Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/FBF0283286A811F1871D040BCF1D38B0.roa
File: FBF0283286A811F1871D040BCF1D38B0.roa (raw, json)
Hash identifier: 2FBTQBQRVOAKiMndfVY7/NrVMdtXLrPvmiDcnOnFy7Y=
Subject key identifier: C8:69:2F:B2:9E:9B:37:2E:48:08:E7:06:CE:C0:1F:48:D3:D1:82:2D
Certificate issuer: /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial: 0235
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/FBF0283286A811F1871D040BCF1D38B0.roa
Signing time: Thu 23 Jul 2026 15:12:57 +0000
ROA not before: Thu 23 Jul 2026 15:12:53 +0000
ROA not after: Mon 31 Jul 2028 15:12:53 +0000
asID: 5511
IP address blocks: 102.210.60.0/24 maxlen: 24
102.210.61.0/24 maxlen: 24
102.210.62.0/24 maxlen: 24
102.210.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 15:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Validity
Not Before: Jul 23 15:12:53 2026 GMT
Not After : Jul 31 15:12:53 2028 GMT
Subject: CN=6a622f79-0905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:cc:ac:f5:c1:c9:d1:01:fe:db:37:b8:2f:
25:da:e0:e8:9e:b1:14:12:37:0b:fa:9c:d3:9b:af:
fd:17:71:c0:49:cf:99:53:c2:ab:09:36:fe:a8:1a:
f3:25:fc:2b:18:48:f8:0a:69:04:23:30:5f:0f:1f:
ac:04:f9:2e:48:ad:a3:df:ef:c3:30:59:7f:b3:e4:
3c:91:71:6c:85:84:4c:df:64:33:2b:0a:c3:1b:e4:
42:51:4a:5e:dc:e2:88:44:be:36:6b:0d:6e:6c:76:
f6:2c:62:c1:29:be:93:3f:ac:91:dd:f1:c5:e9:16:
3b:74:ca:4a:5d:54:43:1f:bd:24:50:1c:94:93:da:
99:66:2d:e7:28:1c:a8:2a:97:fd:8e:fa:04:fd:b8:
8d:a1:55:6e:26:e2:ca:f8:b9:ff:59:63:51:8e:e0:
c3:db:c7:c9:b1:c9:5c:99:38:5d:31:61:23:98:5f:
c1:fc:04:5d:c4:04:71:5d:59:6f:11:d9:49:98:77:
4c:8a:13:c7:84:56:e7:26:70:17:c1:c7:33:72:72:
e5:09:c5:e9:30:f3:1e:1a:7b:0c:4c:e3:28:7c:29:
2a:97:b0:b4:d7:21:ae:c0:fe:bb:d8:16:f1:30:ed:
91:d3:a6:95:f3:be:8d:c2:85:91:83:f2:7b:81:1e:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:2F:B2:9E:9B:37:2E:48:08:E7:06:CE:C0:1F:48:D3:D1:82:2D
X509v3 Authority Key Identifier:
keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/FBF0283286A811F1871D040BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.60.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:be:4d:7c:f5:3d:40:29:36:50:5a:10:cc:b1:f4:59:3f:19:
cb:8a:51:ef:a6:be:bc:ba:b1:19:65:8c:20:99:fd:7e:1f:f3:
c7:93:91:5f:18:dd:fc:f4:d2:73:9b:fe:5b:35:d2:6c:1c:bf:
c2:2d:44:df:0d:67:e5:98:61:1e:ac:95:a3:76:c7:96:6e:f7:
1b:6f:14:55:ac:41:d3:52:95:52:35:43:ae:8f:85:af:08:29:
85:f1:65:25:52:af:f5:2c:19:d9:56:59:9c:66:a9:1e:9f:fe:
fe:af:9e:17:ef:42:20:3c:f3:98:62:31:87:96:a7:c5:62:88:
cb:3d:23:90:92:a8:d8:ab:a7:24:88:ba:3f:2f:6c:5c:2a:af:
bd:d4:70:6c:e7:d5:19:b6:ae:d8:b8:e3:4b:54:a9:5f:0d:a7:
4b:89:ac:87:e9:d8:fb:3b:13:10:44:90:f1:69:c3:9d:3a:43:
3c:f4:e0:12:31:74:54:a8:b6:00:be:0d:0f:77:1b:7c:85:6f:
b0:b5:16:ef:ec:28:2c:2e:96:73:ad:74:8e:1f:ce:66:06:8a:
37:f7:2a:18:23:41:cc:e7:aa:22:dd:bc:9a:d6:f8:d7:a8:57:
50:a4:a8:91:4b:f8:a4:e1:86:fb:08:a6:12:c2:84:9c:9d:7e:
bd:5b:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:48:46 2026 by rpki-client