Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/B263604E7B9011F18B89CAB7CE1D38B0.roa
File: B263604E7B9011F18B89CAB7CE1D38B0.roa (raw, json)
Hash identifier: agshf4kc1QeGwzwdxAbbchgJDxavR9643QWxtUo7IzQ=
Subject key identifier: D9:08:38:A2:FB:89:2B:07:3F:4B:B5:BA:DB:9A:F4:26:AC:4B:72:86
Certificate issuer: /CN=F36BB70AAF/serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
Certificate serial: 14
Authority key identifier: 68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/B263604E7B9011F18B89CAB7CE1D38B0.roa
Signing time: Thu 09 Jul 2026 12:21:23 +0000
ROA not before: Thu 09 Jul 2026 12:21:18 +0000
ROA not after: Thu 31 Jul 2036 12:21:18 +0000
asID: 329311
IP address blocks: 102.211.112.0/23 maxlen: 23
102.211.112.0/24 maxlen: 24
102.211.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BB70AAF, serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
Validity
Not Before: Jul 9 12:21:18 2026 GMT
Not After : Jul 31 12:21:18 2036 GMT
Subject: CN=6a4f9243-5c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:d7:cc:bc:ca:fb:b4:43:e2:cf:87:c5:38:
58:6d:ab:5c:b2:81:b7:a0:34:8c:47:29:b9:dd:a5:
56:1d:d5:f4:b2:57:e8:3f:de:1c:3d:85:78:2d:1b:
42:1b:5f:01:46:38:ac:be:8b:34:1e:cc:60:8d:97:
89:d7:79:e1:fe:23:2d:46:4b:ff:1e:df:48:c2:26:
12:0e:4f:37:77:4d:a9:bc:2a:c5:90:4b:71:d1:d4:
04:d7:3e:de:88:d7:c0:d6:89:e6:83:9c:76:93:1e:
35:35:12:ed:80:a0:34:0e:c8:24:1c:0e:32:1d:a5:
da:dc:95:f4:0a:a7:71:37:c7:4b:a5:03:87:99:f6:
f0:aa:60:a1:71:50:0a:80:09:71:ae:a4:91:2b:59:
22:14:9b:18:ff:12:32:6b:bd:b5:93:a8:c0:79:ee:
ea:59:db:db:f4:1b:f0:45:49:88:d6:78:81:04:dc:
a9:5f:ae:4d:b6:fd:34:63:e3:85:3a:6e:d7:3a:07:
14:f3:e4:b6:60:11:56:bf:7c:f7:2e:9a:f5:93:5e:
ee:a6:93:b3:b8:fe:06:26:bb:c4:7b:0c:1c:de:7f:
24:17:0b:07:f0:86:da:1b:fe:4d:8d:36:29:ec:8c:
89:1a:5d:84:1c:66:70:93:9c:34:0c:b2:dd:45:fe:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:08:38:A2:FB:89:2B:07:3F:4B:B5:BA:DB:9A:F4:26:AC:4B:72:86
X509v3 Authority Key Identifier:
keyid:68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/B263604E7B9011F18B89CAB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:7f:b5:73:57:8f:b0:13:24:e4:0c:b6:60:78:f8:0c:08:57:
c9:2d:f3:34:44:0f:cc:d1:9e:bb:01:69:98:f7:dc:6e:d2:27:
f0:4a:a0:b8:10:1a:25:01:ed:92:67:2b:22:1b:cb:62:30:f8:
0b:ce:3f:22:e6:d4:04:7a:08:2c:83:a4:bd:c5:cf:3c:89:b7:
54:35:04:56:de:70:5c:32:f1:88:95:a3:d4:3b:f2:bb:91:52:
70:05:fb:a7:4c:79:08:0f:46:58:b9:77:a2:0c:95:82:04:80:
cd:64:2f:c1:33:c5:23:5e:b8:c8:06:30:15:3b:e1:3f:8b:8d:
87:11:e1:f1:2a:bb:3f:24:0f:55:a8:84:f0:bc:7a:cd:97:07:
4f:9b:55:6f:91:f2:17:59:7b:fa:4d:51:e4:6a:ca:c8:90:f6:
e8:6e:06:af:27:5e:cb:71:66:50:92:36:c7:9b:56:e5:2c:84:
a9:c6:fc:0e:ee:d9:66:6d:a1:ad:ec:41:50:bc:46:fd:ed:5b:
05:01:0c:fe:d6:02:fe:d1:21:c0:1e:fa:61:b8:8c:d4:3b:8d:
b5:ac:1b:01:26:a0:17:0a:d0:b2:4c:c8:8c:ea:ea:33:e7:c8:
12:86:73:72:ea:5f:50:1d:1e:4a:9d:33:97:c0:94:15:5a:a2:
c7:99:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:47 2026 by rpki-client