Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/45D717A07B0811F1A193D0B6CE1D38B0.roa
File: 45D717A07B0811F1A193D0B6CE1D38B0.roa (raw, json)
Hash identifier: PgXaAXoHAwUJ4XhaIzjPD4VbiBjFRll+UqTQ6hEV2SQ=
Subject key identifier: BB:27:11:4C:09:DD:FF:FA:0E:A5:AF:78:AE:0B:7B:EC:D3:9C:1D:54
Certificate issuer: /CN=F36AA6EDAF/serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E
Certificate serial: 078B
Authority key identifier: 27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/45D717A07B0811F1A193D0B6CE1D38B0.roa
Signing time: Wed 08 Jul 2026 20:04:49 +0000
ROA not before: Wed 08 Jul 2026 20:04:42 +0000
ROA not after: Wed 31 Dec 2036 20:04:42 +0000
asID: 327750
IP address blocks: 102.208.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1931 (0x78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA6EDAF, serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E
Validity
Not Before: Jul 8 20:04:42 2026 GMT
Not After : Dec 31 20:04:42 2036 GMT
Subject: CN=6a4ead61-b988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:52:2d:2c:18:f6:73:df:be:40:0f:58:ed:
76:0d:11:f7:ba:61:e2:ab:dd:02:26:36:c4:51:0b:
68:f3:57:f8:f8:26:27:c3:f5:e4:bc:5f:ff:76:9f:
19:90:f9:c3:4f:54:27:88:f3:ca:4e:6f:db:b0:71:
97:c3:d3:3d:02:0c:14:c4:03:9e:83:77:58:24:0e:
8a:4a:26:b7:6b:e4:00:88:ae:f1:b1:0a:a4:80:bf:
7e:2f:17:d5:ba:ef:ee:28:8a:e7:0b:4b:27:19:1d:
fd:7e:b8:a6:ab:84:6a:c7:fd:e3:2d:35:70:be:1f:
81:5b:ad:0c:e2:62:e6:c9:db:81:52:26:c2:42:3b:
3f:c9:74:d0:7d:a1:b5:41:a6:79:0b:01:50:2a:97:
1b:30:96:76:9b:98:98:59:d2:59:cc:59:ad:25:23:
7e:dc:4e:ae:2b:09:c1:32:fc:2d:33:c6:3e:04:91:
bf:9d:33:dd:56:82:f4:f9:2e:a5:15:2d:24:87:11:
51:ee:d1:b3:62:23:37:b3:87:9b:4c:5a:a0:28:ea:
00:68:fb:e1:37:c6:ff:cd:f2:57:19:34:f1:cd:54:
68:3a:63:16:45:db:53:31:ab:0d:90:65:93:74:bc:
bc:9a:ed:00:24:f3:c2:7c:c0:fa:42:81:67:a7:4b:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:27:11:4C:09:DD:FF:FA:0E:A5:AF:78:AE:0B:7B:EC:D3:9C:1D:54
X509v3 Authority Key Identifier:
keyid:27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/45D717A07B0811F1A193D0B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.192.0/22
Signature Algorithm: sha256WithRSAEncryption
13:ae:63:fa:b8:41:e4:82:8a:dd:b7:de:41:d5:c8:60:de:69:
6a:fe:70:a7:e1:cd:d8:7a:62:e7:59:c7:96:06:c5:46:85:63:
b8:15:a9:b4:90:bd:0d:2b:9d:be:76:48:c0:5c:a2:71:9d:a6:
5e:1b:33:8f:38:36:5f:72:d5:99:04:c7:e7:be:81:a4:43:1b:
1f:86:71:b7:0c:27:39:a2:ce:70:8d:b9:6f:19:c2:48:16:32:
fb:8d:23:40:91:0d:34:b5:c3:40:90:87:2c:bf:8a:bd:d8:c1:
95:38:cf:4b:50:7e:97:8a:2d:ab:9d:bf:f8:4c:38:e7:66:2c:
0f:e0:01:be:7e:9d:ec:bd:77:75:2e:35:f2:84:51:8f:06:ab:
ec:e2:05:38:20:fb:25:c5:b9:18:75:33:79:60:43:62:1a:53:
00:f6:a1:02:8a:e2:da:6c:e8:37:7d:7e:50:2d:5e:3b:be:ba:
83:a1:98:6f:d6:16:7f:69:6a:7e:78:d9:c0:c7:e8:8c:5d:49:
4f:6c:32:7d:7d:e6:10:e8:63:48:23:db:86:98:93:b1:29:0a:
26:80:2b:75:ec:3b:1d:8c:3c:9a:21:46:31:17:03:1a:d4:5d:
65:e6:1c:ad:f5:13:4f:d7:08:ed:7d:ad:2e:0a:14:4f:4e:dd:
59:05:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:13 2026 by rpki-client