Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/AB53FD206FDF11F1B08E87E6CE1D38B0.roa
File: AB53FD206FDF11F1B08E87E6CE1D38B0.roa (raw, json)
Hash identifier: 3qSRiPmyCXzBhWdhitVm9T1Z9vWBcEKL5i2kWihFTvA=
Subject key identifier: 16:F8:E8:CF:35:39:23:A8:5F:2A:90:88:13:A7:CF:8C:00:04:D9:67
Certificate issuer: /CN=F36BA40DAF/serialNumber=C2055FD9A99832065990718A851F566D600A5D8D
Certificate serial: 02
Authority key identifier: C2:05:5F:D9:A9:98:32:06:59:90:71:8A:85:1F:56:6D:60:0A:5D:8D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wgVf2amYMgZZkHGKhR9WbWAKXY0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/AB53FD206FDF11F1B08E87E6CE1D38B0.roa
Signing time: Wed 24 Jun 2026 15:16:27 +0000
ROA not before: Wed 24 Jun 2026 15:16:22 +0000
ROA not after: Tue 24 Jun 2031 15:16:22 +0000
asID: 329367
IP address blocks: 102.210.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.mft
rsync://rpki.afrinic.net/repository/afrinic/wgVf2amYMgZZkHGKhR9WbWAKXY0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA40DAF, serialNumber=C2055FD9A99832065990718A851F566D600A5D8D
Validity
Not Before: Jun 24 15:16:22 2026 GMT
Not After : Jun 24 15:16:22 2031 GMT
Subject: CN=6a3bf4cb-ef98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:69:81:d3:f0:6a:49:27:5c:35:09:af:0a:
bb:71:94:5e:6c:d9:4c:b8:59:67:cf:8e:34:fc:26:
71:3b:05:56:98:e6:2f:33:82:43:e6:63:14:d0:ca:
4b:39:af:1b:8e:6f:ca:a6:d6:36:ee:5a:a3:87:c0:
39:68:6a:4d:70:bd:38:82:b5:56:84:14:6c:2d:ef:
34:36:e2:da:06:8a:f5:47:df:35:78:33:25:3d:de:
ba:a5:6b:72:57:a2:d8:6d:44:25:fb:77:af:6e:6e:
f3:a4:0d:00:3e:ef:3b:d8:40:51:bd:4c:7c:56:3e:
06:7d:d0:43:e9:82:13:2d:c7:53:8f:40:5d:34:31:
4d:91:91:48:64:c5:5d:f3:4b:3b:92:7e:81:e2:bb:
a1:a5:a5:67:e1:80:82:9c:ee:49:79:e4:c7:e9:a3:
6c:f4:72:25:1f:9d:bb:76:f4:47:6a:f6:cc:71:97:
8a:cf:a0:b2:7e:f4:a4:14:f5:3b:f5:99:e9:7c:16:
61:fc:b6:2c:1b:3c:fe:7c:c1:45:6c:12:26:61:6e:
5d:ad:c8:64:8e:65:5a:b8:07:a2:78:7a:a8:d5:80:
5b:ec:b6:e9:f0:02:67:04:53:d8:18:25:c9:33:56:
5c:bc:30:d0:a6:f9:fa:4c:85:c7:d1:fd:07:6a:fd:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F8:E8:CF:35:39:23:A8:5F:2A:90:88:13:A7:CF:8C:00:04:D9:67
X509v3 Authority Key Identifier:
keyid:C2:05:5F:D9:A9:98:32:06:59:90:71:8A:85:1F:56:6D:60:0A:5D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wgVf2amYMgZZkHGKhR9WbWAKXY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/AB53FD206FDF11F1B08E87E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.152.0/22
Signature Algorithm: sha256WithRSAEncryption
59:59:55:15:a7:c3:06:9d:c8:2b:ad:33:98:41:9c:b9:8d:3b:
f2:ff:bb:b5:8c:99:e1:87:49:2e:18:e4:ae:92:f9:ba:8d:3a:
c4:e9:2b:02:36:20:de:77:0b:7b:3b:e8:27:ae:7c:de:3f:eb:
80:fa:fa:2e:d0:10:f3:48:35:ed:1d:8d:f6:d0:1a:cc:7f:cf:
0a:ab:3e:0c:3c:16:27:ff:cb:4c:83:12:4b:20:3f:09:fc:74:
1a:74:e5:e8:2f:c6:92:3e:97:1f:28:ec:75:8b:cb:78:96:fa:
df:53:17:31:1d:bf:8a:87:3b:0b:27:72:cd:65:7a:9e:a2:96:
29:1e:e1:4c:77:e0:bb:16:ce:01:3a:a4:74:5a:b7:49:f0:f7:
66:22:bf:97:c5:1c:2c:b7:29:fe:83:95:5a:7f:ba:8f:57:3a:
bf:56:fa:0d:fe:64:a0:b8:f9:f9:5a:c5:27:ae:10:c0:2b:ab:
57:66:e3:c6:be:ee:c4:53:ef:51:94:df:28:0f:19:4f:3d:78:
5f:0a:2b:5f:d8:73:c9:33:bf:1f:36:8b:eb:cb:64:f7:bb:31:
40:fc:33:b2:0b:34:70:5a:67:a9:01:33:70:6a:ff:a7:e9:b8:
0a:e0:f4:88:ef:e6:7c:13:24:c4:0b:80:38:56:8a:50:97:d2:
9d:ed:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:54 2026 by rpki-client