Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/68B307E28D7911F1B78AF7B4CE1D38B0.roa
File: 68B307E28D7911F1B78AF7B4CE1D38B0.roa (raw, json)
Hash identifier: UfC0tkAQxlZtwPsWNif+mYQVfjdpERr8zOzUQ27k38I=
Subject key identifier: D7:25:1F:23:68:69:A8:AA:66:0A:FC:8E:E6:CB:05:6E:21:7C:B2:F2
Certificate issuer: /CN=F36BA3E3AF/serialNumber=AFAC0AB31A4066808F00919F1D828ED7B41AC26A
Certificate serial: 05C6
Authority key identifier: AF:AC:0A:B3:1A:40:66:80:8F:00:91:9F:1D:82:8E:D7:B4:1A:C2:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/68B307E28D7911F1B78AF7B4CE1D38B0.roa
Signing time: Sat 01 Aug 2026 07:20:02 +0000
ROA not before: Sat 01 Aug 2026 07:19:57 +0000
ROA not after: Wed 30 Apr 2031 07:19:57 +0000
asID: 327750
IP address blocks: 102.214.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.mft
rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478 (0x5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA3E3AF, serialNumber=AFAC0AB31A4066808F00919F1D828ED7B41AC26A
Validity
Not Before: Aug 1 07:19:57 2026 GMT
Not After : Apr 30 07:19:57 2031 GMT
Subject: CN=6a6d9e21-9195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:a6:ac:2b:67:af:c3:7c:a6:c9:e1:e6:51:
d3:06:ce:a5:09:19:6a:c4:95:4e:af:b7:de:33:ea:
24:1d:92:6a:a2:a2:6b:85:94:d2:84:40:4d:0e:db:
53:33:66:c2:fe:1a:4e:4e:ee:b0:ee:d2:33:37:ce:
b6:25:66:01:16:95:47:35:e6:cf:1a:2f:43:87:20:
9a:10:a4:ee:68:e1:c2:3f:67:a5:9f:4a:d2:83:3f:
4d:b5:ae:9c:71:83:50:e8:58:70:d6:37:a0:c4:15:
b3:8d:ee:29:f7:db:c3:a3:3e:58:7e:79:99:8a:03:
39:a5:d6:78:37:43:ef:bd:9d:fd:da:0e:e0:f3:ad:
79:64:62:78:8c:45:1a:3c:7f:16:84:60:fd:1c:1b:
66:d7:06:8e:5a:d8:79:61:d3:ab:17:3f:e0:76:1a:
06:b4:d8:78:6a:8b:63:d6:fd:83:43:4e:fa:c4:4b:
01:f0:70:00:14:c0:7f:46:e1:7e:83:af:40:ce:c7:
18:60:56:44:c9:75:d7:d3:9d:ee:26:b0:81:de:05:
c0:33:7a:41:9a:e2:95:e8:71:81:2b:31:d5:66:4e:
52:a5:90:ad:e5:34:4f:7d:e1:19:42:14:e7:86:dd:
85:7f:dc:33:5f:d2:fe:9e:2b:b7:82:6e:30:38:8e:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:25:1F:23:68:69:A8:AA:66:0A:FC:8E:E6:CB:05:6E:21:7C:B2:F2
X509v3 Authority Key Identifier:
keyid:AF:AC:0A:B3:1A:40:66:80:8F:00:91:9F:1D:82:8E:D7:B4:1A:C2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/68B307E28D7911F1B78AF7B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.112.0/22
Signature Algorithm: sha256WithRSAEncryption
36:6f:d9:96:df:f3:59:f8:f7:7a:cc:54:05:bf:46:92:a4:81:
a9:c5:83:af:9d:02:16:a3:c5:30:e7:05:12:96:60:05:94:52:
dc:c9:7e:d9:7b:15:f9:77:9b:1a:b5:23:23:ec:c5:e8:e1:5d:
08:d1:17:0e:a7:ce:fe:44:44:a7:a8:29:92:d6:e5:46:40:5b:
9e:0e:78:40:c7:d3:bd:88:7a:a8:6b:31:f7:f0:8c:43:06:e2:
18:9c:26:f2:f5:cc:3a:00:aa:3a:0b:9b:35:d3:dc:4b:40:a5:
36:e4:7c:c9:94:29:2b:66:e3:0c:15:7c:58:f4:d5:b6:d4:8f:
90:e1:05:d0:2b:e9:31:45:fb:ec:76:eb:9e:5c:22:c0:16:1f:
5b:55:59:c3:b2:f8:ae:6c:6e:e2:a5:fc:a3:8f:d5:ba:68:c2:
63:a7:4f:40:ab:95:28:94:9f:18:99:2a:24:d5:72:27:1c:24:
06:44:83:99:5b:51:4f:ae:de:52:aa:f2:c9:59:b1:a4:6e:2f:
85:c3:09:3d:76:8b:31:ef:ce:ff:c7:16:14:c3:7c:a8:24:d0:
90:47:c9:1d:16:87:22:ff:8c:fc:4f:42:bb:55:b0:05:80:be:
85:a2:8e:01:43:90:37:4e:a0:f5:e1:fb:7b:f6:06:3a:0f:d2:
72:6c:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:38:59 2026 by rpki-client