Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/7FB4111E8CB311F18FC78AFBCE1D38B0.roa
File: 7FB4111E8CB311F18FC78AFBCE1D38B0.roa (raw, json)
Hash identifier: 8DKgpF5SvEAtkbERqt5mx3oF0cxb8U2x+UH3e8W6HI0=
Subject key identifier: F4:46:51:46:A4:D9:6E:A5:53:1E:75:78:12:ED:E0:2D:2F:A0:94:28
Certificate issuer: /CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
Certificate serial: 05C6
Authority key identifier: 68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/7FB4111E8CB311F18FC78AFBCE1D38B0.roa
Signing time: Fri 31 Jul 2026 07:43:20 +0000
ROA not before: Fri 31 Jul 2026 07:43:16 +0000
ROA not after: Thu 31 Jul 2036 07:43:16 +0000
asID: 329011
IP address blocks: 102.216.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478 (0x5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0522AF, serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
Validity
Not Before: Jul 31 07:43:16 2026 GMT
Not After : Jul 31 07:43:16 2036 GMT
Subject: CN=6a6c5218-6106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:e4:2d:88:a9:fe:b1:12:95:52:af:2a:99:
9b:1a:65:fa:e8:c6:c1:1d:4c:86:5c:d3:cf:d2:5c:
5f:1b:97:ac:ca:11:5d:46:4d:73:f3:a3:ed:a1:b5:
71:2f:54:3b:fc:90:a4:8c:3f:33:0d:4e:75:bc:23:
9e:3a:5f:49:53:b7:cf:1a:f1:ff:ea:7a:a3:48:bf:
a1:95:a2:b8:67:10:b2:2f:a1:9e:d0:58:00:01:02:
72:11:57:7c:38:14:aa:9f:0e:ce:ef:3b:f6:33:7a:
94:65:b2:86:68:86:a9:ee:8a:5a:6a:8b:e3:d4:05:
e9:f0:86:5c:ae:ef:d8:a2:16:70:d6:e7:7f:0b:5f:
da:26:94:bc:21:3b:c1:ae:eb:c9:77:d8:4f:47:2f:
27:fc:20:4c:0c:95:0d:a6:91:19:41:5a:00:26:6d:
48:41:eb:7a:2d:83:5d:6b:61:34:53:37:5f:b8:c5:
5a:05:02:bf:7f:d1:2c:c1:63:b5:ee:40:09:7d:a5:
fb:16:85:3f:58:6a:36:73:d8:ed:53:0b:f0:0c:47:
25:74:63:88:9a:5e:56:62:79:1d:7f:87:28:6f:e2:
48:a7:c3:30:69:8c:f3:70:1e:f3:bd:2d:75:ab:05:
91:cf:fb:3a:f6:95:ad:6e:17:28:27:83:ab:23:8c:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:51:46:A4:D9:6E:A5:53:1E:75:78:12:ED:E0:2D:2F:A0:94:28
X509v3 Authority Key Identifier:
keyid:68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/7FB4111E8CB311F18FC78AFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:41:2e:67:e1:61:c4:e9:72:8d:ef:31:6c:14:da:8b:08:13:
70:6f:72:ea:74:62:e3:23:d2:39:3c:34:49:24:db:5c:9b:d3:
a6:ea:58:ae:c5:98:7a:d6:0d:39:b1:da:f9:1a:d5:61:6a:48:
d1:8e:9f:9d:8b:00:40:c1:fa:a5:c5:7f:e1:65:e8:1a:72:90:
c0:41:e0:72:d3:c7:bd:a7:23:5f:59:5f:82:0d:fe:7a:54:20:
15:7b:38:eb:75:8f:96:5a:cd:74:c9:1e:cb:53:68:e7:23:72:
8b:80:0f:7e:62:f9:68:16:0a:28:0f:29:fb:04:14:f3:e6:64:
c0:7b:0a:f5:b3:ad:1b:77:93:d3:04:fe:ed:c9:27:06:7e:ba:
32:a7:7c:69:4c:47:6b:93:6d:15:69:ca:ec:cd:91:63:2c:0a:
a2:68:bd:e8:4f:85:99:6e:0a:9a:76:3d:6b:32:65:8b:a7:bb:
8d:84:b4:60:f7:f6:a5:d3:c8:d1:a8:76:82:06:56:94:f3:e9:
ca:b8:2d:17:45:fc:27:e8:cf:d5:de:c8:36:6d:7d:a4:fb:2d:
48:5b:ae:53:1f:ad:bc:ae:82:ba:91:0f:90:ca:7a:38:a9:ea:
a9:77:b7:2f:b5:aa:5c:61:b5:69:dd:15:d2:b6:cf:a9:14:5b:
a8:d3:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:35:53 2026 by rpki-client