Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/C1A5E32A873311F1818BD6E3CE1D38B0.roa
File: C1A5E32A873311F1818BD6E3CE1D38B0.roa (raw, json)
Hash identifier: MlaWz+iw8BJ1MUQeTJwhJ9d/vpySNP8qvYNISa9IMmY=
Subject key identifier: C4:5B:FC:E3:AB:08:EA:61:0E:69:30:89:C0:B0:C3:61:2E:D8:A4:31
Certificate issuer: /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial: 0717
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/C1A5E32A873311F1818BD6E3CE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:46:19 +0000
ROA not before: Fri 24 Jul 2026 07:46:15 +0000
ROA not after: Fri 24 Oct 2036 07:46:15 +0000
asID: 36924
IP address blocks: 102.218.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815 (0x717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Validity
Not Before: Jul 24 07:46:15 2026 GMT
Not After : Oct 24 07:46:15 2036 GMT
Subject: CN=6a63184b-770e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:f6:ff:30:b1:d6:70:15:f1:5f:18:8b:ce:
b0:5b:09:89:b8:24:cf:73:30:e0:d0:ec:6b:75:ea:
8c:68:21:43:dd:60:32:ff:81:6f:20:b7:35:4f:7e:
53:5d:2d:b2:93:56:a3:b1:ab:3c:f5:b5:07:1e:73:
96:fc:85:6e:a2:14:46:95:b3:c7:56:62:bc:f3:f4:
dc:df:20:0c:a4:b2:9f:9d:f8:a5:ad:20:94:6f:b7:
97:3b:b0:59:96:8b:3e:00:14:f9:d1:8a:d5:fd:22:
40:c4:fe:08:02:8c:dc:9d:0d:b4:c8:05:3a:f2:04:
f6:30:92:a2:71:7d:94:fe:e2:d2:a4:39:dd:6a:60:
ae:58:7e:51:ef:98:53:2d:72:b3:15:82:4b:b6:87:
8f:79:1a:79:52:e3:e8:c7:bb:13:51:fb:c2:51:3a:
f5:d5:66:ad:c3:f4:a1:7e:3d:7e:36:53:d1:26:23:
db:a0:17:14:ca:85:11:62:45:48:ad:03:c0:62:2b:
06:8c:22:b1:2e:d1:63:c9:0c:07:76:f9:17:34:26:
6c:bb:27:41:b4:43:4e:28:8e:19:73:89:fc:30:aa:
bf:61:b3:8b:98:66:aa:05:fa:ec:0d:99:5e:7a:dc:
89:1e:fb:63:35:b8:1d:fa:25:ad:20:c2:e1:34:51:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:FC:E3:AB:08:EA:61:0E:69:30:89:C0:B0:C3:61:2E:D8:A4:31
X509v3 Authority Key Identifier:
keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/C1A5E32A873311F1818BD6E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.108.0/22
Signature Algorithm: sha256WithRSAEncryption
72:db:1e:07:20:eb:5e:69:f8:8f:12:27:f5:5c:cb:f7:2c:f3:
b6:ca:f6:0b:61:5d:4a:a8:ca:12:7c:bc:20:ac:79:a6:86:30:
7d:11:be:21:5b:b7:38:64:14:e1:32:61:97:7b:ff:eb:66:06:
6f:d5:b3:5b:c1:e4:fb:d0:b6:67:8d:8b:35:ca:dc:be:4c:0f:
4f:bc:6e:2d:7a:6a:f7:74:87:52:21:43:90:55:e5:08:8b:a2:
4f:31:df:58:9f:ff:26:95:9d:77:90:77:2a:2a:ea:dc:42:6a:
f8:0f:7c:6d:66:93:69:09:dc:86:e6:91:38:69:2f:f7:4d:52:
f7:04:af:e6:ff:70:5e:c5:c2:17:73:82:67:d9:dc:e4:94:58:
7e:30:35:14:6a:4a:f9:b3:4f:61:64:a4:cc:19:9d:50:f5:30:
1f:a3:8e:e6:49:ac:db:d0:bf:dd:52:9d:fc:4f:a3:0c:fb:84:
3c:e0:e1:01:c4:8f:32:5d:e7:26:49:13:f2:15:25:08:5b:d2:
00:01:25:da:aa:3c:15:0b:3b:7f:90:f6:70:cc:c9:db:8f:a8:
1d:b0:5e:cb:3d:59:42:69:d6:f6:2e:ac:fb:c0:d2:17:36:bc:
39:ff:9c:34:21:6c:1b:63:5c:1b:54:32:a3:c2:7b:fc:c9:77:
42:10:a6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:02:47 2026 by rpki-client