Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/ED3DA7148CF311F19708DEFACE1D38B0.roa
File: ED3DA7148CF311F19708DEFACE1D38B0.roa (raw, json)
Hash identifier: ZwAkD3o8a52rQ3FdRCOWArlw1hH6VP1ykvl7+xeKDjQ=
Subject key identifier: E4:82:F5:6B:5B:A1:DC:69:64:D0:80:FF:99:E0:81:00:9E:00:0C:0A
Certificate issuer: /CN=F36AA788AF/serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Certificate serial: 05B8
Authority key identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/ED3DA7148CF311F19708DEFACE1D38B0.roa
Signing time: Fri 31 Jul 2026 15:24:31 +0000
ROA not before: Fri 31 Jul 2026 15:24:27 +0000
ROA not after: Tue 01 Sep 2026 15:24:27 +0000
asID: 328730
IP address blocks: 102.221.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1464 (0x5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA788AF, serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Validity
Not Before: Jul 31 15:24:27 2026 GMT
Not After : Sep 1 15:24:27 2026 GMT
Subject: CN=6a6cbe2f-f714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:57:1e:c8:29:44:f7:73:93:0e:f4:8b:8a:
03:3f:7f:ea:29:21:a4:ce:34:b9:c6:60:cd:9d:c5:
88:bc:72:d2:6a:d1:83:59:41:53:1f:5b:82:00:93:
4c:4d:c7:a0:22:1a:0e:fb:95:5a:f7:67:91:fd:ce:
81:65:54:1b:96:7d:66:3e:66:46:95:a2:bf:64:46:
4d:70:36:04:fd:6b:93:ab:d3:23:88:c0:eb:ef:19:
e3:65:13:5d:cc:2a:ff:cc:88:eb:66:cd:03:ff:52:
51:8d:08:1b:63:ce:3f:6d:7e:fc:1e:50:9c:ea:b8:
3a:c2:bf:97:3e:00:1c:2a:11:e1:a8:63:0b:54:f0:
da:ab:b9:17:39:c2:5e:bb:78:99:b9:99:21:20:39:
65:df:36:4a:58:59:4d:47:32:d5:79:e6:66:0c:03:
b6:81:29:cc:96:d6:1a:07:6f:6e:8f:07:9d:b3:c4:
41:3c:5d:6e:57:20:de:4a:57:62:d9:c0:45:d9:5d:
2c:29:f0:6e:f7:7a:64:c7:3d:d9:e6:6a:93:0e:bc:
ab:47:cc:05:9a:13:b0:d9:c3:f4:49:5e:8a:8d:f2:
7c:d9:c8:f1:4e:31:bf:a8:87:ed:c4:b9:d9:a6:69:
0f:e7:e6:e7:a3:8a:79:7d:da:82:8a:11:70:c4:0c:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:F5:6B:5B:A1:DC:69:64:D0:80:FF:99:E0:81:00:9E:00:0C:0A
X509v3 Authority Key Identifier:
keyid:67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/ED3DA7148CF311F19708DEFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.196.0/22
Signature Algorithm: sha256WithRSAEncryption
07:6f:8a:e2:e3:01:f4:1a:17:bb:97:70:50:4a:e2:66:e0:fc:
b0:ff:52:0d:f8:6c:02:31:f0:0f:19:7d:65:61:80:e0:f7:ef:
b3:23:ee:0b:75:6b:b4:ea:d8:d5:cf:7f:0f:68:33:e5:50:74:
9d:cb:aa:bf:57:4b:8e:61:6b:ef:94:3b:5d:cb:39:cb:7c:a8:
90:ee:05:4d:8b:17:4b:02:b9:42:28:cc:8c:1d:be:db:07:31:
b4:ad:86:5c:e8:43:5e:01:34:cf:b1:56:65:44:1d:9f:5b:f2:
45:27:5d:b2:9a:d6:e0:79:69:a6:6a:cf:63:2b:d2:bb:f4:46:
a0:1b:ec:42:28:16:9d:c7:3d:3f:51:7b:98:39:55:2d:24:80:
21:92:10:0f:3e:ee:6b:08:c8:d3:9f:b7:00:eb:37:9b:80:3c:
14:7a:55:74:05:ef:16:65:e8:33:9d:92:f5:14:16:be:f3:74:
44:48:95:84:32:7d:fa:26:ec:e5:f6:55:ca:f6:99:b0:d8:ef:
b6:1f:e4:d4:69:15:94:3a:75:de:24:0c:53:56:41:5b:13:44:
66:eb:e8:20:94:f9:be:ab:f5:57:e4:6a:6c:05:93:a3:b4:e6:
be:ec:c0:ec:4a:13:bc:00:1e:0f:85:fc:b4:84:f3:6e:f5:ed:
b4:00:88:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:17 2026 by rpki-client