Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/90BA37307E9511F18616461BCF1D38B0.roa
File: 90BA37307E9511F18616461BCF1D38B0.roa (raw, json)
Hash identifier: btSLQk35M0eg00qbMZmOf5fhYQeETCbjpRX5iY4495c=
Subject key identifier: 56:F0:44:0D:74:0E:6D:79:95:DC:D4:8E:7D:77:08:FD:05:93:AB:F8
Certificate issuer: /CN=F36BA3E3AF/serialNumber=AFAC0AB31A4066808F00919F1D828ED7B41AC26A
Certificate serial: 05B1
Authority key identifier: AF:AC:0A:B3:1A:40:66:80:8F:00:91:9F:1D:82:8E:D7:B4:1A:C2:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/90BA37307E9511F18616461BCF1D38B0.roa
Signing time: Mon 13 Jul 2026 08:33:47 +0000
ROA not before: Mon 13 Jul 2026 08:33:42 +0000
ROA not after: Fri 31 Dec 2049 08:33:42 +0000
asID: 327750
IP address blocks: 102.214.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.mft
rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA3E3AF, serialNumber=AFAC0AB31A4066808F00919F1D828ED7B41AC26A
Validity
Not Before: Jul 13 08:33:42 2026 GMT
Not After : Dec 31 08:33:42 2049 GMT
Subject: CN=6a54a2eb-7434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:8b:e7:64:e2:40:e3:b0:43:ec:7f:9f:09:
8b:dc:e4:96:d2:68:ff:90:91:5c:00:f0:78:74:e1:
93:a5:b6:7a:73:0f:99:74:44:82:91:13:04:0d:40:
38:cd:3a:07:8a:fc:df:b0:c7:33:75:df:a0:35:13:
cd:5e:e8:6d:ac:09:f5:85:74:a1:81:21:ee:79:ac:
19:05:9c:cf:5f:bb:e1:0d:44:9c:39:b9:86:3e:a2:
48:db:34:3d:dc:96:cc:21:c2:04:a9:83:93:01:b6:
0c:46:3d:c7:fd:2f:1a:37:38:fe:f1:ed:86:58:32:
54:f3:b7:04:ff:de:f2:f8:17:01:3b:b0:84:e6:87:
c7:53:2b:ce:ab:f7:74:77:c9:07:5e:ff:df:6b:77:
54:d6:18:1d:62:c4:c7:61:d9:47:fa:28:19:7c:3e:
61:70:1e:9d:be:c4:a2:54:65:b3:2b:af:5f:ba:6b:
d0:93:5e:5d:9e:bd:e8:e8:c9:70:b2:45:f0:39:b1:
c1:36:8a:6a:27:a9:36:58:44:b2:01:60:cc:27:09:
53:2b:50:0a:c4:f0:1a:8b:47:ca:e0:2b:3a:48:78:
a2:aa:a7:e4:19:8c:e7:96:b3:3f:c6:41:01:4e:5d:
f3:a7:98:8e:5f:00:a0:69:60:35:d9:1d:8c:9e:c7:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F0:44:0D:74:0E:6D:79:95:DC:D4:8E:7D:77:08:FD:05:93:AB:F8
X509v3 Authority Key Identifier:
keyid:AF:AC:0A:B3:1A:40:66:80:8F:00:91:9F:1D:82:8E:D7:B4:1A:C2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/90BA37307E9511F18616461BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.112.0/22
Signature Algorithm: sha256WithRSAEncryption
31:10:7f:e5:6c:39:99:c3:6a:7e:7f:10:c2:be:fd:91:3e:4f:
1e:d7:a3:c1:cb:bc:73:da:6d:67:32:ec:7f:88:b4:ae:b1:91:
39:f1:37:58:bf:41:4b:5d:e4:81:ab:35:92:fe:d5:ed:be:df:
56:65:10:98:59:26:21:1c:7e:5f:08:44:c2:fe:bd:90:33:e0:
04:0a:6a:80:40:84:90:5e:55:c0:43:ac:c5:61:80:32:f1:19:
a1:1a:19:08:e9:c9:99:c0:b8:6c:15:57:70:f0:05:77:86:66:
93:2f:ac:a5:39:ba:e0:4f:f1:2a:c2:7c:3e:90:b6:22:fb:ff:
ca:ba:8f:a2:e4:4a:c8:29:92:cd:65:ad:16:b4:fc:c1:40:86:
fc:6a:9a:e9:67:26:38:82:3c:13:82:f7:4f:8f:4f:c0:9e:52:
7b:65:0c:c4:e7:86:3e:62:d1:b1:c1:8d:50:ab:8a:db:1e:ef:
a4:7a:23:f3:a7:ae:4e:ad:14:25:7e:77:a4:05:c0:97:18:22:
ce:a1:43:4c:a4:37:6c:45:1b:13:55:c7:b0:95:cf:b4:24:b8:
17:7a:14:58:dc:d2:86:ea:5e:12:28:4c:8a:9c:07:86:92:97:
5c:97:cf:e1:d3:fd:1a:f6:15:76:16:ec:4c:51:e4:db:3e:e4:
19:84:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:31:44 2026 by rpki-client