Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/BFA5C1B46EE511F182B2B000CF1D38B0.roa
File: BFA5C1B46EE511F182B2B000CF1D38B0.roa (raw, json)
Hash identifier: RHRxsNRvUbA0pfWNBDtdMx+zqQGU1sO3I81rRWeYWoQ=
Subject key identifier: 0D:94:9B:67:75:11:46:B9:F8:81:D5:1D:84:7C:E6:BF:85:8B:47:51
Certificate issuer: /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial: 01E9
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/BFA5C1B46EE511F182B2B000CF1D38B0.roa
Signing time: Tue 23 Jun 2026 09:27:27 +0000
ROA not before: Tue 23 Jun 2026 09:27:22 +0000
ROA not after: Sun 30 Jun 2030 09:27:22 +0000
asID: 329393
IP address blocks: 102.210.54.0/23 maxlen: 23
102.210.54.0/24 maxlen: 24
102.210.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Validity
Not Before: Jun 23 09:27:22 2026 GMT
Not After : Jun 30 09:27:22 2030 GMT
Subject: CN=6a3a517f-8c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:d6:87:9f:a7:04:4b:bd:e2:f9:bc:a2:89:
6c:db:1f:e7:f7:66:94:39:f1:0e:07:5f:8f:78:40:
e1:b5:8b:e2:13:0d:9c:15:2e:50:b0:1e:2d:d1:d9:
be:e9:e3:ad:e7:e9:ce:dd:c1:4e:b7:9c:f6:ac:89:
c4:c4:02:12:98:2d:5a:b6:08:12:46:6b:a6:03:d5:
e0:73:db:c2:07:fb:df:37:e0:aa:eb:c1:59:6b:88:
ab:1e:ee:50:4f:7a:cc:ca:87:cf:11:4c:1a:1f:0c:
99:db:76:4d:ce:26:33:9f:3a:11:14:86:6e:1f:3c:
33:28:4d:e8:e2:04:7c:33:33:c2:23:38:ac:8e:0e:
86:9f:b7:7e:b3:9f:b9:cf:85:3b:6e:0d:4a:7c:8e:
ff:2e:73:70:5f:a0:b7:21:e1:42:d2:1c:c9:d5:47:
0f:ea:32:09:65:60:77:a7:44:fe:ba:34:50:fc:50:
2c:c2:5f:ba:09:2a:d2:2d:b4:0f:22:33:ab:7a:ac:
a2:19:f7:fd:e1:bd:fe:5f:26:bc:3e:a3:dc:2f:44:
6f:a8:40:a5:91:24:e5:18:65:56:b1:0c:aa:cc:67:
39:64:5c:46:2a:7d:2e:51:12:fb:8a:ba:9b:d1:1a:
d5:71:f3:c5:16:db:89:87:2a:36:12:9c:64:6a:3b:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:94:9B:67:75:11:46:B9:F8:81:D5:1D:84:7C:E6:BF:85:8B:47:51
X509v3 Authority Key Identifier:
keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/BFA5C1B46EE511F182B2B000CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.54.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:80:ea:de:13:b1:51:44:e6:e2:8f:f5:8f:bc:5a:98:71:93:
b9:0d:57:0a:92:f2:4b:b5:4a:1f:ac:ef:a3:d0:44:e8:f4:a6:
9a:36:09:d2:25:f7:6a:9f:c2:f7:35:6a:1d:6a:ac:6f:a4:4b:
45:b3:26:08:59:f9:a9:cf:04:32:61:04:b5:00:d9:3c:0a:3f:
61:46:4d:73:f4:d3:6f:11:e2:72:f6:a4:3a:f5:fa:b6:5b:44:
de:a1:0c:50:8b:5b:3f:57:8b:4c:8f:dd:c4:e2:3e:27:3a:f0:
8a:76:c8:be:c1:2e:44:11:c0:50:cb:48:e6:d7:e2:ae:17:f5:
b3:da:62:fd:e0:bf:c3:d9:14:8c:b5:8d:0b:d6:59:09:bc:76:
a3:6c:9a:f1:b1:4d:b1:49:60:e6:91:02:91:d4:ac:57:b5:e3:
f6:e3:8e:1c:83:34:b6:0a:18:a6:a4:c7:f5:9e:78:4d:20:dd:
af:35:e1:cb:e8:4c:1e:5e:b1:00:a9:a1:42:4a:6d:ec:90:a7:
5e:75:43:66:62:ff:6e:93:1b:f1:98:e0:62:a2:9c:50:b4:6d:
e6:1b:24:6f:37:12:25:96:45:a9:ee:3e:66:bb:1f:b8:14:e0:
8d:50:ee:dc:54:d4:5e:d0:c5:26:2e:a8:5c:ee:01:f2:48:68:
c9:3e:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:50 2026 by rpki-client