Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/ED2048C6748A11F1996AF7CFCE1D38B0.roa
File: ED2048C6748A11F1996AF7CFCE1D38B0.roa (raw, json)
Hash identifier: XHzjG9WZBS9B1G67SDvbgwEXROLuYT7arslMt8w5z7Y=
Subject key identifier: 64:48:30:18:10:28:7E:B4:B3:DD:EC:5C:38:F4:6D:C4:64:A7:DC:92
Certificate issuer: /CN=F36CA008AF/serialNumber=6B0CD6C4ED71E0E9B16F68E977ABB51DCA2E7244
Certificate serial: 02
Authority key identifier: 6B:0C:D6:C4:ED:71:E0:E9:B1:6F:68:E9:77:AB:B5:1D:CA:2E:72:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/awzWxO1x4Omxb2jpd6u1HcouckQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/ED2048C6748A11F1996AF7CFCE1D38B0.roa
Signing time: Tue 30 Jun 2026 13:52:26 +0000
ROA not before: Tue 30 Jun 2026 13:52:21 +0000
ROA not after: Mon 30 Jun 2036 13:52:21 +0000
asID: 329452
IP address blocks: 102.208.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft
rsync://rpki.afrinic.net/repository/afrinic/awzWxO1x4Omxb2jpd6u1HcouckQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA008AF, serialNumber=6B0CD6C4ED71E0E9B16F68E977ABB51DCA2E7244
Validity
Not Before: Jun 30 13:52:21 2026 GMT
Not After : Jun 30 13:52:21 2036 GMT
Subject: CN=6a43ca1a-a7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:ae:01:3e:bc:50:b0:3e:a0:4f:fa:96:be:
a4:44:80:31:48:fc:eb:52:9a:27:4f:cc:e5:27:97:
2b:13:32:c1:f6:4a:a9:bb:50:6b:d1:e3:06:af:2b:
8c:b1:de:4b:bc:70:61:f7:ea:ad:f8:0c:b4:c4:66:
31:90:4d:96:45:5e:ab:62:68:79:d6:e5:54:75:ef:
12:69:66:63:3a:2f:a1:7b:18:e5:6f:de:40:33:2b:
a2:52:54:10:99:08:1d:0e:f7:35:62:2d:e3:75:65:
6a:74:f3:0d:70:12:79:0e:1f:5c:8d:f1:26:8c:34:
ec:94:f2:03:2e:b0:d5:a6:b1:e4:c7:03:05:f5:f8:
a9:45:c7:02:38:aa:09:7c:04:10:ee:98:6d:36:39:
67:3c:f5:06:13:87:c5:d6:44:4f:ac:83:52:d1:4a:
66:76:81:51:bf:4e:07:80:ff:73:58:bf:c2:12:13:
07:74:ef:28:23:e3:88:1b:0d:71:45:f2:b4:34:8b:
64:6a:fe:9a:cf:7a:6b:28:5a:ef:74:88:5b:25:74:
53:55:ec:fc:5f:5a:1d:9b:f0:85:75:e9:fa:0c:07:
46:73:da:25:51:49:dc:3d:13:91:43:86:a8:86:a9:
5e:4c:70:28:76:15:bf:0f:08:b9:5d:62:0c:6a:fe:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:30:18:10:28:7E:B4:B3:DD:EC:5C:38:F4:6D:C4:64:A7:DC:92
X509v3 Authority Key Identifier:
keyid:6B:0C:D6:C4:ED:71:E0:E9:B1:6F:68:E9:77:AB:B5:1D:CA:2E:72:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/awzWxO1x4Omxb2jpd6u1HcouckQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/ED2048C6748A11F1996AF7CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.164.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:73:65:a3:b2:20:d3:45:ec:83:de:c7:5d:7b:0a:26:ad:46:
9d:bd:14:50:60:1d:8e:c2:25:b0:09:5a:85:21:ba:33:d6:a0:
c1:be:2d:d3:eb:c5:34:d0:7a:b4:71:5a:ed:39:eb:f1:cc:22:
00:62:6e:ee:e7:1e:75:62:cc:e6:9c:41:38:e0:dd:fd:45:8d:
a3:db:6c:78:f0:eb:1a:4e:8e:ed:6a:c6:32:ce:28:fc:80:07:
6f:c9:e3:f3:19:44:cd:80:04:76:3c:75:f7:d7:ed:00:fe:df:
fb:4c:34:65:a8:a4:3a:90:a0:ec:e5:74:9e:0d:b8:62:d4:2b:
8c:04:2f:2f:ce:9c:b1:47:41:f4:bc:c0:41:14:bc:22:01:9d:
70:47:22:f0:17:01:f6:1a:15:64:12:3c:30:92:27:8e:9d:18:
e0:21:97:1f:f9:6e:63:d8:a9:19:dd:6c:f4:6a:b7:e3:19:11:
b3:4f:8d:a3:3f:aa:5b:94:67:9f:4a:53:78:09:37:19:c9:08:
1d:ff:d8:ef:37:55:5c:6d:35:90:26:b9:54:dc:1c:12:f1:26:
87:c0:28:47:5d:a0:51:11:33:a3:08:af:2b:76:50:9b:c3:aa:
35:ba:59:76:f7:26:10:99:b0:bc:2b:06:80:36:6d:73:84:67:
4d:e0:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:27 2026 by rpki-client