Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/BC7938E258D611F1B4FC68AFCE1D38B0.roa
File: BC7938E258D611F1B4FC68AFCE1D38B0.roa (raw, json)
Hash identifier: 7f8KI6rxDfxMqODzde75RMP2FvyjEgwgMeCyQOzN36g=
Subject key identifier: A6:C1:59:90:B6:16:54:38:B6:C9:82:5F:D1:13:33:DF:85:20:19:6F
Certificate issuer: /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial: 06E8
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/BC7938E258D611F1B4FC68AFCE1D38B0.roa
Signing time: Tue 26 May 2026 07:44:34 +0000
ROA not before: Tue 26 May 2026 07:44:29 +0000
ROA not after: Mon 26 May 2031 07:44:29 +0000
asID: 329474
IP address blocks: 102.212.173.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768 (0x6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F61A5AF, serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Validity
Not Before: May 26 07:44:29 2026 GMT
Not After : May 26 07:44:29 2031 GMT
Subject: CN=6a154f62-feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:e0:48:8a:c3:43:32:a4:e1:c1:60:e2:a3:
45:cb:46:ba:3d:a3:67:f0:b2:33:bd:2e:d0:a5:d8:
07:cf:59:29:25:e7:89:b8:f9:22:e1:d7:63:46:20:
88:6c:55:e8:5e:41:c4:77:15:37:9e:92:bf:4f:a4:
d1:22:cb:0a:8e:10:ef:db:d3:31:a1:9f:71:aa:44:
dc:bd:c8:ac:35:99:70:05:c2:7d:51:31:f8:d9:61:
82:61:aa:59:48:c7:07:2f:85:bb:9d:e9:d9:79:80:
73:10:a8:ae:88:0b:70:0e:57:35:21:e4:77:54:97:
b5:37:2d:c3:13:4c:7f:41:99:ce:50:54:54:00:b1:
2a:ed:42:d5:f0:d1:d0:d4:2c:8f:59:a3:3d:f1:d1:
ce:2c:d6:d6:8c:8d:22:2b:9b:2c:7f:ac:70:49:02:
08:b9:11:31:cd:fe:e6:9e:72:4b:84:9c:90:86:15:
f8:ab:4e:55:46:3a:02:5e:5d:dd:b2:6f:db:68:49:
10:c0:fb:0f:b5:21:93:39:fb:48:da:f1:15:c3:00:
aa:36:c5:45:ad:09:6e:6d:71:3f:93:d0:c9:49:d8:
d0:a7:76:f0:85:48:9a:6d:c7:4a:bd:84:f9:0d:99:
0b:a4:98:18:6f:85:9a:d4:cd:50:3c:6e:65:41:9a:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:59:90:B6:16:54:38:B6:C9:82:5F:D1:13:33:DF:85:20:19:6F
X509v3 Authority Key Identifier:
keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/BC7938E258D611F1B4FC68AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:39:a2:18:42:a9:a5:63:af:34:d0:18:4d:9a:b6:2a:a9:60:
09:8e:db:4d:10:b7:8b:c2:ff:66:da:02:ba:1c:98:89:74:ee:
85:b1:d0:76:c3:8f:6f:e2:1f:93:3c:78:77:07:a2:ce:68:7e:
f3:1d:3e:57:d0:ec:49:51:af:7d:9b:e7:57:ef:0b:65:76:b7:
39:7a:c6:10:6c:da:21:7d:d2:a6:b7:31:7a:fe:39:5c:64:b3:
da:6d:18:92:9f:be:a9:5c:82:31:48:66:c5:2d:76:82:79:d2:
de:e8:af:8b:ce:6a:c1:d4:af:d1:db:01:7e:7a:3f:29:e2:fc:
e5:11:3f:67:cd:ce:ad:2b:3a:2d:a3:8a:a1:1c:c0:7c:62:c1:
7e:18:b4:fb:6e:d2:92:bf:10:e0:47:b8:79:07:c9:77:3a:d4:
00:8e:b6:0f:e9:9c:65:86:bb:61:4a:18:d0:b9:7c:32:b8:5a:
03:c9:92:0b:af:f3:78:06:33:03:e7:da:83:09:06:83:30:4b:
13:27:43:04:80:75:08:16:1b:81:00:fd:56:44:bf:5a:e7:2b:
97:7c:0d:29:c9:2f:be:bd:f6:d3:91:20:0f:82:91:d8:6e:25:
39:85:f7:22:56:b1:c2:96:8b:79:9a:39:e9:50:81:66:36:a3:
f4:e8:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:44 2026 by rpki-client