Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/0DBF4A56842A11F1957CDAD3CE1D38B0.roa
File: 0DBF4A56842A11F1957CDAD3CE1D38B0.roa (raw, json)
Hash identifier: Fgl+emJScu5akPkuue+0W6zA/h0FF95KqJIyjubrPFc=
Subject key identifier: 00:D3:BA:2B:89:F7:96:43:00:7B:55:09:4A:1D:50:68:77:44:E0:A4
Certificate issuer: /CN=F36CE290AF/serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Certificate serial: ED
Authority key identifier: 46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/0DBF4A56842A11F1957CDAD3CE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:59:18 +0000
ROA not before: Mon 20 Jul 2026 10:59:14 +0000
ROA not after: Thu 20 Jul 2028 10:59:14 +0000
asID: 14618
IP address blocks: 102.208.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE290AF, serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Validity
Not Before: Jul 20 10:59:14 2026 GMT
Not After : Jul 20 10:59:14 2028 GMT
Subject: CN=6a5dff86-3f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:88:4c:d8:c1:c7:f5:46:14:b6:16:5a:60:
19:05:fd:14:fc:f0:88:12:d5:84:d6:b1:2a:b3:6c:
f4:f8:53:51:fd:84:dc:5b:b3:a1:6a:f6:8b:2d:1c:
98:fd:fd:77:b2:0c:8b:5c:ff:eb:52:f5:bc:ae:a1:
aa:30:bd:9b:32:74:12:b2:4b:ab:06:da:02:c5:03:
e3:01:a6:db:16:62:28:90:96:c6:02:37:4b:40:0b:
9d:02:d5:e5:0f:d3:3f:8a:16:41:73:b5:fc:39:9a:
ad:05:1a:7d:24:d3:90:12:1d:dc:f6:89:1d:f3:9c:
4d:99:44:57:ba:c6:67:b2:07:fa:38:72:14:db:d6:
c7:7f:56:c9:be:8f:17:97:61:b4:23:15:e7:40:1c:
ae:05:ca:e9:35:4f:03:a5:40:40:b9:8a:1e:98:1c:
34:93:4d:a4:21:45:ab:5b:54:ad:03:0f:e2:7b:38:
5a:a3:84:c3:d9:04:da:5b:48:33:1d:2b:9a:cd:27:
1c:69:9a:77:cb:b2:83:63:80:08:4f:ac:22:c8:f6:
42:3d:33:31:59:a3:a7:f4:c1:cf:a5:ad:8e:27:d0:
d8:2c:15:b9:be:bc:e6:a9:1f:03:bb:b6:82:54:14:
ab:95:df:e7:9c:46:9f:95:3f:fa:16:bc:b1:cd:b5:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D3:BA:2B:89:F7:96:43:00:7B:55:09:4A:1D:50:68:77:44:E0:A4
X509v3 Authority Key Identifier:
keyid:46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/0DBF4A56842A11F1957CDAD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.77.0/24
Signature Algorithm: sha256WithRSAEncryption
10:df:40:88:69:a0:c9:ce:ec:49:7d:f6:dd:21:53:23:bc:9c:
22:1c:2d:91:1b:80:1d:47:f2:c0:6c:58:30:fd:02:c0:32:b4:
4d:11:42:a5:27:a5:56:ed:de:3c:ee:1b:73:4d:6a:7a:8d:51:
59:c6:0a:7f:97:9b:4c:e0:c9:fb:40:8b:c5:a0:d5:b1:65:fa:
5c:8f:0e:57:b9:d8:1b:96:0a:3b:90:89:e4:3a:bf:bd:ed:c3:
c2:7b:25:69:40:2a:d4:e4:46:3a:86:61:72:6e:6c:f6:d0:60:
77:4b:1d:43:b1:ed:b3:e9:e3:e7:e7:71:54:12:16:73:67:c7:
41:2a:e9:c7:dd:1e:64:8b:5e:ce:35:7f:4f:49:df:fc:cc:d5:
81:76:9b:62:b4:95:53:05:2a:52:94:94:cb:a2:cc:fe:73:c5:
3e:3f:b9:c8:f7:dd:2e:27:4e:6d:95:74:39:64:03:07:c2:7d:
69:13:c4:2e:83:d6:45:50:ec:20:fc:4a:f2:9c:22:2e:00:c2:
0d:d9:7c:88:3d:7a:4b:89:be:cb:ff:5c:5b:f7:12:b2:78:44:
65:55:39:97:71:5d:3a:9d:1b:04:31:23:8c:c2:a5:f2:fa:56:
d8:ec:72:92:68:9e:e4:6c:41:d4:cb:9e:e3:8c:a8:bc:52:34:
1d:37:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:19 2026 by rpki-client