Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/05AA50A47B0B11F189AE00C7CE1D38B0.roa
File: 05AA50A47B0B11F189AE00C7CE1D38B0.roa (raw, json)
Hash identifier: y1OUPqhtr8x46vl5qQeuQVcGSNDFIWY5wQSw/hbLWIk=
Subject key identifier: 38:15:2C:E5:F4:3C:A7:A6:1E:78:9C:49:96:11:BF:CE:69:62:AC:FD
Certificate issuer: /CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Certificate serial: 0791
Authority key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/05AA50A47B0B11F189AE00C7CE1D38B0.roa
Signing time: Wed 08 Jul 2026 20:24:30 +0000
ROA not before: Wed 08 Jul 2026 20:24:25 +0000
ROA not after: Wed 31 Dec 2036 20:24:25 +0000
asID: 327750
IP address blocks: 102.215.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A0CB0AF, serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Validity
Not Before: Jul 8 20:24:25 2026 GMT
Not After : Dec 31 20:24:25 2036 GMT
Subject: CN=6a4eb1fe-2265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:7f:79:59:1c:7c:0b:60:3e:ce:83:28:e9:
d3:56:5a:63:9f:63:f3:48:9d:a0:98:cd:bd:c2:da:
07:72:66:90:1a:7d:47:26:6a:b3:a5:65:80:b1:db:
42:9e:4a:27:18:4e:e9:89:bd:5f:9f:31:cd:5b:48:
29:32:81:2c:bf:4c:c6:0d:51:99:1b:40:21:64:f4:
ea:43:ad:37:a4:85:ee:21:bd:1e:66:f5:5b:f8:5f:
3a:8b:11:83:96:3a:bc:11:cd:89:cd:b5:a4:7e:19:
fc:5c:50:8a:11:9f:0a:58:33:be:ab:89:9e:d6:aa:
01:2d:0f:29:66:c4:4a:42:2f:c9:86:a2:f4:ac:aa:
c4:c7:63:15:47:f7:23:a0:cf:7d:22:b4:3c:c1:22:
3e:79:27:f7:63:04:a6:e4:26:cb:3b:84:3a:48:3d:
61:ba:9b:5a:17:06:ea:1f:26:53:f7:6d:ca:f6:e7:
c2:b5:a6:8f:72:45:fb:ab:db:64:59:c1:6d:a3:d2:
e7:3b:6a:b4:ce:72:22:ef:bf:b1:bb:d4:ea:db:88:
bc:16:c2:d4:21:44:13:6b:a6:7b:85:22:97:12:c0:
d2:cb:6d:3a:7d:e1:95:ff:4a:8b:f4:cd:4b:95:03:
76:6c:69:80:be:6d:20:18:2b:77:9e:b3:50:fe:4e:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:2C:E5:F4:3C:A7:A6:1E:78:9C:49:96:11:BF:CE:69:62:AC:FD
X509v3 Authority Key Identifier:
keyid:E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/05AA50A47B0B11F189AE00C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.24.0/22
Signature Algorithm: sha256WithRSAEncryption
14:58:36:a5:28:e5:af:d4:c4:c0:65:62:77:5c:6a:dd:ce:fa:
e6:e2:e0:48:b5:6d:1c:6b:76:e0:aa:dd:35:ed:73:3e:5f:57:
ef:b9:8c:c9:ec:52:69:b4:33:77:47:10:ac:81:4d:95:1d:f7:
23:bc:c8:f2:59:88:74:b3:26:5e:38:52:85:24:42:f2:c5:20:
cb:a9:5b:b0:d2:f4:e7:e2:69:9f:c9:dd:4f:90:5a:ef:10:55:
69:70:de:21:c7:d9:1e:0b:e3:02:01:62:6f:9c:1d:a1:00:46:
27:af:63:20:21:3c:65:09:75:b4:e7:8f:be:18:ae:55:08:db:
1e:a4:b7:c7:a2:fa:47:4d:ce:80:65:96:ff:a3:07:fd:04:df:
59:cf:83:95:25:cd:0e:f8:2f:63:19:73:f6:32:0b:a0:59:f2:
10:38:aa:b4:7d:74:b6:1d:5c:13:e8:1c:28:05:04:3b:d9:fe:
0e:0c:33:ec:da:bc:c3:f2:b1:84:c6:0c:41:ba:3b:c6:f1:09:
1f:65:b4:08:b6:90:7a:09:78:7b:92:48:a9:0e:93:c4:23:b8:
ea:0e:3c:be:97:2b:23:21:b6:9b:66:47:e4:c5:8b:c5:7e:72:
9a:b8:71:e9:92:18:c1:cb:1a:80:46:3a:06:7f:06:fa:05:66:
ac:9a:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:58 2026 by rpki-client