Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/F8E5F12E8CF411F1B2C13301CF1D38B0.roa
File: F8E5F12E8CF411F1B2C13301CF1D38B0.roa (raw, json)
Hash identifier: HCqeCa8GL4fGsITTgy07OpGVdnJiPdPrJAUcUD2wANI=
Subject key identifier: D3:80:0A:91:0A:E9:4E:3F:85:F9:D1:51:FB:58:6E:8A:E2:1B:A1:3B
Certificate issuer: /CN=F36E8936AF/serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
Certificate serial: 053C
Authority key identifier: 3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/F8E5F12E8CF411F1B2C13301CF1D38B0.roa
Signing time: Fri 31 Jul 2026 15:32:00 +0000
ROA not before: Fri 31 Jul 2026 15:31:56 +0000
ROA not after: Sun 09 Jan 2033 15:31:56 +0000
asID: 328216
IP address blocks: 102.141.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8936AF, serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
Validity
Not Before: Jul 31 15:31:56 2026 GMT
Not After : Jan 9 15:31:56 2033 GMT
Subject: CN=6a6cbff0-d78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:47:00:f0:73:14:62:3a:ba:ba:f0:f5:99:
6d:20:08:f7:a3:a9:16:8f:2d:aa:2f:a6:6c:42:c4:
76:fe:fa:f6:a8:8c:e3:0c:6a:d8:5a:82:50:77:b2:
a6:94:38:13:d5:91:da:65:4f:1e:b4:0d:a8:04:0f:
d8:e0:ea:4a:f2:f1:9a:09:76:3c:77:41:05:9f:41:
be:87:86:de:8b:cc:82:fb:02:77:0e:27:68:f0:c0:
f7:2d:2b:3d:bd:5e:5b:2e:2c:ad:87:8f:35:42:85:
39:34:c9:36:43:3f:36:d1:31:43:c1:55:06:f4:ff:
51:e8:1d:77:7b:ce:3c:fe:8f:c5:ff:4b:c2:60:b7:
88:b7:b4:cb:62:e2:5b:7c:73:db:65:eb:fb:7f:55:
c8:a9:ea:77:3f:9c:7e:8f:1a:ad:14:49:02:11:ad:
75:78:19:86:ee:67:36:76:46:ab:25:1f:67:1a:a0:
23:b8:c0:5b:ce:68:bd:91:75:f3:3a:b7:43:e3:98:
52:f7:17:27:d9:00:19:df:5d:45:a2:28:4c:ce:ff:
b3:69:f9:4e:73:8c:c3:1c:c1:a7:1d:36:18:a0:0c:
5d:27:94:eb:ae:7f:1c:06:f1:51:c8:16:84:4c:79:
ad:64:92:48:e5:0a:2e:c9:53:04:29:69:d8:63:bd:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:0A:91:0A:E9:4E:3F:85:F9:D1:51:FB:58:6E:8A:E2:1B:A1:3B
X509v3 Authority Key Identifier:
keyid:3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/F8E5F12E8CF411F1B2C13301CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.141.96.0/20
Signature Algorithm: sha256WithRSAEncryption
24:58:59:ce:56:74:f8:62:d2:36:04:fd:7f:0b:3b:72:17:96:
fc:65:c3:12:22:c6:2f:1d:70:1f:82:e3:ea:0c:7a:01:0e:10:
06:0c:4b:61:71:6c:42:bc:fa:7b:de:2c:ae:a0:5f:7e:80:55:
dd:00:a9:02:79:80:9b:70:8e:a8:98:7d:f6:89:b4:30:1b:14:
2a:8a:65:2c:53:d3:d4:c2:be:ff:0a:fe:c2:0d:ac:87:6e:91:
e2:7d:2e:fd:46:ba:e8:2f:c3:c4:76:a2:4d:f3:71:26:ce:ec:
11:8f:fb:ea:5f:a2:49:71:ce:e7:40:91:60:3b:b2:ad:f3:ec:
34:c5:3d:08:b7:2f:47:bc:e0:ac:ab:b9:80:a5:2f:52:12:51:
56:7e:56:24:bb:07:57:e7:3a:dd:98:39:40:9f:eb:25:57:dd:
f9:3f:9c:ce:75:a8:ec:cf:e3:94:1d:94:39:40:e8:b7:5a:86:
72:32:c0:3a:ef:fa:64:1a:2a:22:b9:a6:6e:20:6f:14:1a:a3:
19:23:a6:11:ce:f1:95:49:a6:7e:3e:d6:7b:e1:55:ae:97:77:
be:85:be:73:ec:cd:54:fa:3a:8e:6b:84:5f:ce:c2:0c:e0:75:
19:ba:53:8c:ff:8c:dd:dd:51:7b:ef:68:c3:e5:dd:bf:44:ec:
8f:86:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:12 2026 by rpki-client