Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/FFC7A60E699A11F18EF66B08CF1D38B0.roa
File: FFC7A60E699A11F18EF66B08CF1D38B0.roa (raw, json)
Hash identifier: yu01op1Pd/tCZ2LjxqSBk0y9Rr/vjNarwkBoRduJzwI=
Subject key identifier: 43:45:53:02:83:FE:FB:6B:E7:51:9F:9B:37:4B:71:2B:52:B4:D7:C9
Certificate issuer: /CN=F36E570FAF/serialNumber=4F2E5D06850FA94B9222CF7FFE76F8B2F3012125
Certificate serial: 024D
Authority key identifier: 4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/FFC7A60E699A11F18EF66B08CF1D38B0.roa
Signing time: Tue 16 Jun 2026 15:49:46 +0000
ROA not before: Tue 16 Jun 2026 15:49:42 +0000
ROA not after: Mon 16 Jun 2036 15:49:42 +0000
asID: 5511
IP address blocks: 102.212.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Jul 2026 00:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E570FAF, serialNumber=4F2E5D06850FA94B9222CF7FFE76F8B2F3012125
Validity
Not Before: Jun 16 15:49:42 2026 GMT
Not After : Jun 16 15:49:42 2036 GMT
Subject: CN=6a31709a-8c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:20:10:36:c9:7a:21:91:26:84:09:9b:5f:de:
8d:cd:5d:1a:fc:bf:1b:d4:09:7c:15:a4:22:9a:ff:
87:7d:1d:1a:fd:12:47:fe:a2:e4:ae:9f:cd:17:23:
f1:3d:02:3b:40:3e:eb:0e:ee:f0:23:c9:1c:a4:40:
dd:d2:1d:dc:da:1c:3a:3b:5d:db:08:20:e0:14:50:
51:43:b3:35:5b:1d:a2:4a:93:ba:2f:5d:02:3d:5f:
2d:80:5e:d9:7b:a8:7c:77:44:f3:0c:a8:74:30:2e:
84:e8:06:4a:a7:ba:49:8c:61:5d:43:33:26:39:5a:
ee:a6:63:ae:90:f5:bf:3a:10:72:62:eb:9e:5a:bd:
ef:71:05:7d:3d:4d:0e:ca:31:50:4a:28:8f:51:39:
46:bd:53:6e:29:6e:d5:82:4a:73:70:8e:a2:09:6e:
e9:4f:a1:3e:0a:b3:b9:0c:fd:be:b7:7e:c0:05:a3:
d6:22:83:87:ee:fa:6b:a5:7d:88:2b:ff:5f:ad:49:
4c:11:bf:bd:80:6c:40:9d:e0:27:2d:98:c5:d3:36:
ac:03:eb:3e:86:ab:52:65:d1:5a:01:fc:fc:04:7b:
8a:b1:2c:e9:5b:72:36:aa:65:9c:60:7e:7c:a5:c0:
f4:24:b6:d5:19:af:97:8e:3f:36:0d:e4:b1:75:9b:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:45:53:02:83:FE:FB:6B:E7:51:9F:9B:37:4B:71:2B:52:B4:D7:C9
X509v3 Authority Key Identifier:
keyid:4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/FFC7A60E699A11F18EF66B08CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:d3:2b:25:d7:bb:8f:7c:5f:a6:6a:66:af:56:57:d1:2e:98:
2c:42:5a:0f:1e:b9:4f:16:5d:7a:c6:d0:81:84:58:23:da:88:
4d:f7:8f:ad:80:68:2f:7e:77:5b:e8:cd:30:7d:0c:43:48:07:
5b:78:e1:b7:81:b8:82:c9:94:1f:88:a3:9c:9e:e7:46:ee:9d:
e6:20:ca:90:37:2b:5e:45:4f:aa:a8:6e:23:39:36:09:13:2d:
a2:cf:26:5c:75:91:92:67:60:c9:18:b8:cc:27:1a:30:ea:d5:
69:4b:03:ce:c0:f4:39:4f:b2:25:47:af:80:75:56:22:38:3b:
42:2c:c1:54:11:47:65:ea:5e:0a:50:43:e6:88:a7:2f:b3:a2:
30:38:f6:44:1e:8f:6f:92:a5:31:67:f6:d5:25:a5:b7:ee:ce:
73:10:97:e1:8f:71:25:96:81:87:29:e2:f2:ad:b3:27:16:a7:
4b:0e:61:5c:17:55:2b:9d:d8:8a:17:b8:7b:dc:c2:57:ee:d3:
10:31:0d:29:54:c4:63:f6:d8:70:1d:f1:1d:00:cd:1e:3f:95:
1c:e4:28:c1:c6:02:75:0c:5b:ba:fa:46:31:70:d4:bd:29:5e:
99:c9:84:5e:79:77:44:c2:77:bc:9b:27:56:9b:3b:a8:9e:3d:
e9:39:33:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:15 2026 by rpki-client