Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8C9F2A808E9D11F1A60ABA16CF1D38B0.roa
File: 8C9F2A808E9D11F1A60ABA16CF1D38B0.roa (raw, json)
Hash identifier: GoxYnYQ1omHYHNL+tTxSSvg7KFFaR/KrFcu8fw1FAnU=
Subject key identifier: 0F:59:34:4D:3E:0E:90:6C:07:98:2B:65:22:FC:5E:95:02:86:E9:EC
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 0574
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8C9F2A808E9D11F1A60ABA16CF1D38B0.roa
Signing time: Sun 02 Aug 2026 18:11:15 +0000
ROA not before: Sun 02 Aug 2026 18:11:11 +0000
ROA not after: Fri 02 Aug 2030 18:11:11 +0000
asID: 834
IP address blocks: 102.211.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Aug 2026 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Aug 2 18:11:11 2026 GMT
Not After : Aug 2 18:11:11 2030 GMT
Subject: CN=6a6f8843-4528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:20:48:9d:36:bf:ec:79:d3:c2:25:be:d1:
2b:25:6f:b4:fd:b6:1b:a3:49:9e:b4:84:f5:6a:eb:
d0:3a:9d:cf:87:59:f0:a7:83:0d:63:68:cc:ba:91:
f2:b8:e1:0c:5b:78:a7:22:7f:79:70:47:85:06:9c:
0e:6b:cd:6c:ad:c9:37:5c:cf:9f:67:03:ea:a7:f5:
4d:aa:f0:b8:4d:63:59:2f:5a:ec:ed:32:07:05:6d:
57:d8:c5:bc:d5:6f:ed:9f:85:88:59:e1:5a:eb:7c:
74:c4:4f:90:a2:76:c0:27:b9:9c:d6:bf:8c:8e:33:
4c:13:21:1d:e2:b8:8c:d7:c0:91:8a:4e:fb:1b:ae:
6c:d0:9a:7e:81:39:9c:e9:7a:34:5f:1f:36:d9:b2:
e4:63:b7:8d:b6:c9:27:a0:73:6d:ef:45:63:1d:49:
f5:cd:4c:6d:35:d3:7b:60:e0:6b:4c:07:94:69:e7:
ec:6e:5c:03:c5:08:60:a2:f1:90:6c:be:af:f6:41:
10:e3:a9:b6:34:de:e0:a8:65:fc:7a:c4:02:d4:15:
13:cc:9f:4e:91:ad:6d:4c:35:41:40:01:5f:1f:fe:
25:91:de:6f:b9:c4:ae:3c:09:99:3a:30:be:b3:ec:
7c:85:7b:27:32:bb:93:de:9a:c8:69:f5:8b:bf:19:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:59:34:4D:3E:0E:90:6C:07:98:2B:65:22:FC:5E:95:02:86:E9:EC
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8C9F2A808E9D11F1A60ABA16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1d:68:30:5f:12:ec:55:3d:cd:40:b5:7f:c6:b9:c4:15:27:
c7:bf:95:35:d3:14:65:40:f9:b3:ae:31:20:4c:63:21:ac:bf:
94:e7:bd:06:03:27:9c:3a:cf:c3:21:33:23:a8:10:f3:26:2b:
71:43:b7:af:45:01:04:23:92:7d:47:f8:ff:6f:7f:9f:6e:b5:
68:9d:23:66:fe:c6:95:27:35:4f:db:91:6c:41:f2:b4:92:7d:
d3:20:1a:b2:f6:cd:19:a4:13:7c:be:f6:06:a3:99:fb:5a:6f:
60:43:62:24:de:67:7d:3a:ce:5b:02:a8:2a:84:f0:0b:d4:ac:
14:e8:63:be:91:15:d7:dc:ba:16:4a:71:cf:be:6f:db:ee:e3:
94:ad:48:2a:b4:c7:90:2d:41:45:4c:9c:3f:2b:9c:63:50:eb:
c0:57:ba:67:81:43:92:fb:0e:04:39:8e:4b:e1:e5:5b:29:fc:
9e:21:76:8b:6c:56:e6:89:a7:e2:cd:c6:2c:d7:e6:61:14:18:
8a:45:93:cd:17:65:a8:54:9f:5a:44:79:73:89:3d:1f:f2:47:
72:61:8f:75:a2:6a:63:a3:31:de:89:35:43:3f:9f:05:f6:06:
09:43:0e:f3:1f:9b:40:b5:ad:2e:5b:e2:89:a0:f6:9c:64:2d:
3b:20:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:04 2026 by rpki-client