Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/D84805CA842911F1A87FADD3CE1D38B0.roa
File: D84805CA842911F1A87FADD3CE1D38B0.roa (raw, json)
Hash identifier: Bb8BvIkxNfUEG8CAuLAlAE29AWUszoCKzzlh0ch3r/w=
Subject key identifier: D5:F8:F4:3E:2F:5A:35:F3:AD:C8:48:DB:27:15:2A:72:4E:CB:5E:96
Certificate issuer: /CN=F36CE290AF/serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Certificate serial: EB
Authority key identifier: 46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/D84805CA842911F1A87FADD3CE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:57:48 +0000
ROA not before: Mon 20 Jul 2026 10:57:44 +0000
ROA not after: Thu 20 Jul 2028 10:57:44 +0000
asID: 16509
IP address blocks: 102.208.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 05:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE290AF, serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Validity
Not Before: Jul 20 10:57:44 2026 GMT
Not After : Jul 20 10:57:44 2028 GMT
Subject: CN=6a5dff2c-4ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:1c:77:aa:db:fc:42:27:fa:e5:5e:51:ae:
67:0c:0e:4e:43:cf:cb:8e:c5:4f:a1:18:ff:ab:dc:
84:ec:c3:80:12:04:3b:c3:a6:8d:38:92:a0:98:c1:
48:06:df:01:5b:32:ba:d5:40:f2:34:5b:f0:20:9c:
14:04:e9:f4:36:e8:4c:62:c7:ce:e6:a0:90:a7:9f:
33:08:52:30:b9:54:25:37:17:b3:96:63:e9:cc:97:
e9:fa:7e:61:90:94:5f:3f:e5:e3:cb:69:88:94:40:
a8:69:a5:09:cd:05:4a:f8:d5:cb:29:88:1d:da:87:
52:8a:ee:ae:f8:49:62:e7:55:e5:7e:3f:d4:77:1a:
a6:9b:c5:d2:37:c6:66:f0:8b:57:d4:2a:c3:fc:6e:
15:0a:dd:57:44:90:1c:ff:c3:1e:44:13:27:ee:26:
be:a8:b0:c9:fb:21:06:34:32:a5:d8:3c:42:30:0d:
5d:c8:96:cd:45:2c:aa:70:cd:db:9f:7c:54:f5:f0:
65:1f:45:94:bf:8d:cf:6e:91:d7:81:5c:10:5e:46:
db:3b:34:8c:12:6f:aa:f8:a9:77:e9:a8:25:2e:4d:
f5:9c:df:52:13:5d:99:be:e5:65:95:9d:df:7c:7c:
48:36:78:64:e5:3d:ad:cc:a8:83:30:3c:ad:f1:d2:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F8:F4:3E:2F:5A:35:F3:AD:C8:48:DB:27:15:2A:72:4E:CB:5E:96
X509v3 Authority Key Identifier:
keyid:46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/D84805CA842911F1A87FADD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.77.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c8:bd:74:19:6c:11:ff:57:c8:8e:3a:9d:47:cf:29:93:d4:
ad:66:bf:7e:b9:66:c2:70:c0:ba:29:98:73:12:a4:63:96:7b:
ea:db:bf:03:2b:b0:c7:7c:8a:16:59:e6:65:69:ea:59:01:aa:
d0:00:23:44:96:d9:04:49:95:c1:33:65:bf:cb:2e:34:31:46:
6b:d6:61:ef:24:40:ed:ba:a8:7f:72:ea:d8:fd:b4:f6:4b:6b:
4d:46:9b:be:6b:ad:e5:d7:bd:3e:0e:dc:69:e6:da:a4:dd:b2:
88:59:44:09:f1:13:7d:c3:07:d5:dd:b7:62:2f:22:32:54:5c:
89:a6:60:ae:1f:80:11:86:37:e1:58:ad:22:ca:ec:03:47:b5:
3d:ed:05:2e:19:ca:08:cf:22:54:15:56:ec:84:f0:6c:52:df:
a9:3f:ab:e8:4f:16:52:ca:f8:0e:30:11:d1:17:27:a4:31:b7:
10:b9:19:35:c3:47:96:94:6a:2a:d7:87:56:e4:01:0d:d5:d8:
00:90:7b:e0:98:ee:2a:90:f0:52:52:3f:e6:52:4b:b9:23:1c:
2a:4d:de:4b:2b:70:0d:b0:72:06:ff:5d:a5:a7:3b:b7:8b:80:
68:aa:f9:8a:74:12:d6:5f:da:c3:b7:fe:4b:39:e8:75:bc:c2:
21:f0:81:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:42 2026 by rpki-client