Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/71A4280C7B0B11F18395E9CACE1D38B0.roa
File: 71A4280C7B0B11F18395E9CACE1D38B0.roa (raw, json)
Hash identifier: hX289QM9gmP7k7TIWsfxNk6zfdIqxgBnNjpDZMaDshU=
Subject key identifier: 36:02:20:7E:97:BD:7B:82:F7:FF:2E:5C:DF:D5:46:16:F4:B2:1B:77
Certificate issuer: /CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Certificate serial: 0793
Authority key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/71A4280C7B0B11F18395E9CACE1D38B0.roa
Signing time: Wed 08 Jul 2026 20:27:31 +0000
ROA not before: Wed 08 Jul 2026 20:27:26 +0000
ROA not after: Wed 31 Dec 2036 20:27:26 +0000
asID: 327750
IP address blocks: 102.212.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A0CB0AF, serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Validity
Not Before: Jul 8 20:27:26 2026 GMT
Not After : Dec 31 20:27:26 2036 GMT
Subject: CN=6a4eb2b3-414a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:46:b8:a7:89:e8:39:10:c6:9a:12:0b:d4:
f5:3f:ea:b3:a5:a4:9c:8f:46:c6:dc:f8:3a:e4:48:
4a:00:1b:ae:b5:6a:df:96:56:19:58:7a:2d:83:97:
93:dd:1b:0b:95:70:0a:e3:a5:d2:81:0f:d9:85:8e:
4b:09:42:b3:0c:83:86:ef:71:9e:90:c4:d5:e5:10:
0b:02:1d:fd:f3:75:91:39:e6:fd:6d:76:e8:cc:fe:
bd:d5:c2:1f:03:5d:34:c2:e1:76:7f:b8:4f:99:cb:
d2:9c:ea:af:2d:40:a3:2e:37:5e:0e:9d:70:97:46:
5e:16:0a:1b:68:37:3c:35:fd:e4:95:11:e4:89:d6:
8f:00:48:e8:e7:90:2a:2e:ae:da:f8:58:47:9f:74:
96:e9:fe:6f:6c:ba:19:27:39:e7:63:6a:a9:e5:7f:
17:4a:e9:c9:d2:c6:da:10:aa:50:1f:d3:66:c1:bd:
38:91:a8:40:6d:33:ef:22:0e:7c:47:44:42:44:d2:
bc:c0:52:8e:88:51:df:f8:81:db:db:b5:84:9b:b6:
f3:b2:94:1e:6a:38:65:dd:ed:bc:0b:3e:13:d1:0f:
39:7a:1f:81:62:c7:6a:84:fa:fc:06:ea:8e:cc:25:
76:1d:23:00:4a:22:26:23:d7:80:ee:99:8f:5f:d3:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:02:20:7E:97:BD:7B:82:F7:FF:2E:5C:DF:D5:46:16:F4:B2:1B:77
X509v3 Authority Key Identifier:
keyid:E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/71A4280C7B0B11F18395E9CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.200.0/22
Signature Algorithm: sha256WithRSAEncryption
29:5f:ec:44:70:50:bc:03:41:ac:0e:b3:72:f1:7d:fd:6f:94:
b7:8e:eb:9d:04:ec:d5:dc:17:7d:c2:d6:e9:88:e8:86:01:f6:
38:d6:52:35:23:32:0b:37:f5:0d:75:de:44:14:26:6e:98:be:
75:f9:c5:59:d1:76:0f:35:8c:d4:76:46:30:65:23:4f:f0:6f:
ed:03:9f:13:d8:80:d6:e0:be:cb:d1:1b:61:b0:5f:e1:03:5c:
19:e0:90:5e:71:d4:ac:15:a5:f0:ff:c6:c0:47:67:cd:d5:22:
33:1b:f2:0c:1d:40:fc:6c:ce:2e:55:a9:0d:d6:92:c0:50:8c:
d9:dc:1c:73:bd:a3:cb:de:e4:31:55:79:ff:cd:ba:ef:e6:c1:
01:3d:3f:39:3e:a8:b4:86:b8:af:25:b6:34:59:c2:a0:77:5f:
45:e5:9f:8b:da:de:3b:9e:87:c9:59:31:04:65:d5:96:75:f1:
b1:fb:02:f9:a2:d7:48:b2:97:1a:ef:c3:e8:f6:a9:96:4d:a3:
f1:a5:6a:51:38:7d:98:58:df:f6:5d:ce:1c:b4:c3:60:56:e6:
f5:ad:81:95:9c:f9:90:42:bc:32:5e:24:a8:33:2e:38:8b:6e:
fb:99:f2:0a:3f:b9:58:76:4e:1e:bf:78:f2:ce:55:d7:3f:78:
d1:92:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:05 2026 by rpki-client