:22:79:d3:92:bd:
3d:1b:f4:6e:2c:c2:f7:ed:75:f2:01:bf:d1:42:c3:b7:cf:da:
a5:de:36:94:ac:c1:cf:0f:44:c3:b6:61:60:e1:16:1d:3d:33:
d0:3e:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:39:28 2026 by rpki-client