Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/5934A7348FD211F1A87AD0F5CE1D38B0.roa
File: 5934A7348FD211F1A87AD0F5CE1D38B0.roa (raw, json)
Hash identifier: EqkBjQqRRbCYCu38EkYIJSGbtFQWg1734bVXP3hu6u4=
Subject key identifier: 4F:D5:94:0C:5D:44:45:CD:43:53:EE:4F:10:BC:2C:49:9E:7D:D9:69
Certificate issuer: /CN=F36C5A07AF/serialNumber=BC2A1B4048D52C737B641D1A38CBF7BC0EA3FCF8
Certificate serial: 0713
Authority key identifier: BC:2A:1B:40:48:D5:2C:73:7B:64:1D:1A:38:CB:F7:BC:0E:A3:FC:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/5934A7348FD211F1A87AD0F5CE1D38B0.roa
Signing time: Tue 04 Aug 2026 07:01:43 +0000
ROA not before: Tue 04 Aug 2026 07:01:39 +0000
ROA not after: Mon 04 Aug 2036 07:01:39 +0000
asID: 328061
IP address blocks: 102.223.120.0/22 maxlen: 24
2c0f:f2c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.mft
rsync://rpki.afrinic.net/repository/afrinic/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811 (0x713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C5A07AF, serialNumber=BC2A1B4048D52C737B641D1A38CBF7BC0EA3FCF8
Validity
Not Before: Aug 4 07:01:39 2026 GMT
Not After : Aug 4 07:01:39 2036 GMT
Subject: CN=6a718e57-6822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:7c:7d:42:22:c4:97:d7:53:ea:56:8a:46:
f6:19:b6:b8:37:84:0d:a9:65:0d:00:6d:52:c1:34:
b1:c8:7c:aa:2e:c9:41:cd:4f:b0:fb:de:1e:66:55:
aa:a8:29:c0:3f:55:48:9d:94:a0:da:d8:70:37:9a:
be:cf:47:9f:87:0a:0f:1d:9a:4d:94:4c:e1:f9:a5:
06:f3:e5:21:cd:49:5e:0f:2d:f8:d4:3f:1b:a3:97:
f2:2b:b9:19:27:df:72:ba:79:53:10:db:f6:b1:70:
3a:86:a7:bd:54:49:74:5a:27:c8:a4:19:f7:80:06:
21:0c:c6:4e:40:3b:08:43:a1:d1:c3:10:47:f6:83:
65:39:b3:de:20:a9:b0:af:86:e8:49:cb:7d:a8:dc:
2c:d6:90:98:97:c7:07:40:cd:80:32:bc:ae:70:4a:
d7:46:2e:0d:ca:d4:4c:60:29:b2:83:3d:09:54:d3:
f7:f7:b0:ae:59:9e:09:af:cb:ec:ba:4a:21:8a:6d:
5b:96:82:ac:8b:f2:a2:46:4d:5e:f9:5d:ec:c3:b2:
13:3c:dd:d5:46:c7:71:48:8d:d6:3f:5c:97:3d:52:
41:09:8a:fd:89:b5:bb:f7:e5:dd:02:70:ac:3b:49:
46:3c:b5:1f:51:b5:55:b3:ea:05:a9:44:ac:66:15:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:94:0C:5D:44:45:CD:43:53:EE:4F:10:BC:2C:49:9E:7D:D9:69
X509v3 Authority Key Identifier:
keyid:BC:2A:1B:40:48:D5:2C:73:7B:64:1D:1A:38:CB:F7:BC:0E:A3:FC:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vCobQEjVLHN7ZB0aOMv3vA6j_Pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/84BE186025A411EC86D1A850D8A014CE/5934A7348FD211F1A87AD0F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.120.0/22
IPv6:
2c0f:f2c8::/32
Signature Algorithm: sha256WithRSAEncryption
09:16:d0:2e:79:9f:89:6a:fa:fd:bd:16:47:71:7b:a6:4c:3c:
52:e2:eb:ac:24:75:c7:32:b5:55:be:e3:24:27:3e:8d:43:c7:
5c:42:eb:a4:11:6d:6b:a3:fd:64:f5:74:44:9a:5d:93:72:c5:
a5:21:4a:8c:cc:85:ec:55:75:d3:6a:40:22:ac:7e:e5:30:bc:
86:50:0f:0b:23:5c:84:2b:e5:ee:dc:90:70:e9:ba:d8:24:ad:
93:15:21:c9:4c:fb:d7:27:c8:c1:6d:46:15:2e:63:22:c0:c5:
b2:8e:9f:9f:12:e5:06:89:56:f2:25:98:e1:54:2d:b0:dc:66:
02:22:36:ad:03:f9:43:fb:1b:61:aa:4e:d4:64:81:92:22:2f:
48:31:6f:65:d8:4e:1d:35:00:cb:6d:a0:54:1b:0e:5c:15:f2:
a1:d8:56:6a:74:a9:1f:0d:51:f4:61:34:b7:1b:48:e7:8e:9f:
4e:9e:3e:60:83:b3:c2:ad:92:6a:cf:3b:aa:ea:ee:bf:64:52:
10:25:07:61:54:56:61:78:42:ec:64:78:41:6e:56:96:6e:2a:
a5:e9:d3:f5:1b:f2:66:15:03:d2:38:e4:30:fa:45:ad:95:61:
b9:d7:72:45:60:aa:e2:4c:74:13:c6:9b:61:c9:ae:cb:55:6d:
12:2e:49:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:38 2026 by rpki-client