Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/85158DEA815A11F1B3416CAECE1D38B0.roa
File: 85158DEA815A11F1B3416CAECE1D38B0.roa (raw, json)
Hash identifier: 85eyGHwM0jbpgdjYqk4rzN/rwaRGR253BARYQ7rwefk=
Subject key identifier: 30:D7:03:80:54:B6:2D:E5:AC:55:38:38:78:EF:FB:75:65:A9:D0:E2
Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial: 0382
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/85158DEA815A11F1B3416CAECE1D38B0.roa
Signing time: Thu 16 Jul 2026 21:08:41 +0000
ROA not before: Thu 16 Jul 2026 21:08:37 +0000
ROA not after: Thu 31 Jul 2036 21:08:37 +0000
asID: 37577
IP address blocks: 102.180.248.0/22 maxlen: 22
102.180.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Validity
Not Before: Jul 16 21:08:37 2026 GMT
Not After : Jul 31 21:08:37 2036 GMT
Subject: CN=6a594859-594a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:de:04:f1:43:ec:07:a2:08:97:65:aa:8e:
9d:fd:ca:e2:cd:19:05:62:c1:1a:fc:74:5f:64:e3:
3d:bc:9e:39:41:9a:e6:16:93:25:97:3d:66:59:fc:
71:eb:3b:32:d9:85:bf:2b:b3:0a:87:80:cf:10:4c:
a8:6f:ff:5e:95:37:12:e0:d1:bd:ef:2a:a7:14:14:
16:3f:c5:f4:43:42:de:4f:35:b8:93:b2:d5:14:b9:
35:46:a1:60:47:f9:2b:2c:15:21:3d:d7:1c:0f:48:
9d:6d:0c:28:ac:bb:15:4a:2b:95:04:cc:b4:0e:53:
98:45:ea:fe:bb:ae:33:96:50:51:36:0b:dd:31:fa:
b7:26:c6:8c:ca:c8:2b:08:92:77:5a:bb:bb:ff:da:
26:0f:f7:79:7c:63:25:43:bb:e7:f6:ca:27:b1:9e:
69:4a:86:07:c3:66:5c:bd:3c:2c:43:ae:eb:6a:5c:
1b:fa:60:57:1d:a6:b1:c0:16:93:49:76:01:2f:aa:
0e:a7:3f:01:4b:b5:44:f3:01:3c:5c:81:e5:b1:5d:
f8:71:3d:d6:3c:cb:e2:b4:66:e9:3a:1f:31:a8:87:
68:62:4d:91:5b:9d:d3:9d:66:80:aa:b8:69:40:24:
94:79:ec:00:fc:4c:e3:33:24:e2:17:22:1f:2e:dd:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:03:80:54:B6:2D:E5:AC:55:38:38:78:EF:FB:75:65:A9:D0:E2
X509v3 Authority Key Identifier:
keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/85158DEA815A11F1B3416CAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.180.248.0/21
Signature Algorithm: sha256WithRSAEncryption
79:76:17:0e:23:fd:eb:4b:ed:c3:a1:5f:9b:fe:47:9c:a6:b5:
14:81:82:eb:74:e5:c5:4f:93:44:83:c8:b1:de:24:e7:c2:7e:
33:54:f7:9e:9d:dc:37:93:35:f2:68:a2:41:02:ed:77:03:89:
2a:70:a2:ad:c3:74:a7:3f:c2:c4:7b:3c:16:07:dd:86:db:6d:
ee:20:c2:f5:fd:da:e7:5b:c3:78:36:e7:9c:18:d1:3a:3f:1e:
f8:bf:44:57:42:14:49:ea:f4:db:67:46:be:3f:4a:f1:cb:f2:
76:3f:b6:1d:c6:91:ab:f1:dc:f2:f7:fb:8a:61:4d:0d:e3:b6:
7f:29:1f:f5:2c:48:26:c3:ec:78:b2:c6:e3:ee:89:a5:05:d2:
ee:f3:ff:18:52:47:16:14:56:80:f5:75:4e:6b:b5:3d:2a:26:
7c:42:9d:0a:42:90:ab:a8:48:74:23:70:95:b6:bc:39:3f:62:
a8:47:a4:3b:32:e7:b0:e6:bd:c6:98:50:97:9f:80:d8:b0:c7:
92:99:cc:71:d7:98:88:5d:e4:a2:28:7c:67:5e:0e:68:2c:ef:
23:cc:63:ed:bc:65:bb:05:66:39:23:56:36:a7:26:2c:1e:23:
6e:45:e0:57:a2:1c:68:ed:ef:26:b8:f4:eb:ca:71:a8:f6:ff:
08:de:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:10 2026 by rpki-client